Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/323830333a613936303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a613936303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          vPOfi2Pzg/UZhvifiK6Q6pHdD1DqPi0lrEyLLD+AURY=
Subject key identifier:   39:82:F0:D3:5E:97:DE:11:76:7D:D6:45:27:D8:21:2B:A0:E2:04:20
Certificate issuer:       /CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
Certificate serial:       79A638D08756C38F99A09537FC1B79535BA9FD0D
Authority key identifier: 12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/323830333a613936303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:16:59 +0000
ROA not before:           Tue 04 Feb 2025 18:11:59 +0000
ROA not after:            Tue 03 Feb 2026 18:16:59 +0000
asID:                     61466
IP address blocks:        2803:a960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a6:38:d0:87:56:c3:8f:99:a0:95:37:fc:1b:79:53:5b:a9:fd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
        Validity
            Not Before: Feb  4 18:11:59 2025 GMT
            Not After : Feb  3 18:16:59 2026 GMT
        Subject: CN=3982F0D35E97DE11767DD64527D8212BA0E20420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1e:e9:f0:f2:2a:6f:ac:67:92:0f:eb:56:5e:
                    d0:4d:21:ac:a8:a0:72:d6:ff:d5:bf:fb:cd:9f:3e:
                    19:b1:17:e5:0d:1a:ff:a8:3d:dc:26:ba:17:8c:2e:
                    8e:cb:15:f0:a3:ab:f1:6b:99:1d:08:61:a3:f5:e2:
                    8a:93:a7:6b:a2:84:b1:66:1e:5c:6d:24:9e:1f:52:
                    52:ef:01:6d:39:fa:21:c6:54:b5:d3:f8:cc:ed:9b:
                    47:d3:3d:cc:ed:2a:b8:35:e5:64:47:b5:96:d2:e2:
                    98:4b:ed:82:3a:73:7f:56:f1:90:0a:c0:eb:2d:d3:
                    9a:8d:d9:84:84:3c:5f:33:f3:9c:1c:4d:89:09:55:
                    b3:d4:f2:b6:3e:8b:4d:74:32:ef:93:03:1d:2e:08:
                    19:59:68:85:49:76:33:15:69:88:c2:4f:a8:a4:05:
                    0d:bf:c1:9c:dc:1e:75:dc:bb:fa:89:1c:d4:62:bd:
                    49:31:63:8b:ff:0a:7a:cc:3a:b5:b4:dd:ec:f3:19:
                    24:8f:20:83:61:5c:45:15:45:4a:d0:94:bc:7b:e2:
                    6e:c0:0d:30:c3:55:93:1d:d3:c0:b2:09:59:95:4b:
                    2c:a9:e5:a6:35:6f:e3:ea:cd:cc:1a:da:b2:fa:53:
                    58:56:f4:9e:39:69:5c:07:47:9f:a1:16:d2:62:d4:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:82:F0:D3:5E:97:DE:11:76:7D:D6:45:27:D8:21:2B:A0:E2:04:20
            X509v3 Authority Key Identifier:
                keyid:12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/323830333a613936303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a960::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:d8:19:d1:dc:cc:0b:0c:fb:64:42:bb:10:8b:43:75:00:
         01:42:48:8a:97:fc:5a:02:8c:3f:10:8b:a8:55:02:e4:a4:40:
         60:84:b2:7e:cf:8d:e1:4c:33:30:35:ef:ce:93:59:3d:76:0b:
         73:37:3b:36:e4:74:66:d6:6a:b5:ea:81:8b:31:2d:c7:d8:38:
         51:4d:f3:26:a1:7e:7f:29:76:7d:3f:68:4f:e5:c9:7f:0d:37:
         fe:ae:b4:2d:57:02:a9:b7:39:98:d1:83:c6:5c:65:97:4c:65:
         55:b2:46:58:54:c6:43:f3:7a:70:d1:cb:22:b0:e8:65:13:53:
         68:cb:e8:d9:c2:52:30:91:89:14:97:a4:de:e3:c5:93:a9:f1:
         40:d9:bb:2f:d0:96:05:6d:48:51:f1:e3:d2:65:4b:bb:f8:d8:
         8b:7c:71:47:db:32:d6:65:03:04:09:16:a4:25:0d:ae:8b:df:
         1b:7d:80:2a:76:f4:6e:d8:8b:c0:87:8c:70:eb:07:b2:a9:85:
         83:7a:93:e5:bb:65:b5:d1:83:ef:31:98:ce:81:b4:cc:fd:7e:
         81:48:b2:bc:d3:ae:23:c4:77:23:8c:99:66:93:e6:a1:7a:bf:
         10:f4:93:ef:5b:72:4e:6c:4c:44:81:6e:d8:db:72:b9:78:f1:
         f5:bc:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:07:54 2025 by rpki-client