Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa
File:                     323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa (raw, json)
Hash identifier:          SSLK6hbYj9qXklhUwKCDBgygOVCAVVt4ouUKSkwrito=
Subject key identifier:   F6:45:65:B4:99:2C:D0:3E:66:56:65:7A:FD:5C:E0:FB:4A:B5:E5:0E
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       77F1FDD30FF651249EDC534E165CB39A2D4096DC
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:33:43 +0000
ROA not before:           Tue 04 Feb 2025 18:28:43 +0000
ROA not after:            Tue 03 Feb 2026 18:33:43 +0000
asID:                     52468
IP address blocks:        2803:4580:8210::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f1:fd:d3:0f:f6:51:24:9e:dc:53:4e:16:5c:b3:9a:2d:40:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Feb  4 18:28:43 2025 GMT
            Not After : Feb  3 18:33:43 2026 GMT
        Subject: CN=F64565B4992CD03E6656657AFD5CE0FB4AB5E50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1b:a3:ef:29:be:14:9b:bb:cd:bb:e7:ed:d6:
                    d9:41:d7:84:6d:d8:dc:b4:10:ec:e6:64:ce:98:91:
                    2f:84:f3:6d:54:e9:0d:f8:4a:e0:41:51:ac:d4:9d:
                    5f:21:38:4f:16:fd:1f:71:38:e7:49:f6:33:72:46:
                    de:33:99:db:2c:10:10:1c:46:6a:20:60:9c:4a:73:
                    d9:39:99:9c:f5:68:ac:a9:c3:bc:05:da:7a:2b:1a:
                    e1:f6:3e:23:9d:2d:95:62:fd:d9:74:35:44:19:f1:
                    a0:1c:52:e5:8e:93:5a:54:b0:fb:6b:ed:ce:b2:e1:
                    5d:7a:64:5f:0d:1d:3c:79:32:9d:15:df:21:99:ee:
                    0f:53:23:e4:df:a5:d2:c3:a1:8a:4d:7f:94:8a:dd:
                    9f:1d:96:ff:b2:9c:8d:ec:ca:e0:19:ee:5b:ff:40:
                    4e:69:c8:d8:a8:30:26:cd:94:09:50:f1:2d:05:df:
                    21:73:94:a9:a3:58:00:0a:18:ca:79:51:8b:62:d1:
                    d8:7f:8e:de:b6:fd:3a:2e:5a:e0:07:23:81:a9:4c:
                    64:a8:c2:43:8b:a9:80:16:b2:46:4a:3b:de:66:40:
                    0e:38:fc:08:88:04:a7:f7:fc:0c:ff:dc:59:c6:40:
                    c2:15:a2:fe:b2:39:d6:8b:52:43:a6:a1:6e:93:6f:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:65:B4:99:2C:D0:3E:66:56:65:7A:FD:5C:E0:FB:4A:B5:E5:0E
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:9a:4b:22:4b:2b:ac:9d:15:aa:b1:61:54:10:68:ab:72:
         f8:38:1a:b8:0b:1c:fb:a0:ed:87:af:21:7a:cc:9f:9e:0a:fb:
         53:80:bd:62:8a:5c:90:67:86:d1:09:af:ec:9d:7f:ea:ec:27:
         95:89:f1:41:ce:68:89:62:f0:a6:4e:14:72:0d:4b:23:3b:1d:
         06:d5:98:27:bb:5a:87:1a:a6:5c:cc:2c:3b:0d:f9:82:3e:8e:
         71:40:b6:ec:08:3c:40:32:3c:04:33:39:0a:df:0c:67:b1:96:
         7d:c3:f4:ba:71:9a:e5:58:a5:1c:a1:f0:3e:ad:7b:50:92:e2:
         ce:ac:d5:1f:41:bb:cf:f2:81:04:3c:92:f5:e6:eb:f4:6c:b8:
         64:9d:ce:bc:c0:02:16:0e:7c:7b:29:32:a0:80:9f:62:10:6c:
         a6:6a:ae:f4:5a:34:93:4f:7a:80:d6:85:2a:42:65:0c:99:66:
         71:7d:06:3a:59:b2:cb:b2:52:84:7a:90:d6:5b:dc:1f:5c:15:
         39:30:b5:00:f2:31:de:87:61:3a:ba:44:df:7d:6a:df:4a:19:
         6e:a0:33:d8:e7:61:01:65:dc:fa:89:f3:ef:59:43:2c:4a:9e:
         76:0c:98:d6:dc:88:7a:23:b6:dc:b8:aa:b9:07:9a:a3:e2:56:
         ed:bb:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:00 2025 by rpki-client