Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          mL0uJheRiS6/yWc42dcLXqFbLB50KjAod7gIqIoVQlc=
Subject key identifier:   35:04:C5:53:FF:9A:8E:5F:84:80:A2:E1:80:62:36:C8:F9:1C:2D:E1
Certificate issuer:       /CN=3D231E14A658422E6C228D7F5D07188E2FED88C5
Certificate serial:       77803C240C55122B252B6A5C4D12E00F22419E9E
Authority key identifier: 3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:31:06 +0000
ROA not before:           Tue 04 Feb 2025 18:26:06 +0000
ROA not after:            Tue 03 Feb 2026 18:31:06 +0000
asID:                     27951
IP address blocks:        2801:10:3800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:3c:24:0c:55:12:2b:25:2b:6a:5c:4d:12:e0:0f:22:41:9e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D231E14A658422E6C228D7F5D07188E2FED88C5
        Validity
            Not Before: Feb  4 18:26:06 2025 GMT
            Not After : Feb  3 18:31:06 2026 GMT
        Subject: CN=3504C553FF9A8E5F8480A2E1806236C8F91C2DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:21:8d:10:ce:86:46:f2:90:e8:8a:bc:d7:
                    0e:6f:3b:a2:00:a2:75:36:71:ed:a1:0d:2e:14:6e:
                    9d:7a:4b:b1:42:be:48:29:ce:93:d3:f2:40:a8:e9:
                    e8:43:9d:ae:ad:c6:b2:37:a6:51:19:41:8b:0e:e4:
                    7b:48:ed:62:86:68:76:a2:db:e2:01:28:a9:a9:47:
                    7c:f3:de:f5:7d:26:36:57:71:b2:6f:bd:d0:21:0f:
                    02:e4:d3:f2:b4:c4:93:dd:53:5c:77:a4:6b:26:6d:
                    83:0f:cb:06:6e:64:b4:6b:bb:eb:65:0e:8b:d0:23:
                    5d:16:01:a5:fc:7e:a0:62:5c:95:49:76:25:51:ad:
                    e5:f5:8c:a9:c2:f8:f1:e0:e2:64:45:80:cd:0c:bd:
                    ac:fc:1d:d3:a8:e4:cb:e0:81:43:bd:3a:ed:d4:8e:
                    cc:0b:c2:41:7d:fc:f7:06:38:aa:bb:f7:e0:0a:86:
                    c4:fe:e2:af:cd:63:1c:92:e1:4e:d8:bc:a0:78:ae:
                    be:8c:4d:30:12:f2:ea:4a:05:0f:ea:7e:81:52:89:
                    75:00:1b:ca:df:d9:63:bf:7a:27:d1:02:c8:28:4f:
                    b2:e1:88:f0:b6:81:26:a4:07:b5:9a:c8:e1:77:bf:
                    79:cc:cb:64:76:d5:bb:cc:4c:a4:24:5b:fb:44:48:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:C5:53:FF:9A:8E:5F:84:80:A2:E1:80:62:36:C8:F9:1C:2D:E1
            X509v3 Authority Key Identifier:
                keyid:3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:d7:b4:4b:9c:32:69:15:31:f0:39:b3:f0:a6:49:62:ad:
         51:95:cb:1f:77:fd:b0:c1:44:08:81:ac:65:c7:8a:56:32:46:
         7c:7e:8c:34:92:bf:93:44:0c:9b:5d:b4:36:cd:f1:33:de:ca:
         60:32:ff:85:16:42:dd:90:80:ed:0c:92:16:28:d9:d6:59:30:
         cf:24:61:e3:08:6c:f2:e1:9c:55:25:2a:c6:ca:18:11:95:cd:
         dc:1b:5a:78:89:0c:86:5d:fa:25:4d:a0:ac:5f:6c:74:0c:79:
         fe:37:97:22:c7:f8:aa:13:53:a2:98:93:07:47:fd:70:39:1f:
         d0:3b:6f:d0:e0:6c:c6:f5:f6:53:70:25:a2:9a:43:ec:ea:b7:
         11:03:9c:ae:27:8f:7e:9e:91:70:07:09:53:2a:08:e7:25:65:
         e8:38:fd:a2:18:c7:5b:24:54:f7:e8:fb:02:fd:5b:37:f7:b1:
         18:d2:fe:5c:89:42:37:72:7e:99:45:70:de:86:19:08:9f:47:
         d9:39:05:b4:ca:34:38:8d:5e:0e:d4:00:93:27:53:77:49:2f:
         0e:d3:30:a3:3e:06:ed:6e:56:5d:55:ee:c1:99:2b:a1:24:6c:
         18:49:ee:cc:1a:0c:9e:d5:f6:89:e3:4c:4c:41:5b:0d:ee:b1:
         a2:27:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:30 2025 by rpki-client