Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          ojKUOrVY66vcMK2WBfocqhhl8y0eD0ifuaNjHXagBnM=
Subject key identifier:   30:ED:78:27:CD:9F:DE:75:BF:91:5C:4A:48:4B:7F:4B:8B:04:69:EE
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       73F3FB923EABD11EF979CD68A2CF18DAA4617F86
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:14 +0000
ROA not before:           Tue 04 Feb 2025 19:56:14 +0000
ROA not after:            Tue 03 Feb 2026 20:01:14 +0000
asID:                     266894
IP address blocks:        2803:56a0:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:fb:92:3e:ab:d1:1e:f9:79:cd:68:a2:cf:18:da:a4:61:7f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:14 2025 GMT
            Not After : Feb  3 20:01:14 2026 GMT
        Subject: CN=30ED7827CD9FDE75BF915C4A484B7F4B8B0469EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:ea:0b:66:03:81:a4:76:6f:a0:e1:67:5b:
                    5e:d3:e3:7a:fc:8e:58:58:66:1d:22:a4:48:ca:3c:
                    36:45:90:6a:44:17:6e:6d:8f:3d:06:d3:91:fe:59:
                    d6:84:42:d9:15:95:ac:2f:b4:5b:21:f0:56:04:48:
                    01:6c:b8:d3:2d:60:a9:2f:74:17:b8:bf:08:11:74:
                    a0:a1:8f:11:f0:0b:dd:9b:12:01:b5:74:bd:fd:02:
                    f2:10:95:84:84:a4:bd:1b:ad:4a:e1:72:d8:31:e9:
                    16:50:0c:f8:2f:b7:3c:61:3f:f5:7f:f3:89:a6:09:
                    cd:e6:df:79:ac:df:18:1d:4e:95:e2:df:8e:7c:b0:
                    8e:92:d7:4d:ac:01:ff:f0:71:11:6b:0b:67:e0:15:
                    57:70:59:b4:1f:59:39:1e:f5:34:83:3d:c6:65:51:
                    12:bf:7a:d2:f7:79:e2:57:46:cc:f6:64:14:f1:af:
                    fd:85:8c:cb:1c:8b:55:fd:49:83:95:38:66:e0:a9:
                    3b:08:d5:97:33:2c:de:a3:88:8b:04:e8:c4:90:78:
                    07:b1:53:be:89:32:53:81:dd:a7:13:3c:34:0b:4c:
                    53:8a:d8:0a:7e:52:ee:2e:d4:dd:aa:2e:c7:ca:97:
                    03:51:f3:a9:09:44:0e:37:5f:b3:4d:3a:be:66:91:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:78:27:CD:9F:DE:75:BF:91:5C:4A:48:4B:7F:4B:8B:04:69:EE
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:b7:8a:c5:f7:dc:be:d8:38:1f:93:a0:30:22:a1:d4:88:
         f4:44:ad:93:43:30:b0:89:fa:23:77:96:9f:d6:33:be:77:7b:
         37:30:1c:9c:b1:bb:f8:51:69:e8:df:ae:59:e2:ec:83:c3:e1:
         c3:88:dc:fa:aa:be:71:d9:75:7d:dc:35:c0:15:28:96:e9:47:
         54:c0:96:f6:31:40:c5:08:37:fe:66:f1:82:d8:e8:d3:59:3f:
         2b:db:d4:73:1a:33:c4:81:ee:9a:17:8b:cc:8c:10:31:cf:3a:
         f8:2c:0e:fc:79:40:7f:0b:1a:c6:4c:34:f6:b6:15:b7:06:2d:
         3d:93:df:c4:b5:83:5f:ea:76:8f:a8:23:de:b9:89:38:4c:30:
         44:ff:05:9a:bf:93:e3:42:61:28:28:e4:a9:95:ea:d7:a1:41:
         d5:f5:cc:41:01:5a:b9:a6:f7:f3:3f:bf:ac:fb:90:3e:e3:21:
         75:a0:57:e4:e4:73:54:21:24:c7:11:d7:d9:e4:1c:c2:08:5d:
         cb:a4:ba:f4:81:52:49:e0:4c:f0:9a:c0:c2:e4:65:3b:1d:25:
         61:98:51:fb:4b:b3:76:c7:74:c3:69:d1:d1:1d:02:63:84:ff:
         37:51:9b:90:31:30:98:fd:bf:68:7b:a7:73:8f:73:5d:ba:c0:
         3b:d5:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client