Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/323830333a363430303a3a2f33322d3332203d3e20323632323231.roa
File:                     323830333a363430303a3a2f33322d3332203d3e20323632323231.roa (raw, json)
Hash identifier:          SSgy9i4WK5V5NLMvC8ZebyhD5aUEtI8vLgi5iHEkdaQ=
Subject key identifier:   37:09:53:93:DB:EC:23:88:85:BD:88:9E:77:CA:7B:A4:20:AC:9A:30
Certificate issuer:       /CN=C16940956C9D4811364B5F0969082CDFA737DE6C
Certificate serial:       665877D5865A494F579214C8347DA0149BCA7FF4
Authority key identifier: C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/323830333a363430303a3a2f33322d3332203d3e20323632323231.roa
Signing time:             Tue 04 Feb 2025 20:01:19 +0000
ROA not before:           Tue 04 Feb 2025 19:56:19 +0000
ROA not after:            Tue 03 Feb 2026 20:01:19 +0000
asID:                     262221
IP address blocks:        2803:6400::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:77:d5:86:5a:49:4f:57:92:14:c8:34:7d:a0:14:9b:ca:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16940956C9D4811364B5F0969082CDFA737DE6C
        Validity
            Not Before: Feb  4 19:56:19 2025 GMT
            Not After : Feb  3 20:01:19 2026 GMT
        Subject: CN=37095393DBEC238885BD889E77CA7BA420AC9A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:ed:30:39:3c:4a:60:61:a6:80:7e:7b:78:
                    15:e8:17:b0:47:58:a9:e0:86:8b:af:e0:fb:a7:18:
                    04:d2:88:ab:7f:ad:d6:77:6a:29:d5:4e:b7:f8:fa:
                    4c:30:86:b6:1b:54:fd:da:c1:26:ca:31:de:6e:3d:
                    26:d0:1a:75:21:f1:eb:7b:c3:b6:4c:e4:c6:28:fa:
                    42:76:24:58:8c:fc:22:4d:a4:44:17:69:3a:c4:a9:
                    55:0a:91:02:c2:4c:37:0d:db:4d:b3:91:5f:cb:9d:
                    96:71:17:85:f3:40:22:1e:df:c0:92:e7:3d:6e:3c:
                    f4:23:07:9c:66:9b:f3:4c:a6:c5:57:a1:13:03:17:
                    97:63:ff:fc:61:ba:de:b2:07:3f:15:7d:b0:6c:03:
                    bf:5c:8e:31:e9:ba:6c:44:ef:74:d7:3f:1e:a0:c3:
                    d8:c8:b1:d2:4f:21:b8:a8:6c:2c:2e:32:29:c1:b2:
                    4b:9c:39:ca:1f:84:ac:0b:be:5a:37:28:1a:d9:89:
                    26:aa:75:cc:e1:cd:0c:63:60:14:6b:88:57:ef:9f:
                    ba:fd:c0:b0:66:2e:1d:b3:07:6f:65:e1:d8:87:4a:
                    ab:53:b1:a6:34:3a:c7:7d:aa:00:f1:1d:e5:50:6c:
                    a6:e9:3a:23:6d:13:a8:53:ed:94:29:6b:49:34:d1:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:53:93:DB:EC:23:88:85:BD:88:9E:77:CA:7B:A4:20:AC:9A:30
            X509v3 Authority Key Identifier:
                keyid:C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/323830333a363430303a3a2f33322d3332203d3e20323632323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:74:94:68:8a:83:8e:60:ea:5c:3c:04:c3:74:ce:d6:5d:4b:
         45:0b:05:12:84:0b:78:99:69:55:60:46:54:c9:98:c7:fe:fe:
         08:c2:ad:d6:7c:d6:0d:58:23:d8:0c:3e:e5:f5:12:e7:72:54:
         4c:d2:32:a5:17:b4:21:9a:ff:f8:0a:6d:a8:d4:c7:43:02:d8:
         ff:42:b9:2f:83:9f:c8:f9:74:ac:ac:35:4d:6f:9e:c2:27:e1:
         64:09:9a:59:aa:d4:6e:56:c3:17:c4:9e:33:36:33:67:c6:da:
         8c:93:9c:9f:db:65:ef:0b:9e:61:7a:91:8b:bf:45:ef:f3:96:
         f0:07:25:00:51:19:ac:31:9d:ba:21:75:2d:f2:13:39:ba:4a:
         42:b6:e7:fb:4c:97:2c:04:23:ca:44:de:61:30:e1:46:6e:cc:
         16:4b:6f:fd:55:fd:f3:77:87:96:c7:31:e4:71:02:da:0f:9d:
         81:b5:99:f1:ab:ab:bb:c0:99:64:25:20:4a:9a:b9:9a:6c:86:
         fb:14:71:a7:53:85:f4:63:b4:a9:04:15:2f:9e:9b:d6:66:5b:
         7b:8c:f6:6c:f4:45:0f:3f:17:b6:1f:0c:04:08:2c:ff:e6:61:
         e8:91:52:55:25:33:bd:86:18:87:af:0f:e2:9b:d2:85:8b:db:
         87:51:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:13 2025 by rpki-client