Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a383030303a3a2f33362d3336203d3e203237363935.roa
File:                     323830303a65613a383030303a3a2f33362d3336203d3e203237363935.roa (raw, json)
Hash identifier:          yPx3yEA51JxHVT/VS/iRiweB5ujxTCC51OEfyYVn1Kc=
Subject key identifier:   74:FE:FA:C3:CF:F2:7C:BD:E9:39:86:57:86:A0:7C:AD:28:F1:AA:E9
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       77BBDEA6BB866F68406961CB00817E1835607991
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a383030303a3a2f33362d3336203d3e203237363935.roa
Signing time:             Mon 16 Dec 2024 19:20:03 +0000
ROA not before:           Mon 16 Dec 2024 19:15:03 +0000
ROA not after:            Mon 15 Dec 2025 19:20:03 +0000
asID:                     27695
IP address blocks:        2800:ea:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:de:a6:bb:86:6f:68:40:69:61:cb:00:81:7e:18:35:60:79:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:03 2024 GMT
            Not After : Dec 15 19:20:03 2025 GMT
        Subject: CN=74FEFAC3CFF27CBDE939865786A07CAD28F1AAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:69:80:65:a1:f7:c7:c2:5a:c1:0d:85:73:
                    67:f4:b2:88:b9:17:4c:26:ad:3e:c7:80:22:f6:56:
                    47:ac:4c:b1:f1:ef:d7:a8:92:bb:79:82:b1:2e:c0:
                    7f:9c:0e:b2:71:89:67:5e:f8:4a:2c:ac:78:af:d2:
                    ae:1a:47:63:b6:a0:e4:4b:e2:9f:46:32:6f:b5:8b:
                    13:0d:49:ea:a0:41:a3:96:93:ad:c3:bc:3e:3d:02:
                    c8:0a:d2:0f:17:e9:05:93:97:08:f9:0b:8e:40:f3:
                    35:a6:45:6c:98:d8:80:33:37:0b:9e:33:f7:b6:a2:
                    44:b0:e6:ca:99:8f:5a:7c:4e:9a:b8:c8:ac:8f:6b:
                    36:35:7c:81:57:1c:91:a4:25:0e:25:95:fb:4b:41:
                    84:9e:ed:d9:42:2c:46:1a:58:7f:96:32:c6:4a:eb:
                    67:61:3e:ec:74:63:36:f2:5f:a0:10:8d:de:51:48:
                    a2:29:b6:b5:0a:a7:02:31:de:6b:f0:ed:c5:d5:9c:
                    0c:54:9f:5e:5c:38:f5:60:3f:c9:ca:32:7b:b0:3e:
                    8d:b5:71:88:a9:52:33:e7:02:1d:e2:15:1c:8b:ea:
                    f6:19:6a:b0:52:e2:3c:ad:96:21:6f:3b:29:6c:eb:
                    f8:fe:de:7b:d2:5a:8c:e6:ab:4e:95:59:58:56:47:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:FA:C3:CF:F2:7C:BD:E9:39:86:57:86:A0:7C:AD:28:F1:AA:E9
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a383030303a3a2f33362d3336203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ea:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:ea:34:79:44:5a:b5:c4:2f:01:58:50:84:ba:e0:31:37:
         b0:1b:cb:c1:de:c7:ed:88:ab:82:3a:65:0c:a6:b6:8f:68:ec:
         f8:94:b0:00:ed:e5:17:69:e6:ee:01:12:3e:17:1a:a8:e1:ea:
         ba:7c:1c:d7:0b:90:d2:64:be:6d:58:44:0c:e9:b6:e7:aa:fa:
         c9:70:fa:14:a8:88:d2:5f:e2:5a:3b:cc:20:9f:af:9c:c4:6c:
         4d:cf:9e:f1:b0:03:c1:0b:2e:a0:db:c8:6b:8c:2c:8e:d1:d9:
         79:b7:0c:fb:bb:32:bc:95:df:54:1c:d8:f2:cd:04:bc:d0:09:
         96:42:8c:4b:d1:83:89:6f:ec:c6:da:91:74:04:70:ae:96:fc:
         c8:79:fc:91:41:5b:77:20:4e:a9:ae:77:25:84:17:95:b0:04:
         ca:9b:f8:b8:44:c5:af:cc:2f:60:a7:ce:ae:1a:7b:a9:bc:32:
         74:38:e1:54:30:2d:7f:5c:b6:3a:c0:60:69:f6:92:bc:95:ea:
         8b:39:d7:d3:e0:9c:d1:5f:3c:0e:7a:c3:2d:ba:3f:45:55:cb:
         13:46:c4:56:d5:43:2a:67:b9:22:41:f6:44:ad:e0:49:40:f2:
         99:97:eb:4c:70:04:71:ea:1f:06:a8:29:25:33:53:21:41:58:
         54:f1:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:34:06 2025 by rpki-client