Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa
File:                     323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa (raw, json)
Hash identifier:          5NSOkXEqNammgro9XuAQfAm86PQq0mf58MRJKxGLSy4=
Subject key identifier:   F3:B2:28:E7:B4:54:14:8B:92:C3:25:12:C1:7D:D5:09:96:DB:4C:8D
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       61100DA00CB9B5861AA3EC5420583FD1B860B120
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa
Signing time:             Wed 19 Mar 2025 06:05:00 +0000
ROA not before:           Wed 19 Mar 2025 06:00:00 +0000
ROA not after:            Wed 18 Mar 2026 06:05:00 +0000
asID:                     6535
IP address blocks:        2800:3b0:3000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:0d:a0:0c:b9:b5:86:1a:a3:ec:54:20:58:3f:d1:b8:60:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar 19 06:00:00 2025 GMT
            Not After : Mar 18 06:05:00 2026 GMT
        Subject: CN=F3B228E7B454148B92C32512C17DD50996DB4C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:10:d7:53:b2:fe:11:e5:6a:f2:0d:05:5d:
                    f8:4b:1b:df:e9:7e:23:5d:36:43:c1:0a:63:07:cd:
                    ba:9f:c9:71:d6:e1:a0:63:92:55:fa:6f:b3:b0:64:
                    36:f0:4c:3d:c8:fd:03:3d:47:f2:bf:e3:71:f3:54:
                    9f:69:9d:b5:9a:d5:d4:67:de:2f:82:b7:c8:a5:46:
                    e1:08:55:f7:aa:3a:fe:ee:f2:8f:22:0b:06:fb:ce:
                    ad:5f:00:c4:1a:39:6d:08:00:18:61:14:c4:85:18:
                    a0:01:27:a5:02:26:a6:e8:be:cb:9d:3e:6b:15:39:
                    c9:b6:6f:1a:82:b1:f8:86:06:80:47:1a:7e:2b:3f:
                    12:2c:28:e1:c0:b8:7c:c3:e8:3f:d8:f1:34:a7:f9:
                    94:05:61:4c:38:9e:a2:fa:96:02:d7:7f:55:1e:94:
                    b9:59:35:c5:3c:68:c6:b1:7c:c7:9d:b5:08:ca:ce:
                    b5:7e:9e:fb:1e:7f:fc:ed:9d:30:fb:06:36:5f:ee:
                    2a:8b:9e:0b:9e:ea:97:08:61:91:81:44:77:ba:cf:
                    2c:88:43:3e:43:48:cb:32:62:7c:4b:95:77:4d:8b:
                    9c:e8:3d:43:9f:57:37:f4:f9:43:f2:3e:fd:77:b3:
                    a2:c1:ce:23:1a:18:23:a7:1b:eb:78:24:29:d5:0d:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:28:E7:B4:54:14:8B:92:C3:25:12:C1:7D:D5:09:96:DB:4C:8D
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3b0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:06:e9:eb:d1:64:44:9e:94:56:61:33:79:6c:c7:5e:c8:
         0f:5c:1c:92:94:d3:e2:57:b3:86:19:e5:0a:e7:8a:b5:3c:dd:
         1c:8c:7f:62:fe:33:9e:8c:ab:91:6c:3d:67:e8:ae:02:67:9b:
         2e:bf:eb:e4:97:d8:d7:72:02:8b:69:a2:91:d3:c4:1d:76:77:
         bd:ea:01:b1:93:e1:16:6d:16:59:b4:8b:0c:a5:a7:52:79:d3:
         e0:0a:6a:0a:fc:0f:b1:9b:df:cc:c6:82:44:a3:f5:cc:e9:01:
         00:a9:5e:0c:cf:40:07:b0:e3:53:e7:b2:ff:95:01:12:52:b5:
         8c:05:37:08:c6:de:9d:88:cc:0e:d1:81:a3:1c:95:a0:cf:32:
         c8:cf:8c:6b:47:4f:f0:da:ac:49:de:5f:a2:1b:0e:0a:99:45:
         4f:f1:b1:08:87:a6:cc:54:94:f7:2a:16:94:42:be:70:18:45:
         40:6e:11:e3:40:d9:f6:1e:cf:7c:83:13:5c:41:49:36:5b:0a:
         4d:01:38:10:ee:0d:70:b3:02:fd:6e:0f:af:cf:62:fb:33:82:
         51:c4:c6:b0:90:ea:86:8d:0c:0a:70:11:e8:ed:ab:17:c7:76:
         29:98:6b:65:0d:d8:22:a2:73:06:d2:97:fe:b9:31:9a:51:3e:
         2d:03:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:31 2025 by rpki-client