Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3830303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3830303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          zsQpujltiNks0FXM/m5TXuetehW3615mR8Jcl5EnU88=
Subject key identifier:   AE:E1:13:47:8C:16:18:BE:FD:95:55:34:36:0D:49:37:EF:8A:13:3D
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       01C8091C7A436D16EEC2B83D27C0FBA5F7C5BB3D
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3830303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:15 +0000
ROA not before:           Tue 04 Feb 2025 19:56:15 +0000
ROA not after:            Tue 03 Feb 2026 20:01:15 +0000
asID:                     266894
IP address blocks:        2803:56a0:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c8:09:1c:7a:43:6d:16:ee:c2:b8:3d:27:c0:fb:a5:f7:c5:bb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:15 2025 GMT
            Not After : Feb  3 20:01:15 2026 GMT
        Subject: CN=AEE113478C1618BEFD955534360D4937EF8A133D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:8d:dd:f1:5c:e5:c8:03:3c:6f:57:1f:ac:
                    05:4f:64:42:98:5c:ac:e9:08:07:e8:e3:de:96:c1:
                    65:4d:a0:8b:9a:c4:83:75:86:9f:d4:c0:c3:c9:5d:
                    a3:9b:c1:8b:50:b7:97:47:5a:b6:81:bb:db:a3:d1:
                    e1:84:07:d4:16:8d:5b:d1:e6:2a:f6:10:15:38:a9:
                    db:e5:88:c8:c4:49:ad:08:eb:7f:56:4f:31:ee:61:
                    da:e9:ee:bb:86:fc:ff:3d:0d:fd:63:b4:24:22:e4:
                    ce:79:1d:8f:ae:5b:46:7f:be:5e:5b:ab:3e:82:c7:
                    47:9d:0e:e5:6c:67:e7:af:22:b7:32:4c:f7:d7:73:
                    39:db:89:03:1c:54:4c:96:06:94:41:05:6d:79:a0:
                    cb:bb:2e:58:c3:96:20:77:0a:7d:d3:a0:ac:a9:f4:
                    49:39:d3:4f:83:7d:8b:79:2a:6e:eb:f1:b2:fc:6b:
                    80:9b:0d:0d:ee:7d:92:d3:54:11:14:a4:e7:46:a0:
                    e2:80:fe:c8:ff:05:b1:53:49:5f:04:1a:29:c7:8b:
                    88:e1:08:5b:46:6a:38:be:be:3d:a2:2a:1b:a0:18:
                    2e:2a:cf:31:5a:72:55:9c:2a:8c:62:28:8d:87:02:
                    5e:d5:75:0a:4f:b3:32:f7:20:fc:54:7e:26:e0:23:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E1:13:47:8C:16:18:BE:FD:95:55:34:36:0D:49:37:EF:8A:13:3D
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3830303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:f0:10:0b:24:07:13:fe:a1:f8:9d:10:96:9e:5c:68:19:57:
         f2:01:cf:3f:2e:c3:77:8a:dd:cb:f3:30:df:21:36:05:42:f7:
         51:78:0a:c4:33:81:c2:5a:1d:75:ec:ee:ac:45:2e:d8:17:17:
         8c:63:d6:eb:55:90:b9:b1:7d:97:e8:eb:f7:0c:1f:ed:7b:5d:
         eb:3d:7f:c8:ac:fa:eb:2a:63:bd:86:73:00:cb:5a:f2:12:17:
         80:5e:aa:14:07:d9:c2:2c:25:40:af:00:49:3b:9a:3c:1d:06:
         5b:80:23:14:fa:fc:32:b6:39:80:f6:13:e8:69:24:a5:73:04:
         a2:27:5d:3f:b2:54:39:1a:46:5c:ec:05:e3:50:06:ac:75:55:
         d8:52:27:0a:b0:fa:7f:74:e3:9e:23:7b:5e:ca:e5:8d:3b:e8:
         5c:c3:65:0b:9b:ab:ba:1a:37:b4:cf:d3:5e:35:42:19:db:10:
         1d:a8:23:fc:71:a4:88:2b:5a:3d:5c:36:74:c9:11:1f:91:88:
         3d:db:0e:96:e3:57:61:73:09:c0:9b:6e:1a:a5:6d:21:91:82:
         bf:a3:0c:bb:c4:07:47:0c:9a:49:10:38:bf:c6:2e:e5:f0:49:
         a8:74:60:fc:07:53:d4:d3:bb:48:6c:43:4e:bd:9b:20:d7:f0:
         47:f0:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:39 2025 by rpki-client