Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a336630303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a336630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          BBdqCCfm/AIotZMKuQAUNs9DezAszLRIsZpadAX219I=
Subject key identifier:   B7:AB:74:11:CC:DA:4A:8C:DD:F3:3A:05:37:EC:26:6E:9B:AA:42:31
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       0AEDA76C2936861621598335B4683126CBA39D52
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a336630303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:55 +0000
ROA not before:           Tue 04 Feb 2025 18:09:55 +0000
ROA not after:            Tue 03 Feb 2026 18:14:55 +0000
asID:                     61461
IP address blocks:        2803:d700:3f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ed:a7:6c:29:36:86:16:21:59:83:35:b4:68:31:26:cb:a3:9d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:55 2025 GMT
            Not After : Feb  3 18:14:55 2026 GMT
        Subject: CN=B7AB7411CCDA4A8CDDF33A0537EC266E9BAA4231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:f6:ad:52:9f:65:bd:d5:2a:ed:d8:db:8d:
                    8c:58:35:68:40:91:01:19:b2:e4:b3:66:b7:4d:46:
                    ef:c0:d6:7a:ec:b6:24:d3:9c:04:77:3f:24:7c:9d:
                    41:ad:93:9b:50:94:54:2b:a6:c1:21:36:c0:29:53:
                    56:be:f7:98:ed:8b:b1:7a:67:17:9e:25:53:0b:e6:
                    07:2c:61:6c:0b:b1:71:bb:8b:fb:38:ea:fa:14:55:
                    a1:79:3c:11:e9:2d:4c:39:6f:7a:6e:82:5f:fb:99:
                    cf:02:50:73:d8:08:0a:25:57:e8:52:48:d5:d7:31:
                    49:2e:15:16:96:dc:b3:15:4d:7b:ca:48:8e:a6:e1:
                    a4:39:50:70:5b:6f:35:94:0b:8f:79:77:60:f7:8d:
                    a6:40:b9:32:f7:4a:dd:85:92:22:aa:45:a7:90:7f:
                    15:55:06:e5:2e:fa:04:d6:c3:b9:86:9d:b8:96:e9:
                    08:30:cf:5d:bd:d6:f4:ca:c4:a7:fe:20:61:b7:9c:
                    e8:0d:16:b4:b9:64:97:cd:76:0a:17:a4:01:00:85:
                    a3:12:3c:eb:2c:16:2d:b2:09:77:1d:02:a3:e1:3a:
                    6b:52:b9:55:a8:fa:82:f1:e3:9f:b0:48:87:36:0c:
                    cb:8a:ca:ff:9c:88:36:71:a7:8b:50:68:29:33:fe:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:74:11:CC:DA:4A:8C:DD:F3:3A:05:37:EC:26:6E:9B:AA:42:31
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a336630303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:d0:48:08:5e:3a:d4:79:83:5f:25:2a:25:24:d7:df:db:
         49:15:d2:ca:d0:2b:c5:0e:56:b8:76:4c:48:37:f8:78:6a:d6:
         14:ea:ee:8c:3f:b1:81:7e:0e:da:36:af:56:77:68:0e:72:29:
         b0:19:1e:ca:20:44:97:3e:bc:07:c0:cd:cf:f1:11:4e:04:44:
         ed:13:78:1d:5d:36:bf:1e:29:c5:28:34:ea:f7:c9:ae:f1:8e:
         af:a2:c3:51:77:79:60:22:80:67:9a:c1:d6:85:5e:da:58:59:
         95:02:a5:d2:82:0c:c0:a1:72:8e:dd:59:d0:1d:e4:13:eb:b2:
         2b:98:a9:0e:8e:cf:42:70:21:30:34:36:98:56:41:8c:6c:28:
         d2:90:9e:c4:b9:95:50:59:36:70:bc:8a:78:2a:40:f3:16:9e:
         02:a5:dd:71:e0:0b:67:ed:13:c0:d0:b8:18:a4:5d:a7:d9:2b:
         ff:96:da:7a:c9:6c:e9:1b:bf:4d:e8:32:78:86:83:2f:c6:8a:
         36:5a:1f:bf:99:6a:d0:c8:bf:75:56:f0:63:85:12:04:fa:d1:
         9f:f0:9b:66:68:11:85:fd:85:81:d2:9f:22:c8:16:80:b5:da:
         65:39:d0:38:4a:98:59:cb:9c:59:6a:b5:67:f5:b6:50:7a:2d:
         f1:52:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:25 2025 by rpki-client