Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          nAJeqI4IX0NPNtCGlJnPC1tZUZBIfwYv3md3N+3kftY=
Subject key identifier:   F8:B5:F5:4A:37:12:2B:39:EB:2C:D3:C3:B3:E1:8D:0C:6B:97:28:42
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       7769CE1E5F121E6B8AC6E85A29F87EE6416B5907
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:55 +0000
ROA not before:           Tue 04 Feb 2025 18:09:55 +0000
ROA not after:            Tue 03 Feb 2026 18:14:55 +0000
asID:                     61461
IP address blocks:        2803:d700:8200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:69:ce:1e:5f:12:1e:6b:8a:c6:e8:5a:29:f8:7e:e6:41:6b:59:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:55 2025 GMT
            Not After : Feb  3 18:14:55 2026 GMT
        Subject: CN=F8B5F54A37122B39EB2CD3C3B3E18D0C6B972842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:c4:57:c5:cd:17:a5:7c:6b:a1:81:c2:9a:
                    63:0b:dc:37:93:89:fa:75:12:1c:27:41:12:90:78:
                    a3:90:4b:17:5f:23:4e:ee:3a:04:10:1a:8d:61:ca:
                    24:a4:bb:e2:59:d1:96:5b:11:96:9b:83:6e:b3:1a:
                    5a:8f:04:bb:01:f4:80:19:5e:56:aa:45:70:a5:e6:
                    2b:fd:b3:80:05:fc:b1:60:a2:07:bf:7d:36:0a:65:
                    67:7a:42:57:f5:ab:c4:39:32:a4:eb:3e:ea:97:d0:
                    71:9f:ed:2f:c9:b3:93:60:10:3a:b7:6d:e8:1f:01:
                    f9:70:60:35:b4:99:d1:1b:25:7f:d9:ec:5f:fa:b9:
                    ed:24:42:86:a7:7b:19:bb:92:46:ce:0c:8d:b6:4f:
                    ca:07:e8:39:86:fe:c9:43:14:78:6c:05:a2:16:fa:
                    91:ab:e8:a2:28:68:e4:85:cd:77:c1:f5:fc:c9:c8:
                    80:93:d9:e2:6e:49:0c:f5:9e:63:19:19:75:92:e1:
                    79:0d:cb:00:68:05:cc:ac:bd:eb:da:30:7a:8a:ef:
                    9a:03:a2:0d:2d:e6:ea:39:05:27:18:b9:dd:09:c3:
                    e7:b7:8b:71:56:df:a2:79:35:49:cb:10:cb:15:96:
                    87:54:31:fe:a6:a5:31:24:1d:db:10:2e:53:cc:b2:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:F5:4A:37:12:2B:39:EB:2C:D3:C3:B3:E1:8D:0C:6B:97:28:42
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:09:22:90:4f:73:b2:b9:79:8b:28:dd:2e:eb:1e:dd:1e:0e:
         63:ca:e2:42:cb:1b:a5:43:7d:12:00:26:e9:de:07:28:27:cc:
         4c:17:81:1a:2c:ff:cb:b4:c7:e3:f1:d5:3e:0d:63:9e:4f:68:
         c9:31:e0:be:0d:a2:51:c4:3f:22:6d:9f:3b:83:d1:f8:ed:90:
         ea:83:d4:b9:a8:66:be:3f:3c:ca:9b:76:f3:96:84:2b:33:6e:
         66:f6:96:17:b9:f8:8c:d1:43:1f:71:72:9d:a9:b0:9d:e7:c6:
         60:1d:0e:d3:d4:bf:ef:b0:c2:6f:50:f2:ee:99:4e:94:e2:70:
         d6:81:fc:61:31:b2:cb:00:b1:4b:d1:64:36:ae:6e:4a:7b:b5:
         c6:99:84:f6:97:0e:50:08:c6:d7:70:0d:27:cb:b0:0c:85:73:
         46:37:bd:cb:d8:1a:b4:49:f8:a8:25:22:90:ef:dd:3d:fd:bd:
         d6:65:db:b4:2f:b0:1f:0a:48:fa:2a:29:7d:99:ad:b4:ac:c8:
         d2:74:88:45:19:2f:83:b5:60:50:4b:95:e9:c4:1a:ba:fd:47:
         ce:fc:3d:79:69:f3:c8:a2:be:66:71:70:47:2e:0c:a0:b7:81:
         59:56:74:af:a5:ab:57:62:69:fe:4f:45:ce:b0:6d:cd:66:d2:
         30:64:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:22 2025 by rpki-client