Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa
File:                     323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa (raw, json)
Hash identifier:          SGCA+espgZ8X7qKGR035bNlkPIrKYG75P1lHbFHoOmo=
Subject key identifier:   0C:80:1B:A1:11:E5:AC:56:8A:16:7E:E4:EE:BC:46:02:03:EC:60:D3
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       3A3BC0A726EF95B2582DC97CC2D753CF1E5EDFDF
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa
Signing time:             Tue 04 Feb 2025 18:27:40 +0000
ROA not before:           Tue 04 Feb 2025 18:22:40 +0000
ROA not after:            Tue 03 Feb 2026 18:27:40 +0000
asID:                     269746
IP address blocks:        2803:3960:2::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3b:c0:a7:26:ef:95:b2:58:2d:c9:7c:c2:d7:53:cf:1e:5e:df:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Feb  4 18:22:40 2025 GMT
            Not After : Feb  3 18:27:40 2026 GMT
        Subject: CN=0C801BA111E5AC568A167EE4EEBC460203EC60D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:f0:3d:37:8b:0e:41:dc:0b:fe:78:b8:b7:
                    fe:74:15:ef:9f:64:47:61:3a:51:9b:61:30:e4:08:
                    3d:c7:c6:07:79:d1:73:b8:dd:96:e1:dc:a8:19:77:
                    14:e8:3d:b2:79:ba:af:86:63:da:5b:bc:39:7a:6c:
                    7e:59:06:f9:62:9c:d2:ca:35:13:df:0d:e3:19:e4:
                    0b:84:d9:a8:11:a4:a6:84:28:42:92:6e:6a:01:d5:
                    ee:71:13:ef:fe:fe:10:a8:17:70:6c:18:d4:74:2c:
                    be:56:2a:67:83:96:02:3b:23:d9:d9:4e:9c:30:61:
                    d8:50:32:06:98:b1:bc:93:32:5f:97:21:d9:53:97:
                    42:93:1c:3f:9d:a3:df:25:2e:33:a7:2c:d3:dc:2e:
                    48:8e:60:77:90:5f:db:f0:3c:54:87:3b:56:52:ab:
                    58:21:ae:34:4f:b5:f4:7e:c3:a5:7d:8b:ad:84:7f:
                    73:99:68:8d:58:13:59:9b:c3:99:2d:93:e6:15:b7:
                    1f:b0:60:d0:6e:a1:7d:e0:5f:81:3d:39:d5:00:0c:
                    87:91:bb:c1:cb:12:c8:ee:ca:a8:a3:36:f0:c7:db:
                    d9:8a:d4:b5:f2:1b:dc:de:9e:54:0a:6c:60:45:fa:
                    16:30:07:d0:66:d3:5e:a5:bd:2f:04:6b:6e:e6:b1:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:80:1B:A1:11:E5:AC:56:8A:16:7E:E4:EE:BC:46:02:03:EC:60:D3
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:e2:d1:a1:ae:d9:d0:9e:dd:be:ad:21:15:bd:fd:4d:aa:
         b6:cf:93:06:d2:ef:eb:c0:6c:86:32:22:43:c9:32:bb:48:d8:
         b8:0a:49:42:8d:71:64:ea:30:11:01:7e:b3:64:67:61:c4:c9:
         26:8c:af:8b:29:71:09:f7:e1:fe:ab:95:58:5e:84:0f:22:d4:
         25:79:b0:b5:d3:45:b3:86:16:52:4a:c0:32:49:74:fe:77:85:
         c0:1f:86:50:7c:f8:c3:87:02:82:fe:ae:98:7e:f2:85:13:0c:
         c1:90:39:0a:aa:eb:38:95:14:ed:ef:72:8a:f2:f2:7b:59:f2:
         aa:38:52:fc:c8:cd:3d:a4:4a:a9:96:09:5a:05:56:bf:f9:0a:
         28:5e:44:37:3b:ad:72:19:e0:65:68:bb:a3:5c:ff:80:d9:98:
         1f:50:18:a3:73:0f:6c:65:04:c5:d7:30:5a:1b:b8:2f:b2:c9:
         b8:ce:08:bf:55:d5:d5:3d:da:79:ba:8d:ff:e6:5b:db:0e:be:
         c7:80:9f:ca:a6:65:65:73:86:73:04:0a:23:bf:bb:fb:6e:30:
         76:cf:fa:bd:82:60:1a:1e:50:80:fd:86:ce:03:ea:32:60:26:
         0c:92:4d:42:23:08:1c:c4:f7:d6:8d:b9:b8:64:85:67:af:0d:
         43:d9:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:05 2025 by rpki-client