Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa
File:                     323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa (raw, json)
Hash identifier:          F4JvzpL3AB/DmwPSTY/cI/gZhbbVLVG242kivuadVoM=
Subject key identifier:   13:3F:DA:22:85:8D:FC:27:5D:6D:92:76:2F:65:55:51:68:55:A9:A4
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       6B2276C39121F8AAFE2C5E4123F4EE2875746A0F
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 20:03:26 +0000
ROA not before:           Tue 04 Feb 2025 19:58:26 +0000
ROA not after:            Tue 03 Feb 2026 20:03:26 +0000
asID:                     6429
IP address blocks:        2800:3b0:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:22:76:c3:91:21:f8:aa:fe:2c:5e:41:23:f4:ee:28:75:74:6a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:26 2025 GMT
            Not After : Feb  3 20:03:26 2026 GMT
        Subject: CN=133FDA22858DFC275D6D92762F6555516855A9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:2f:ff:df:cd:52:ed:e6:35:1a:1e:76:5d:
                    15:1b:ae:74:a0:a9:b0:25:d5:2b:5f:e1:16:cd:2b:
                    9b:ec:e6:c5:cc:46:63:d1:67:29:f0:f5:94:49:d7:
                    ff:2d:f2:dc:66:9d:e3:cc:9e:06:8c:02:11:cb:5f:
                    0e:15:ad:3b:2e:51:da:9a:76:04:13:46:71:02:73:
                    4b:53:05:33:c4:f5:7e:3a:72:61:5a:e0:70:5c:83:
                    87:e5:01:f4:4d:be:6b:ac:bb:2b:f9:69:47:f5:30:
                    00:31:15:6a:d5:fd:99:f3:80:3d:79:04:92:85:2c:
                    67:a8:6e:60:32:88:55:22:67:4a:27:7f:46:e5:16:
                    7c:22:e2:67:a8:fb:47:4c:e4:86:af:78:d8:13:79:
                    ae:3e:b4:9a:00:18:bc:84:fd:b7:be:13:18:3c:28:
                    95:db:3f:26:26:08:4b:80:68:14:d4:d3:82:a7:10:
                    b7:98:42:1b:f2:7e:9b:9d:2d:9b:40:15:ce:95:1b:
                    4e:43:3d:f7:63:8f:73:65:ce:66:9a:35:29:b3:5d:
                    e9:9b:79:22:fa:86:cf:e3:54:84:21:1a:d6:6e:03:
                    fe:8b:7a:09:ec:ef:42:97:43:20:35:21:8b:ca:3c:
                    6a:d7:8b:f7:a3:55:11:43:19:61:12:82:3d:36:26:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:DA:22:85:8D:FC:27:5D:6D:92:76:2F:65:55:51:68:55:A9:A4
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3b0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:64:95:72:3c:fc:72:f6:9c:fa:8d:d5:a6:07:e6:06:09:c9:
         22:1e:49:7b:8d:a0:f3:f5:99:0f:38:cf:79:7d:b8:14:43:53:
         57:cd:b9:18:05:1e:44:3e:30:32:c1:69:12:3d:46:83:73:c5:
         38:d6:1c:79:9e:67:6c:7d:7b:65:34:d9:5e:03:09:36:5e:8f:
         bf:d8:1d:a4:e9:af:68:67:3a:cb:6c:c2:91:70:f4:db:28:ba:
         23:19:ca:24:3e:59:cc:3e:ed:34:d5:cb:5d:46:88:43:5c:6a:
         a7:da:68:b0:f0:f0:f7:43:f9:87:a1:34:b7:00:72:fd:c5:13:
         b6:0b:ad:2c:e9:e5:d8:62:1f:7b:66:04:11:a6:30:83:17:d8:
         3d:06:3a:50:3e:2d:17:2e:23:97:43:9c:6e:f0:4f:6b:d8:61:
         78:01:73:57:56:7b:0d:29:20:3d:75:ce:7a:db:d0:32:ae:cd:
         d4:c5:45:81:a2:d5:c1:6d:17:e7:ed:ac:04:9f:db:f7:2b:8f:
         21:17:6d:ca:3a:32:df:dc:f5:f1:c1:b5:3e:d1:9c:80:00:c4:
         ab:40:74:9f:ce:a0:3c:ed:ab:a1:e2:53:cd:76:06:ed:da:99:
         41:99:65:90:78:d7:6e:80:5a:a3:3b:59:e1:08:55:1c:91:72:
         1e:d8:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:55 2025 by rpki-client