Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa
File:                     323830313a3162633a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier:          9/BpiuvchZFj33wyDEJeMfmuGkoSZKWIThzPAUfBADg=
Subject key identifier:   8F:50:B5:72:AA:DB:2F:C4:BC:64:CC:A2:CF:FD:04:72:5F:F2:DE:85
Certificate issuer:       /CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
Certificate serial:       6C1D1EA9431CCAEF51DA925438A192DA2C08192A
Authority key identifier: 3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 20:02:55 +0000
ROA not before:           Tue 04 Feb 2025 19:57:55 +0000
ROA not after:            Tue 03 Feb 2026 20:02:55 +0000
asID:                     27951
IP address blocks:        2801:1bc::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1d:1e:a9:43:1c:ca:ef:51:da:92:54:38:a1:92:da:2c:08:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
        Validity
            Not Before: Feb  4 19:57:55 2025 GMT
            Not After : Feb  3 20:02:55 2026 GMT
        Subject: CN=8F50B572AADB2FC4BC64CCA2CFFD04725FF2DE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:9c:bd:33:70:79:79:05:97:41:93:b0:6a:
                    b3:e5:46:5d:c6:e8:6c:cd:f1:a9:48:3e:8c:d8:f3:
                    ba:c8:ae:0e:6a:a4:02:50:20:f9:56:a5:c7:f5:80:
                    86:23:b8:e4:4d:09:17:1e:83:26:91:10:c8:05:84:
                    bc:9b:9d:06:1d:29:5c:d6:8b:46:8c:67:05:69:bb:
                    ae:57:7c:31:29:89:b8:0e:e2:a6:e3:85:2a:16:4c:
                    d3:75:bb:a5:4c:33:f3:39:2e:8b:90:fe:74:db:79:
                    46:aa:08:07:0b:ad:b0:60:86:f4:16:09:62:8f:0c:
                    31:53:ef:98:e7:e3:60:0e:6c:ba:45:ba:77:9a:8e:
                    4f:5f:28:32:e8:1a:96:d4:8d:18:2b:74:c8:f8:2f:
                    c8:d7:11:f5:cf:8a:32:19:b8:80:95:83:38:9c:fe:
                    87:2f:88:05:2e:fc:66:31:ce:ea:d6:02:b7:0c:f6:
                    68:3a:9c:ba:62:45:75:98:fa:80:46:83:0e:73:91:
                    ea:b2:97:cc:07:e8:f0:f6:76:66:7e:01:0e:95:25:
                    4b:13:e0:76:bd:a9:d6:6e:84:70:ff:06:be:47:41:
                    b5:3a:bd:9c:cb:38:10:99:71:66:7b:d5:64:de:d0:
                    fe:c1:9e:e1:72:16:31:e2:dc:35:36:cd:29:cb:4e:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:B5:72:AA:DB:2F:C4:BC:64:CC:A2:CF:FD:04:72:5F:F2:DE:85
            X509v3 Authority Key Identifier:
                keyid:3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1bc::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:08:38:6e:df:11:33:b6:78:ef:8b:63:98:49:90:f8:52:c8:
         d4:2f:d2:4f:39:da:04:ce:2f:df:06:6b:ff:50:7f:3e:29:10:
         29:4d:3b:de:ee:c5:8c:f3:1d:df:45:25:07:33:e6:a1:34:aa:
         16:db:68:f3:6e:80:5f:76:d7:76:b9:ec:be:1f:c8:cc:25:34:
         e9:a1:aa:90:2a:ce:ca:ad:3e:59:97:20:37:80:69:a2:47:dc:
         c6:cb:35:29:19:14:af:c9:61:21:ba:b9:24:60:e9:90:3e:05:
         a8:e4:07:2f:8d:62:5e:f8:36:81:33:81:5a:19:1a:22:b8:2b:
         a3:c4:60:0b:5f:04:af:9a:fe:17:44:32:9a:c7:6b:80:bc:1c:
         a6:ae:b2:66:4d:97:6f:d9:fc:a5:39:a5:a4:46:a7:aa:4d:72:
         3d:66:8d:6d:59:72:a9:21:c6:a9:51:41:8f:db:eb:b5:f9:5a:
         ce:fc:2e:e7:ea:0b:cc:65:84:7d:f2:df:4d:58:ca:0e:a2:e6:
         dc:96:fc:da:54:ad:f7:1d:7e:9b:db:35:1b:5b:09:e1:f6:04:
         5a:e4:9f:fb:d9:ba:fc:e9:1d:c2:3d:57:e5:ef:cd:39:9d:a2:
         19:2f:c7:12:98:11:7e:33:bb:85:8c:36:12:46:89:0f:76:5b:
         a6:f8:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:04 2025 by rpki-client