Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa
File:                     323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa (raw, json)
Hash identifier:          VlGhYcvnQAKFzCb9awkWyulraYhMTCuu39QxF0Tx13k=
Subject key identifier:   4B:63:32:72:36:99:44:E0:5B:03:4F:F9:08:20:AD:41:10:4B:52:F0
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       2890CD472D58663979690571E87079E46C05C02B
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa
Signing time:             Tue 04 Feb 2025 18:45:50 +0000
ROA not before:           Tue 04 Feb 2025 18:40:50 +0000
ROA not after:            Tue 03 Feb 2026 18:45:50 +0000
asID:                     270143
IP address blocks:        2806:3df:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:90:cd:47:2d:58:66:39:79:69:05:71:e8:70:79:e4:6c:05:c0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Feb  4 18:40:50 2025 GMT
            Not After : Feb  3 18:45:50 2026 GMT
        Subject: CN=4B633272369944E05B034FF90820AD41104B52F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:1e:7f:f8:29:ac:0a:2e:e4:c5:cf:39:b7:
                    7e:0b:96:be:d9:62:3a:ed:6b:55:f0:aa:ca:ed:85:
                    08:6b:f3:5d:83:a8:40:eb:ea:56:e8:1a:34:2a:44:
                    ad:a6:08:59:5b:80:67:ed:4f:11:ed:7a:2c:8f:69:
                    8a:fb:fa:2c:49:ff:23:57:df:56:27:8d:0f:a7:7c:
                    1a:22:ce:a7:59:19:32:5e:16:9f:5e:8e:46:b9:5e:
                    78:d0:f9:ac:bf:f1:52:d9:84:e3:8d:4d:13:35:9d:
                    73:17:a1:b3:b0:53:26:0d:7b:09:c6:cb:cb:3a:e3:
                    d6:8a:77:61:9c:56:1e:34:5e:e4:7a:ae:4a:11:62:
                    be:d9:b8:f9:56:42:80:30:c0:40:6a:94:bd:16:b2:
                    ce:f6:ee:28:99:41:e4:14:2c:24:fe:1e:d9:ed:42:
                    88:84:8d:bc:7e:b9:63:b2:2f:a7:fe:4a:6a:a0:31:
                    f9:e5:02:ee:61:48:5f:c6:f0:68:6e:1e:48:2e:0d:
                    cf:f9:3f:37:34:02:14:28:75:83:e1:e5:cb:c4:dd:
                    a4:54:18:6f:5c:6e:35:3e:c8:9e:cd:81:32:87:7a:
                    51:b8:08:d4:05:9b:5a:65:0b:ba:91:2e:23:4b:64:
                    9a:00:e4:a4:9f:bc:d9:9a:1d:c4:21:84:80:88:28:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:32:72:36:99:44:E0:5B:03:4F:F9:08:20:AD:41:10:4B:52:F0
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:fe:70:d8:eb:fb:0d:8c:1b:a5:7f:c7:35:71:48:65:72:
         2c:62:6b:82:a5:4d:59:e8:12:5e:b6:05:7e:54:26:55:f3:4e:
         22:b9:60:8f:a0:64:d2:0c:b3:eb:dc:ec:b4:18:1c:53:b6:07:
         09:61:bb:0f:1a:ee:c5:d1:1d:99:b2:19:ae:e2:7b:e5:75:46:
         9c:f7:b1:d6:58:66:c2:78:56:f0:d0:c5:fc:24:71:8f:ff:7b:
         af:f6:39:76:3c:29:bd:18:95:99:1a:1a:d6:58:b2:dc:ec:e2:
         3d:d2:99:2c:ee:4a:fd:a9:0e:6a:dd:31:ed:cc:b1:b4:70:36:
         de:7c:a0:39:01:6e:b6:b9:fb:b5:96:a3:4e:9d:f1:80:6b:3a:
         4c:76:67:e1:7e:6e:a7:91:67:da:ba:64:fa:bd:f2:a5:ab:7a:
         7a:26:6b:ef:e5:77:45:ba:46:9b:20:08:0d:5e:51:dd:57:e4:
         b4:35:d9:a2:6e:32:79:ec:e9:29:de:be:6d:f8:7d:8d:e6:44:
         c2:6e:1f:06:aa:ab:41:40:52:2f:e1:dd:72:2d:26:c6:6a:04:
         81:dd:4f:1d:6a:7b:c9:a1:b3:ee:5a:be:74:c2:c3:5a:21:3e:
         f8:32:0f:2b:dc:10:12:f2:0f:b0:b6:c6:21:60:8d:cd:06:76:
         ea:68:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:06 2025 by rpki-client