Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/394D3F6E5318D3BAB3FFD27ADCD682A155AE7EB80A798A4B9ADE91503078E7EA/0/323830333a386639303a3a2f33322d3332203d3e203634313531.roa
File:                     323830333a386639303a3a2f33322d3332203d3e203634313531.roa (raw, json)
Hash identifier:          QR1ne2ze7+Xig6RtbqLtcWymoyBH6v/v2HcIMz+6eOw=
Subject key identifier:   DF:3D:BD:22:AD:7B:6F:21:67:79:CA:E5:6C:FC:F2:B1:23:37:CE:97
Certificate issuer:       /CN=FDBE98B1AAA1E16F6B1D8AA34DBF70F58948EF19
Certificate serial:       67759EB4A53028BB672A68B7559D7307E1553A16
Authority key identifier: FD:BE:98:B1:AA:A1:E1:6F:6B:1D:8A:A3:4D:BF:70:F5:89:48:EF:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDBE98B1AAA1E16F6B1D8AA34DBF70F58948EF19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/394D3F6E5318D3BAB3FFD27ADCD682A155AE7EB80A798A4B9ADE91503078E7EA/0/323830333a386639303a3a2f33322d3332203d3e203634313531.roa
Signing time:             Tue 04 Feb 2025 18:24:48 +0000
ROA not before:           Tue 04 Feb 2025 18:19:48 +0000
ROA not after:            Tue 03 Feb 2026 18:24:48 +0000
asID:                     64151
IP address blocks:        2803:8f90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:75:9e:b4:a5:30:28:bb:67:2a:68:b7:55:9d:73:07:e1:55:3a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDBE98B1AAA1E16F6B1D8AA34DBF70F58948EF19
        Validity
            Not Before: Feb  4 18:19:48 2025 GMT
            Not After : Feb  3 18:24:48 2026 GMT
        Subject: CN=DF3DBD22AD7B6F216779CAE56CFCF2B12337CE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:a7:cd:bf:d0:e8:4e:5b:71:7a:9d:2b:46:
                    43:b7:cb:d0:a2:24:a5:cc:fc:82:02:32:a4:3e:66:
                    08:45:fd:f8:ea:7d:81:59:25:d9:24:42:2e:50:62:
                    03:cd:dd:96:62:d4:89:c4:4a:ba:e5:63:e6:ba:21:
                    51:43:a1:2a:af:f5:5f:77:8c:97:41:b0:2c:53:ae:
                    99:47:9a:1e:14:4e:04:b4:21:2e:ad:93:e0:85:83:
                    6d:d7:23:ee:49:6b:80:3e:a7:b5:44:fc:98:b0:e4:
                    07:1c:6f:7d:27:49:80:8c:10:a3:60:b6:aa:c2:3d:
                    fb:8c:71:15:dd:36:4a:66:0f:ce:cd:7a:28:ac:23:
                    cc:98:8c:4e:8b:03:ae:c9:5a:0b:69:cd:d7:fb:31:
                    d3:2e:02:40:9d:09:a7:88:98:71:32:0f:4d:ec:84:
                    20:1f:3f:67:16:5e:a6:f0:fa:d4:bb:73:94:fa:e1:
                    fe:da:ed:16:73:f4:1f:ac:2c:1f:03:e8:5e:ec:7a:
                    36:19:36:66:e5:00:cc:94:72:76:a4:30:12:19:54:
                    39:11:da:94:62:83:97:fa:4a:46:c0:31:98:29:c0:
                    59:6d:9a:f2:00:5d:18:4d:cb:bc:ea:de:bd:51:7e:
                    4d:b7:25:fe:74:b5:33:39:b0:1c:06:c1:8c:1f:31:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3D:BD:22:AD:7B:6F:21:67:79:CA:E5:6C:FC:F2:B1:23:37:CE:97
            X509v3 Authority Key Identifier:
                keyid:FD:BE:98:B1:AA:A1:E1:6F:6B:1D:8A:A3:4D:BF:70:F5:89:48:EF:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/394D3F6E5318D3BAB3FFD27ADCD682A155AE7EB80A798A4B9ADE91503078E7EA/0/FDBE98B1AAA1E16F6B1D8AA34DBF70F58948EF19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDBE98B1AAA1E16F6B1D8AA34DBF70F58948EF19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/394D3F6E5318D3BAB3FFD27ADCD682A155AE7EB80A798A4B9ADE91503078E7EA/0/323830333a386639303a3a2f33322d3332203d3e203634313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:f9:eb:ae:b0:5f:b8:89:cd:af:47:92:c4:32:9c:b7:b7:
         78:44:27:e4:9d:c8:a7:7e:d0:20:3b:57:9b:d2:29:31:ad:74:
         84:d8:92:b3:66:28:09:3b:7e:8a:b0:73:bb:65:8c:1a:b0:a6:
         d7:1c:74:4a:75:27:e6:b7:0d:ea:b6:ef:6a:71:eb:57:1b:b7:
         21:5e:52:31:a4:70:9c:56:b0:99:2f:7c:e5:cd:78:01:ab:0c:
         32:a7:3d:3f:0c:9b:62:6f:6d:f8:29:4e:98:c7:b5:a3:7b:fc:
         88:82:64:3a:8a:6f:46:96:88:60:45:e5:9f:e0:1d:4b:50:b1:
         a9:12:0c:97:da:2e:32:2f:39:41:ba:8e:78:3a:17:12:3f:02:
         aa:d6:a0:45:f8:de:cb:a3:c3:3b:93:4a:02:98:58:44:91:ea:
         be:16:50:80:f8:77:42:5d:a7:c7:7f:6d:09:09:ad:2a:eb:8a:
         4c:7e:6a:d1:aa:fa:7b:13:4f:a5:53:32:3c:6d:cf:c5:6d:ef:
         eb:10:66:f3:a5:46:d6:83:66:c9:a5:16:4d:4d:9c:ad:5a:82:
         e5:f7:0c:eb:ea:1b:89:49:a4:83:2b:ee:67:e5:41:e5:14:5b:
         6e:b9:12:cb:49:1d:c0:90:62:a8:cf:f1:23:0f:86:9c:fd:2f:
         5b:5d:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:51 2025 by rpki-client