Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa
File:                     323830333a356639303a3a2f33322d3438203d3e20323733303834.roa (raw, json)
Hash identifier:          zr2cQeqpIQ+jOV5R0f0eiqTcTOekIJw1uPneof6yEQE=
Subject key identifier:   7E:DB:A6:2B:06:88:20:D7:A1:44:D2:44:BA:B8:B4:9D:71:A6:17:D9
Certificate issuer:       /CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
Certificate serial:       7F28BFE26BAB041AD0B7E2F4732465EE9EDB5912
Authority key identifier: 34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa
Signing time:             Thu 20 Feb 2025 01:10:19 +0000
ROA not before:           Thu 20 Feb 2025 01:05:19 +0000
ROA not after:            Thu 19 Feb 2026 01:10:19 +0000
asID:                     273084
IP address blocks:        2803:5f90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:bf:e2:6b:ab:04:1a:d0:b7:e2:f4:73:24:65:ee:9e:db:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
        Validity
            Not Before: Feb 20 01:05:19 2025 GMT
            Not After : Feb 19 01:10:19 2026 GMT
        Subject: CN=7EDBA62B068820D7A144D244BAB8B49D71A617D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:a0:57:07:69:21:72:28:ac:99:f0:b9:a1:
                    e0:96:b8:65:9b:b2:f5:63:95:ba:de:c1:a0:a6:b4:
                    68:8c:8b:8d:cc:b7:19:5b:b1:48:44:50:fd:32:af:
                    09:6d:6b:dd:ba:0b:5e:44:ad:27:c8:39:44:7d:d7:
                    69:af:dd:3a:06:eb:c3:a1:76:3c:90:49:05:56:e2:
                    4a:89:b2:2b:bb:2d:ea:b4:33:8a:25:2e:e2:a2:a8:
                    2c:fc:56:6b:82:af:8a:2c:e2:1d:db:57:11:6a:f2:
                    36:6b:95:3f:8c:7d:d5:d5:06:eb:a7:6b:8d:11:fc:
                    74:e7:74:30:70:57:83:04:eb:12:07:8e:3a:c8:66:
                    61:5e:ec:d5:01:ae:3e:7e:26:00:62:87:2a:f8:34:
                    88:b1:e5:95:db:54:60:90:4e:93:75:fc:e9:19:46:
                    da:bc:be:df:7a:16:13:5e:08:65:6c:57:04:bf:ed:
                    6c:82:5b:f8:1d:a2:a4:a4:54:b5:45:48:46:b4:fb:
                    b9:f2:7d:01:fb:c7:10:09:7c:28:cc:23:b2:3b:2c:
                    6b:46:3a:5c:4e:9d:d8:cf:02:5e:b0:c0:d2:cf:e8:
                    56:12:aa:fb:bc:5f:8c:cd:7c:a5:02:f2:c6:c9:72:
                    95:8d:24:45:cb:72:26:32:a0:36:42:29:95:e3:bc:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:A6:2B:06:88:20:D7:A1:44:D2:44:BA:B8:B4:9D:71:A6:17:D9
            X509v3 Authority Key Identifier:
                keyid:34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:40:43:c1:9f:3a:60:b0:49:45:d9:2f:f2:97:89:77:ec:71:
         4f:f0:fc:4c:aa:9f:e4:cb:e7:03:27:86:40:b3:c0:46:6d:13:
         7d:c2:09:ab:ac:b2:58:66:4d:b0:4a:6b:57:38:f3:50:16:80:
         05:74:f8:3c:c4:9f:8a:94:e2:77:40:1f:b4:f8:ec:ca:02:c5:
         91:95:c5:8e:2f:23:69:08:3a:7a:ce:e6:c6:70:48:f4:4e:4a:
         0c:9d:9c:1d:a3:5a:0f:3e:55:36:a2:18:7d:36:d8:8b:f8:7b:
         bb:98:50:9d:61:60:59:bf:c3:69:82:d3:d2:14:e0:4c:a7:7c:
         29:69:26:84:e0:47:6b:53:9b:dd:0c:cd:7b:b0:45:37:b4:93:
         3e:48:15:84:f3:e1:36:b9:9b:61:cf:7b:37:cb:ce:e1:4c:81:
         25:7d:0d:33:d6:f9:b2:17:76:96:03:6a:70:56:8f:1c:2c:a4:
         f5:d8:8a:9a:0f:62:cc:86:15:b6:b7:ec:d7:2c:43:9d:90:e3:
         9c:92:a6:7d:71:35:30:85:3a:19:05:01:ae:8e:71:e4:71:26:
         b7:14:09:4e:3e:98:9e:4f:5f:2b:e3:ba:2d:dd:6c:c7:ea:c1:
         07:21:49:ca:bd:e3:f1:6a:8d:bb:15:12:27:15:fc:49:d4:ce:
         ca:f5:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:41 2025 by rpki-client