Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3230303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3230303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          9T2yu4qQmuN33BcOUGRDkZ4sqJBBDtKrEF5C8WvTChQ=
Subject key identifier:   07:76:45:3B:93:76:09:4B:C6:FE:44:BA:92:96:B8:4E:08:A7:89:76
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       43EC1168186F913B0F2C87994E25E37D06036588
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3230303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:12 +0000
ROA not before:           Tue 04 Feb 2025 19:56:12 +0000
ROA not after:            Tue 03 Feb 2026 20:01:12 +0000
asID:                     266894
IP address blocks:        2803:56a0:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ec:11:68:18:6f:91:3b:0f:2c:87:99:4e:25:e3:7d:06:03:65:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:12 2025 GMT
            Not After : Feb  3 20:01:12 2026 GMT
        Subject: CN=0776453B9376094BC6FE44BA9296B84E08A78976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:49:0d:d6:db:f4:e1:bc:7e:ae:f1:28:72:
                    c9:0f:99:63:4e:e1:77:af:04:3c:89:b5:7b:22:be:
                    cc:5a:32:a3:da:64:e9:76:e4:62:74:6a:b7:48:99:
                    4a:38:97:f3:23:5f:eb:12:b7:9a:64:99:8c:c2:51:
                    7f:cf:ad:0f:24:0d:be:bb:e8:6b:3d:96:46:1b:6d:
                    fd:cf:89:ff:f2:b3:23:97:29:f7:78:e9:d7:c5:55:
                    b0:9e:09:fd:d0:3a:bf:08:a4:2e:d3:2c:12:81:47:
                    ac:68:cd:b6:ba:b8:4a:38:3f:c2:7f:e6:1c:78:4d:
                    4a:ac:a0:f5:73:82:8e:89:da:a8:90:a4:58:5c:d9:
                    a2:89:de:d7:46:2a:75:c7:74:d4:3f:c5:6d:68:2c:
                    af:8a:57:e2:71:07:50:07:2d:af:6c:01:ad:e3:92:
                    f7:24:32:92:5f:5b:12:98:cb:8f:34:67:96:a4:c6:
                    e8:a8:2a:24:7b:b8:54:7d:76:54:b6:73:86:b4:1a:
                    d5:cb:35:54:3e:5c:2e:fc:72:b9:2e:6a:c3:9d:55:
                    da:a5:fd:db:56:56:d7:5b:1d:6d:20:17:8b:92:98:
                    00:b2:57:b7:40:68:bc:9f:84:57:dd:ea:96:0d:43:
                    94:49:9f:f7:e1:ca:a3:bb:95:64:f5:fe:9d:71:ec:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:45:3B:93:76:09:4B:C6:FE:44:BA:92:96:B8:4E:08:A7:89:76
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3230303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:de:e1:b6:04:91:52:61:d2:28:8d:01:9b:13:3d:9f:3b:d9:
         14:50:2d:ac:d2:63:5b:5c:e0:65:de:13:66:3f:94:20:98:00:
         8f:92:a3:4d:86:79:55:91:4a:75:ec:0c:ad:74:bb:49:58:8f:
         48:1c:f0:9b:fe:2a:13:e0:69:c3:49:3e:90:31:4b:1c:97:27:
         a1:16:83:f6:e2:82:6a:cb:cf:05:98:60:1e:06:30:be:61:c5:
         3b:ab:80:ff:51:98:41:7b:19:a2:72:a4:8d:f0:2f:4b:bf:22:
         b4:9d:40:bf:55:d6:c8:12:b1:68:89:aa:6f:aa:a5:fb:1e:73:
         f0:d1:c7:e8:d2:fe:e9:6d:01:be:39:4e:6a:d9:ad:97:78:4c:
         5b:70:4d:b8:4b:44:7d:e3:57:f3:14:aa:2b:29:46:7c:e7:b8:
         88:e8:f7:8f:72:c7:23:22:dc:b4:99:3c:63:b5:fa:92:b7:8a:
         4a:a1:42:d1:c7:fb:07:5c:f4:40:23:0b:2c:f8:57:c7:87:7c:
         0d:26:5d:3a:d8:b4:27:a6:73:81:5d:d2:20:9b:14:24:c5:18:
         d4:bf:e8:36:a0:e6:c1:74:43:0c:01:fe:30:a3:ad:eb:77:e3:
         0c:98:d4:35:cf:f7:c1:1c:d9:0d:4e:b0:b1:9c:be:cf:df:e9:
         c6:12:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:56 2025 by rpki-client