Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          SB2zZU0xdU0hAGX0gJJ1V7uJC+Hb0MEF1jd7ASp6bxg=
Subject key identifier:   CA:6B:A3:57:41:FB:6F:3B:10:6C:D4:56:CD:27:6F:43:10:76:32:FC
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       1496BEC4FAA3B5D09C11C92B5A5A3484F7AA07E1
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:31 +0000
ROA not before:           Mon 10 Feb 2025 20:04:31 +0000
ROA not after:            Mon 09 Feb 2026 20:09:31 +0000
asID:                     262182
IP address blocks:        2803:f00:700::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:96:be:c4:fa:a3:b5:d0:9c:11:c9:2b:5a:5a:34:84:f7:aa:07:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:31 2025 GMT
            Not After : Feb  9 20:09:31 2026 GMT
        Subject: CN=CA6BA35741FB6F3B106CD456CD276F43107632FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:e5:c6:7d:dd:65:54:85:8f:07:76:4a:6b:
                    c4:b8:3b:6b:7e:8e:4a:86:a4:84:2f:29:b3:55:34:
                    4f:86:1b:d4:ce:f1:9b:a0:e6:4a:dd:41:5e:3a:68:
                    7b:a1:ba:a2:b0:7b:6a:07:74:16:f5:52:2a:7c:dc:
                    3c:41:ea:fd:7e:3d:56:79:1f:86:61:71:82:c4:7f:
                    0b:f2:98:74:84:fd:ab:b7:77:df:57:a0:3c:28:00:
                    8e:7d:7a:3a:f7:59:ea:d0:cd:e7:db:25:12:ea:f9:
                    14:18:81:65:0b:62:e9:80:92:a4:e2:ee:35:45:d5:
                    8a:ed:13:ce:d2:e4:99:c7:ae:cb:94:bc:e5:74:75:
                    eb:6d:b1:89:3a:a7:69:a6:b1:a0:5d:04:df:d0:d7:
                    84:c5:db:3a:9a:50:1e:d9:af:6b:9a:01:ca:82:5b:
                    e4:5f:52:d4:f7:4a:68:87:6d:56:ef:30:4e:3a:5d:
                    a5:dd:52:b1:e2:9e:13:3e:a9:72:e8:8d:17:65:a4:
                    ff:b8:6c:58:1e:60:87:10:79:51:e2:fd:5f:55:fe:
                    4e:75:c9:2c:50:99:dd:d3:da:b0:2d:74:e4:8f:99:
                    1d:c3:38:18:22:7a:35:9f:f1:4f:46:80:75:e4:fa:
                    74:c2:ad:91:ec:ac:06:d9:29:7e:ee:9a:b1:db:eb:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:A3:57:41:FB:6F:3B:10:6C:D4:56:CD:27:6F:43:10:76:32:FC
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:700::/42

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:1a:01:89:70:fa:65:f5:85:e4:cb:09:62:2c:09:d6:c8:
         e2:05:ce:3b:37:7f:02:b0:7b:d7:cb:75:9d:d0:64:cc:63:9e:
         25:2e:e8:55:94:98:de:60:36:43:64:fa:ae:9f:3f:9d:2e:66:
         62:5f:bc:49:cb:11:ca:9c:66:6c:2b:1f:f5:74:30:56:19:66:
         7a:6e:70:5e:cf:89:49:5e:77:04:fa:be:df:2d:a6:69:60:cb:
         c4:f3:ef:64:a2:7a:1b:9c:9e:52:47:1e:b6:2f:85:bb:1b:33:
         1c:92:c3:c6:d8:42:81:93:aa:a9:07:18:5e:21:f1:fd:37:a2:
         8b:10:c5:68:48:e8:3d:81:49:43:b9:78:9e:a0:dc:12:17:99:
         a8:7f:0b:ff:13:34:81:5a:a5:04:03:ee:0d:06:da:3c:85:8f:
         36:21:56:b1:80:2d:dd:15:fb:38:69:c7:89:47:b0:33:b3:22:
         f8:e8:65:7c:e3:94:a2:2b:08:3e:70:9e:e0:46:bd:ca:f8:f4:
         8a:4e:63:e4:48:14:29:57:69:04:82:fe:37:da:9d:50:5d:7f:
         87:2d:95:cd:59:15:c0:da:64:dd:78:c3:ca:f6:76:96:02:4d:
         5d:a6:ef:63:5c:4f:32:dd:2c:a3:d2:a5:01:62:0d:6c:a7:79:
         9b:bd:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:04:53 2025 by rpki-client