Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa
File:                     323830333a366436303a3a2f33322d3332203d3e20323639373639.roa (raw, json)
Hash identifier:          KmnyGd+BiB/yprd/hMYr4/yVzoiuARgTeGxSZSlr/po=
Subject key identifier:   FE:8C:39:F2:93:51:82:21:C4:F7:9F:81:1F:49:1B:9A:D8:A3:56:94
Certificate issuer:       /CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
Certificate serial:       17B72049AAA167CC01A03D61F4A07D4C5F9B3D53
Authority key identifier: 77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa
Signing time:             Tue 04 Feb 2025 18:12:51 +0000
ROA not before:           Tue 04 Feb 2025 18:07:51 +0000
ROA not after:            Tue 03 Feb 2026 18:12:51 +0000
asID:                     269769
IP address blocks:        2803:6d60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b7:20:49:aa:a1:67:cc:01:a0:3d:61:f4:a0:7d:4c:5f:9b:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
        Validity
            Not Before: Feb  4 18:07:51 2025 GMT
            Not After : Feb  3 18:12:51 2026 GMT
        Subject: CN=FE8C39F293518221C4F79F811F491B9AD8A35694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:06:b3:27:11:f7:9a:11:9a:a0:53:48:c0:
                    63:ba:20:c9:fe:26:55:ec:bc:27:d3:77:08:63:d4:
                    cb:d3:c7:03:e5:78:68:98:10:99:b7:42:84:52:50:
                    c0:08:c3:6f:bd:d2:34:8c:d5:9d:2c:94:17:21:5d:
                    67:79:7a:d6:a2:c0:8b:1a:f7:71:ec:78:59:8c:e5:
                    c4:66:98:b2:71:22:18:d7:b5:38:6d:f2:22:1f:c2:
                    7d:e5:3e:5a:ff:44:57:9b:2d:bf:e3:6a:2a:13:da:
                    a5:0c:85:33:6e:00:6e:88:da:7e:44:2d:a9:3d:a0:
                    a2:fa:2a:d9:48:ab:72:95:e3:b9:89:49:9e:be:f3:
                    5d:c2:dd:eb:df:d4:a7:39:1a:3f:b1:85:5f:af:5c:
                    2f:25:13:80:a8:41:9a:12:15:e9:e5:ec:57:55:d7:
                    81:e3:15:33:86:e6:e9:04:ca:11:e5:22:9e:1c:37:
                    5d:93:fc:9c:04:0a:bc:e2:1e:0d:3c:fb:9d:86:99:
                    0b:96:87:78:c3:96:2b:e3:d7:64:b8:96:df:b2:5a:
                    42:a6:ef:2a:07:9f:23:dd:91:87:23:a4:e5:c7:d6:
                    7b:df:f2:5f:b3:67:8d:34:0b:af:32:0c:b7:9e:36:
                    75:ed:48:4a:74:78:b4:64:f8:92:2b:7f:f2:59:d8:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:39:F2:93:51:82:21:C4:F7:9F:81:1F:49:1B:9A:D8:A3:56:94
            X509v3 Authority Key Identifier:
                keyid:77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:20:cd:24:41:07:96:41:c8:f0:e3:46:a3:c5:53:25:09:c2:
         65:89:e5:db:ff:2b:50:9e:f0:0e:16:02:6c:f0:ed:36:96:23:
         14:6f:80:f4:fe:30:a1:f0:1a:45:17:a7:77:76:43:5e:45:b3:
         fa:cf:4b:f6:37:50:36:21:04:41:f7:bb:24:e6:ea:19:10:ad:
         46:f2:c1:90:ae:74:f8:8b:52:1e:af:2b:94:13:78:bb:a5:11:
         95:77:d2:93:04:4b:9c:83:10:63:24:2b:e2:f1:2a:90:ad:ed:
         a3:51:44:55:71:fe:9b:10:43:a1:0c:5e:f0:ff:97:d5:95:a8:
         55:0d:07:37:1d:ab:32:fc:1c:23:0d:c8:70:90:4e:6f:04:f4:
         02:6b:21:9d:b4:e6:51:d8:5e:92:c1:7a:b8:70:1b:6b:4b:76:
         84:d3:ec:1f:4c:58:a0:16:a5:a3:2f:96:72:8d:01:19:3b:c0:
         1e:04:5f:d3:f6:8d:ed:7a:97:11:9c:0e:eb:3e:e6:14:46:af:
         2d:f3:87:3f:1b:4c:24:06:a0:65:f8:f1:48:45:52:3b:14:27:
         5b:29:6e:49:62:5e:36:68:7d:90:ed:55:f6:fa:0c:40:0d:20:
         5d:83:63:93:ac:78:ee:e3:c1:eb:9a:9a:36:35:8d:ce:c8:99:
         ed:02:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:06 2025 by rpki-client