Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa
File:                     323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa (raw, json)
Hash identifier:          tDJcDxHAFGgMRlMRCvnXGx4tvvXYdTkuiPRaG4BFVzI=
Subject key identifier:   7B:74:10:AD:6F:C2:A7:78:63:CD:92:75:AD:F9:DA:DD:3E:38:B0:F2
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       64D51ECDDDBD8F69116F16C6745F190301D0D922
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:50 +0000
ROA not before:           Tue 04 Feb 2025 19:55:50 +0000
ROA not after:            Tue 03 Feb 2026 20:00:50 +0000
asID:                     16629
IP address blocks:        2800:590:2000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:1e:cd:dd:bd:8f:69:11:6f:16:c6:74:5f:19:03:01:d0:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:50 2025 GMT
            Not After : Feb  3 20:00:50 2026 GMT
        Subject: CN=7B7410AD6FC2A77863CD9275ADF9DADD3E38B0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:da:c2:e3:97:d0:8f:0d:44:e8:fc:8c:73:
                    a9:60:89:49:51:d3:42:d0:ba:e3:0e:b6:a4:e3:f1:
                    a3:a8:7c:1a:07:cc:13:aa:17:0f:be:a7:9a:66:44:
                    8a:5d:6b:5d:ac:48:69:2e:84:e4:41:87:ce:d7:0c:
                    c5:1b:51:0f:66:45:a8:ce:7b:3a:e0:28:44:54:8b:
                    be:59:07:e1:a6:84:01:92:f6:b2:98:6c:7f:58:a2:
                    e4:23:d1:80:76:5b:e7:66:fe:dc:8c:c0:13:cd:e5:
                    57:ad:71:12:0d:91:42:40:87:aa:f4:d7:c7:7b:b2:
                    1d:f5:5d:aa:58:8a:81:01:ea:96:97:43:bb:9d:c6:
                    37:55:98:e8:c8:cf:54:19:e4:54:91:bc:1d:eb:45:
                    bc:2a:de:f0:0a:34:72:86:1d:3d:ef:3c:d4:c6:bc:
                    06:1a:c0:4a:30:02:45:c1:c0:72:49:34:91:25:1e:
                    27:8f:f1:2d:3d:09:2d:d4:aa:89:97:df:9d:9c:63:
                    a1:4c:15:a6:15:9a:7f:cd:b7:c1:7f:0b:cd:3e:e8:
                    b3:7a:1c:cf:c0:d8:dd:b2:1b:d9:5b:07:db:42:b6:
                    df:42:d2:d1:3d:90:04:1c:54:ed:fe:b2:12:82:4d:
                    03:32:c0:d6:12:81:f5:ab:a8:ae:bc:fc:9c:cf:51:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:10:AD:6F:C2:A7:78:63:CD:92:75:AD:F9:DA:DD:3E:38:B0:F2
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:590:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:63:16:0b:2c:e6:97:2a:3a:29:07:7f:fb:8f:26:91:7c:
         7b:7c:e2:6f:d1:49:e2:2f:0b:35:da:f6:cd:59:ba:ee:e5:3d:
         3c:a6:93:90:53:d4:b0:fd:b2:db:bf:0c:bd:57:85:af:70:36:
         ed:21:7a:98:2e:fa:bd:2c:5f:35:4e:9b:a9:e0:ae:9e:ae:2e:
         6e:c7:a5:42:54:7a:a4:92:4a:bf:aa:f7:b6:f2:83:37:c2:66:
         52:d6:0f:d0:51:59:33:98:47:d9:c3:5c:8d:8d:3f:48:bd:5c:
         07:f6:5d:a5:ea:19:18:79:e6:5f:7f:a2:fa:73:6e:09:9c:0d:
         18:09:8a:45:b4:6e:27:29:cd:01:b2:78:ef:a0:45:cd:a4:85:
         36:e2:e7:7a:ee:f0:6c:ee:ee:2a:55:42:80:19:88:f3:b1:90:
         85:d6:e8:dc:a9:64:07:83:58:95:42:dc:b1:36:2d:fa:87:fd:
         2b:0f:75:78:ba:3d:6e:0b:83:4d:0c:7c:5e:cf:51:bc:01:14:
         0a:e0:d8:06:c6:13:94:3b:51:7c:73:cf:80:5d:48:88:cc:75:
         42:2a:ca:d7:ce:64:2e:bd:91:ae:fc:90:dc:3a:17:71:37:94:
         9e:cb:f2:a0:5d:ac:98:51:70:fe:c9:a5:4e:65:2b:c9:60:f0:
         6c:86:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:54 2025 by rpki-client