Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/323830333a616138303a3a2f33322d3332203d3e20323633363938.roa
File:                     323830333a616138303a3a2f33322d3332203d3e20323633363938.roa (raw, json)
Hash identifier:          P2yMiPZiI9KaX+Wm0zak1RITFJRqQkIcCBfiRs0HjCE=
Subject key identifier:   36:F6:69:AA:57:6B:4A:00:90:50:D7:9A:B8:27:0C:5A:1D:E0:77:57
Certificate issuer:       /CN=EA0A02ED533F7158CC574F97ADF00A76C058CD8E
Certificate serial:       6B495B3EA9DC0E1388585203AADA6AFDA01343EB
Authority key identifier: EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/323830333a616138303a3a2f33322d3332203d3e20323633363938.roa
Signing time:             Tue 04 Feb 2025 20:05:54 +0000
ROA not before:           Tue 04 Feb 2025 20:00:54 +0000
ROA not after:            Tue 03 Feb 2026 20:05:54 +0000
asID:                     263698
IP address blocks:        2803:aa80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:49:5b:3e:a9:dc:0e:13:88:58:52:03:aa:da:6a:fd:a0:13:43:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA0A02ED533F7158CC574F97ADF00A76C058CD8E
        Validity
            Not Before: Feb  4 20:00:54 2025 GMT
            Not After : Feb  3 20:05:54 2026 GMT
        Subject: CN=36F669AA576B4A009050D79AB8270C5A1DE07757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:e6:c0:fb:09:2a:c8:ae:85:cc:ea:0d:2b:
                    21:28:d1:87:6a:17:4a:e1:42:b9:aa:4f:04:f8:89:
                    a1:41:f1:da:fa:ee:44:ea:74:c9:e1:c7:24:b2:be:
                    3c:c5:70:22:95:18:a1:f4:e9:91:51:21:86:be:71:
                    1a:8a:07:10:e0:d6:b9:2e:b8:da:28:73:c0:99:ad:
                    77:c3:27:51:c6:38:25:04:1e:16:63:8f:3a:96:2e:
                    1e:3e:30:90:ce:95:44:3a:51:e8:8c:78:81:77:06:
                    cc:08:ef:8b:17:2b:23:92:ae:2c:81:6d:b3:27:0b:
                    e9:02:93:57:6c:72:51:d5:2c:26:c6:74:21:ff:bb:
                    f4:fb:f4:be:10:81:b3:ef:29:96:b6:cd:fc:e0:f5:
                    2b:6d:fd:7e:5c:f3:16:c4:fe:fe:7e:e0:91:ed:da:
                    ab:e6:01:06:78:15:a4:7e:80:32:ac:85:cf:6f:8c:
                    ab:68:ee:7d:8e:65:f3:3c:b7:0a:54:62:42:49:32:
                    a3:8b:14:45:bc:a6:aa:e4:22:63:a0:a9:4b:83:0b:
                    3d:76:83:10:89:d6:e8:2a:e6:3a:41:19:5a:56:16:
                    68:eb:73:87:6b:5a:2c:39:b9:63:ef:ef:54:c8:d5:
                    bc:b8:0e:e1:1e:35:00:f8:95:8c:cd:19:6f:3f:38:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:69:AA:57:6B:4A:00:90:50:D7:9A:B8:27:0C:5A:1D:E0:77:57
            X509v3 Authority Key Identifier:
                keyid:EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/323830333a616138303a3a2f33322d3332203d3e20323633363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:2e:43:4a:1f:c4:82:8b:d5:3d:05:fe:a7:a0:af:56:41:
         17:65:81:f4:14:89:c1:34:ec:fd:f2:df:a8:fc:59:cd:64:d9:
         fe:0d:88:50:64:ac:f6:e1:28:f5:fa:ab:8e:3a:ac:c0:0c:9a:
         5f:5b:1c:f8:a2:06:61:f1:f3:f9:54:db:85:01:4b:0a:43:40:
         a8:37:24:7a:e0:9c:54:c3:73:6b:01:fe:c9:d7:92:a4:59:c0:
         a9:32:35:c5:d5:c4:f2:c1:bc:ec:72:0c:d6:55:85:82:f6:1f:
         ee:1c:76:0b:a6:a4:1e:21:de:01:6b:96:bb:8a:e8:09:38:d6:
         9d:d2:28:c3:1b:7d:76:1e:d8:40:54:43:f3:b7:ea:c9:a8:f6:
         61:f3:fa:19:62:62:2d:e6:7c:9b:bc:cc:03:aa:d0:22:31:15:
         bc:aa:12:8d:74:7a:09:5c:10:73:b2:f5:e4:b7:46:f5:68:b0:
         f5:cf:60:6b:b4:a4:55:c5:4c:57:18:a5:45:0f:ee:6e:e6:e5:
         73:83:9a:7f:51:80:ad:d3:a3:d1:b3:79:9d:18:74:98:a4:d7:
         05:61:17:e1:b5:fc:cf:16:79:03:fe:32:91:47:c8:2f:70:af:
         9c:a7:b3:7e:f7:3e:a3:3a:9d:2e:6c:71:b3:ae:fa:b9:fa:91:
         4c:df:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client