Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          86G3IUs5BJrGgFXrob+HUNSyEKdUEhYwpJxrgcCab1I=
Subject key identifier:   0B:59:40:79:7F:EC:04:FA:CC:C1:AC:82:09:FD:39:BF:20:D6:61:53
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       6BB38E6BDAC9722505E4C280282BF4EA6469B53B
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Tue 04 Feb 2025 18:36:16 +0000
ROA not before:           Tue 04 Feb 2025 18:31:16 +0000
ROA not after:            Tue 03 Feb 2026 18:36:16 +0000
asID:                     272854
IP address blocks:        2803:c290:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b3:8e:6b:da:c9:72:25:05:e4:c2:80:28:2b:f4:ea:64:69:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Feb  4 18:31:16 2025 GMT
            Not After : Feb  3 18:36:16 2026 GMT
        Subject: CN=0B5940797FEC04FACCC1AC8209FD39BF20D66153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6a:b2:a8:ce:bf:c8:13:48:f8:58:9a:ca:d3:
                    d5:9a:c5:47:8f:5f:fc:f2:4c:c4:52:b7:b2:2a:d5:
                    e2:9c:c0:86:61:46:77:d3:5a:45:0e:b9:b6:2b:69:
                    38:f8:e7:cd:b5:1d:ea:05:23:4e:ce:46:51:9b:2a:
                    be:04:f9:f1:07:b3:0d:d8:6c:11:f4:96:c9:e9:de:
                    23:76:ac:e3:11:30:9c:2d:8b:0a:9f:e1:a3:a5:5d:
                    42:85:a4:1d:84:90:68:1a:5e:2a:36:36:9f:d0:53:
                    ff:2f:73:1b:d1:22:a9:f1:7a:25:17:b7:ef:49:9f:
                    c9:14:06:6b:dc:b6:1d:e1:af:e9:43:36:a9:fb:20:
                    38:19:cf:58:94:0f:26:b9:74:ed:a4:35:bc:65:a5:
                    b3:51:be:74:c2:34:50:f1:20:e0:06:91:ad:5d:b0:
                    ef:cb:f5:cc:d5:93:2b:ac:5f:7b:af:74:91:69:8f:
                    4d:aa:ba:b6:a1:17:a8:f7:5d:26:fb:88:9f:ab:f0:
                    99:53:14:05:fe:f4:f9:49:10:99:49:82:06:4f:79:
                    74:16:62:f6:40:83:be:77:f1:47:c8:0e:0a:62:2c:
                    c7:ee:90:14:3e:92:85:35:f5:ed:74:56:c8:99:f2:
                    5a:92:26:c4:e9:39:2b:8c:29:60:d8:71:0a:06:4d:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:40:79:7F:EC:04:FA:CC:C1:AC:82:09:FD:39:BF:20:D6:61:53
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:09:94:c7:b7:c9:74:b6:b0:b2:4d:0d:34:4c:b6:78:0a:aa:
         22:9e:2c:7b:c9:2e:1f:ff:a9:22:3d:7c:67:4b:c5:d0:b0:2e:
         fe:3b:70:26:29:b5:19:a1:a1:c0:b8:b7:ab:5a:fe:3b:7f:3d:
         00:44:68:c3:f5:2c:74:0e:43:08:5a:3e:86:23:f5:b6:92:95:
         55:59:53:00:c0:38:54:67:12:8c:34:d8:c9:87:9e:c2:10:f1:
         a6:ba:8c:df:4b:ee:46:8f:88:bc:c0:89:1d:d5:25:fb:79:df:
         85:21:8b:29:e1:99:b6:3b:1d:09:1d:1e:85:e3:20:0f:d6:17:
         04:ca:d6:ed:e9:ea:2b:c3:30:ee:3b:1c:92:12:a9:99:62:d2:
         54:ac:8c:41:b6:c0:6e:82:27:42:cf:8f:59:20:f5:4b:3a:4c:
         3c:18:54:a3:84:a3:fd:3e:43:87:41:b1:c1:a5:44:ac:75:a0:
         ae:fa:61:b0:77:e1:32:5b:60:46:f4:cb:87:ba:2f:0a:9a:8a:
         e0:b2:29:4a:cd:44:6c:d2:0b:6d:91:7d:49:7a:4d:2c:c5:84:
         f7:bf:0a:3b:c4:e6:7f:44:be:66:24:f8:ce:28:ca:7c:24:73:
         af:ba:d0:cd:54:3e:d0:74:00:63:cd:53:c2:ea:a3:9b:2e:b8:
         9e:f4:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:38 2025 by rpki-client