Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393530303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393530303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          dIWfskyKjxlrtgUuv3M+/sHCTTQwjB7oEfzIq+uL/q8=
Subject key identifier:   58:22:9F:99:6B:96:A9:BF:EB:82:4C:E6:5B:FC:54:61:22:F4:3E:CC
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       5AC27E07BE0E7179C693A53565C8BA297E35313D
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393530303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:47 +0000
ROA not before:           Tue 04 Feb 2025 18:09:47 +0000
ROA not after:            Tue 03 Feb 2026 18:14:47 +0000
asID:                     61461
IP address blocks:        2803:d700:9500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:7e:07:be:0e:71:79:c6:93:a5:35:65:c8:ba:29:7e:35:31:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:47 2025 GMT
            Not After : Feb  3 18:14:47 2026 GMT
        Subject: CN=58229F996B96A9BFEB824CE65BFC546122F43ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:8f:6c:e7:c0:fa:08:c0:dc:ea:fd:2c:d6:
                    11:10:58:55:29:f0:22:b7:21:c6:ac:f8:25:3f:a9:
                    01:41:60:6e:f9:19:e2:c9:b5:5e:f8:24:22:31:71:
                    1f:b1:92:ca:b1:15:43:07:3f:69:9b:f3:2c:ff:b8:
                    41:87:af:17:fb:ee:1a:f4:7a:9e:1a:f7:47:2c:c9:
                    36:85:62:66:b6:ab:a3:2c:83:24:f1:26:8a:63:d7:
                    33:af:ec:06:ca:0c:84:56:69:5d:7a:b3:d7:a7:31:
                    b1:7c:54:ec:d9:b0:07:77:0b:a7:f6:c0:37:ff:93:
                    e4:26:96:c5:75:4b:46:ea:58:52:84:00:d0:55:09:
                    1e:cf:ab:14:90:cb:a6:de:a8:bd:fd:2a:8a:54:1b:
                    a1:47:bd:5b:d8:57:1d:ac:75:c2:74:24:37:d6:89:
                    a6:f9:73:b1:e5:60:30:68:bc:2e:18:05:af:9b:16:
                    12:6f:27:4e:94:e9:d6:c9:b7:26:e3:53:17:24:d6:
                    49:7f:43:63:7d:5d:69:6f:1a:7e:f0:44:98:66:bc:
                    43:75:77:50:dc:bb:ca:cc:c8:ca:55:47:72:31:26:
                    09:a1:fa:96:5c:25:ac:18:28:af:ee:4d:a5:e0:c1:
                    59:28:1e:95:cd:f5:bb:2f:06:91:a1:60:9c:09:5a:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:22:9F:99:6B:96:A9:BF:EB:82:4C:E6:5B:FC:54:61:22:F4:3E:CC
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393530303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:72:75:53:b7:8c:96:d9:6f:07:82:71:2b:75:92:7e:bd:
         ac:88:b0:77:c0:d8:60:7a:03:cf:22:5a:7b:f1:41:3d:3c:48:
         7e:02:7e:71:09:16:6b:75:b5:e2:e3:ca:5e:8b:03:a5:17:42:
         dd:00:f4:2a:98:2b:db:41:76:46:be:9a:3f:43:92:57:35:ff:
         da:63:62:78:b2:97:19:86:eb:62:11:e4:3e:fe:df:81:ca:4b:
         37:d8:84:cb:0c:c0:e9:01:eb:13:4f:07:9a:ef:af:41:c3:90:
         09:81:82:9a:8c:b9:64:5f:c1:2a:fb:c5:dc:f9:5b:26:a6:b4:
         14:38:00:53:e3:41:77:fc:e5:e6:fa:1f:5e:7c:c1:37:c1:d3:
         8e:65:ee:04:98:03:8c:f8:d6:a2:51:1e:8f:3e:58:c1:02:ae:
         f2:7f:7d:57:62:e8:5d:36:cb:45:44:5a:98:cd:74:16:f6:f0:
         22:68:19:db:7e:af:6c:5e:40:bd:31:2a:61:ec:86:1a:0f:5b:
         22:fc:5d:f7:e1:65:fd:5c:0c:21:d7:3e:81:cd:a5:c7:24:37:
         72:4b:56:1f:23:a9:12:ea:b8:4c:c7:40:19:c9:cf:7c:8f:20:
         f1:38:94:19:cd:4f:6c:10:00:57:ff:53:88:f8:8f:c9:97:c2:
         5d:f9:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:35 2025 by rpki-client