Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/323830333a373039303a3a2f33322d3634203d3e203634313339.roa
File:                     323830333a373039303a3a2f33322d3634203d3e203634313339.roa (raw, json)
Hash identifier:          d4/Bg89hZ80aqHssOiJDEhFQK3QWiCQW0Bqx1eMIrds=
Subject key identifier:   5C:D8:68:AA:B8:F7:F0:47:E0:D7:BB:FD:D2:A9:B1:25:03:A4:59:BC
Certificate issuer:       /CN=0D74784D7E5E292D48F736FFEB50979227E438E3
Certificate serial:       3735516BF22971A7E1CA2DFBBFB217ABBE257EF8
Authority key identifier: 0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D74784D7E5E292D48F736FFEB50979227E438E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/323830333a373039303a3a2f33322d3634203d3e203634313339.roa
Signing time:             Tue 04 Feb 2025 19:59:48 +0000
ROA not before:           Tue 04 Feb 2025 19:54:48 +0000
ROA not after:            Tue 03 Feb 2026 19:59:48 +0000
asID:                     64139
IP address blocks:        2803:7090::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:35:51:6b:f2:29:71:a7:e1:ca:2d:fb:bf:b2:17:ab:be:25:7e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74784D7E5E292D48F736FFEB50979227E438E3
        Validity
            Not Before: Feb  4 19:54:48 2025 GMT
            Not After : Feb  3 19:59:48 2026 GMT
        Subject: CN=5CD868AAB8F7F047E0D7BBFDD2A9B12503A459BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b1:6b:ed:a2:09:f4:21:90:59:de:62:e6:4d:
                    4e:8a:0b:9d:e5:f3:9a:58:18:32:55:9a:04:91:4d:
                    3a:82:93:fa:28:73:b3:7c:71:21:a9:12:5a:93:27:
                    77:ee:09:f6:17:7a:f0:84:ef:49:12:d3:d0:3f:b4:
                    bc:4e:b8:a6:48:14:66:ab:87:84:d8:ee:ab:0f:9a:
                    cc:fc:68:3e:38:27:e9:bb:1f:82:06:7b:e1:0c:8d:
                    94:4b:52:4f:a1:2f:db:be:0d:bd:f7:6c:ff:07:ae:
                    38:de:b7:87:ee:46:7a:13:62:af:2a:65:a1:3f:09:
                    1b:50:19:7c:e1:ae:a1:61:a6:24:30:e3:67:57:c9:
                    a9:aa:79:e6:1d:8e:d7:63:47:4a:98:04:b6:8a:25:
                    1a:00:ab:78:3d:34:57:af:a6:de:a4:bf:df:e3:41:
                    6c:23:3f:66:8b:c1:15:5b:21:b4:d6:17:47:31:89:
                    dc:d1:ca:67:3b:38:09:16:99:4f:af:51:af:a4:d0:
                    4a:e0:53:cd:5d:ca:0f:1a:6d:cb:92:31:1b:25:69:
                    09:39:aa:62:7f:f9:20:b1:6d:81:a3:76:42:04:51:
                    36:30:53:a4:e9:da:f0:7f:9c:86:b6:f3:12:57:24:
                    5e:c7:d1:be:2a:8b:c4:9f:02:38:43:da:bc:f9:ec:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D8:68:AA:B8:F7:F0:47:E0:D7:BB:FD:D2:A9:B1:25:03:A4:59:BC
            X509v3 Authority Key Identifier:
                keyid:0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/0D74784D7E5E292D48F736FFEB50979227E438E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D74784D7E5E292D48F736FFEB50979227E438E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/323830333a373039303a3a2f33322d3634203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7090::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:df:d1:df:f4:ac:ea:65:e3:01:13:8d:bb:1e:5a:79:ef:
         eb:d6:e0:a5:a9:04:ae:2f:ed:7e:8a:e3:e6:6d:95:01:95:16:
         c8:19:0c:39:fa:9d:f7:c4:9d:56:48:10:3b:d2:ff:46:8b:90:
         d3:5a:42:6a:68:47:cb:c1:13:7f:bd:77:2a:98:79:c8:d4:00:
         60:e4:46:89:02:a1:7f:76:d9:ab:9c:1b:14:1b:14:2d:12:cb:
         f6:57:02:bd:6a:10:dd:4c:14:46:aa:64:ff:94:af:7a:e1:c7:
         00:3b:f4:db:86:20:83:91:47:d4:8c:58:b0:c3:96:f9:4d:b9:
         e2:4c:d8:df:9b:29:3b:5a:d7:25:25:cc:71:e3:23:68:4a:8b:
         a7:a2:ad:cd:59:94:19:f4:7c:07:61:ce:0a:4e:67:25:0e:0f:
         9f:85:a1:70:ec:f0:38:05:c7:ba:c9:04:05:08:24:89:6d:6a:
         23:5e:f8:72:42:72:8c:63:0b:75:40:8b:34:df:ef:2c:5a:b9:
         79:54:6c:1a:ef:82:1b:a8:6f:8b:59:b3:46:b0:eb:20:1d:4b:
         a2:44:b8:98:19:55:2b:b8:d4:a1:5c:2b:2c:a4:2e:ca:3d:96:
         00:a9:20:8b:ed:fa:96:57:11:f0:96:ef:c8:20:8c:b7:7a:65:
         eb:da:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:44:03 2025 by rpki-client