Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          r3XgYuM8Gf79aD4U6lNPpuKpTfafkp9koboBMTbeshg=
Subject key identifier:   88:2D:80:BD:23:AB:B2:77:5C:BF:12:9B:37:75:DE:0B:98:5C:E7:84
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       362DC0A93353BBAA761BD62A45882934561B4C9E
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:54 +0000
ROA not before:           Tue 04 Feb 2025 18:10:54 +0000
ROA not after:            Tue 03 Feb 2026 18:15:54 +0000
asID:                     269782
IP address blocks:        2803:2360:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2d:c0:a9:33:53:bb:aa:76:1b:d6:2a:45:88:29:34:56:1b:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:54 2025 GMT
            Not After : Feb  3 18:15:54 2026 GMT
        Subject: CN=882D80BD23ABB2775CBF129B3775DE0B985CE784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:71:d7:e4:1b:a0:a0:85:57:22:f0:3a:c8:
                    b1:cd:53:af:a5:14:73:fc:c4:9d:1a:8e:c2:fa:12:
                    a8:21:cf:58:b1:18:30:fe:c1:c1:ed:f5:0b:e5:bf:
                    b7:7f:c6:d7:a2:1c:82:52:51:2a:14:7b:85:64:42:
                    15:57:b5:cc:de:23:96:b7:ac:55:af:f3:48:b3:48:
                    49:88:6f:aa:61:25:e9:bf:f6:b2:bd:a9:7e:4f:f5:
                    16:c4:d4:8e:b9:be:a4:0d:73:88:d8:bf:f9:2f:ee:
                    e3:06:78:76:2f:72:13:15:fe:dc:3d:7e:3c:02:10:
                    52:9b:a6:bb:21:54:d8:01:e0:8c:a8:6c:5c:71:a0:
                    e1:33:14:76:48:bb:a1:67:2d:d8:99:93:7b:91:75:
                    a2:88:27:3a:59:6a:b4:86:3e:58:38:06:d8:4d:6a:
                    04:91:bb:52:b7:ec:c7:b9:0a:c5:66:7f:ba:b5:aa:
                    3b:62:1e:51:00:33:37:ac:d5:af:15:2c:39:dd:1f:
                    ec:99:a9:ee:77:8d:ed:9a:8a:ae:34:5b:48:5a:52:
                    0f:1c:48:52:19:5b:5d:73:96:17:fb:5e:b5:42:73:
                    d8:ea:01:88:55:ef:f2:5e:95:4f:26:63:4b:de:25:
                    25:ca:06:fb:c3:60:68:ed:0d:51:88:ca:c0:cc:c1:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:80:BD:23:AB:B2:77:5C:BF:12:9B:37:75:DE:0B:98:5C:E7:84
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:9b:e7:fd:d9:41:c6:60:86:c9:be:dc:a6:8f:89:7e:90:
         e1:d4:37:fa:5d:12:88:ae:ee:21:67:a8:43:bb:5a:63:c2:82:
         2b:00:eb:83:73:13:57:93:91:ca:95:10:cf:ee:c6:ba:9e:11:
         ad:87:8c:bf:2a:be:28:13:cf:bc:1e:51:42:66:3f:eb:bf:76:
         17:9c:8a:45:2f:ef:f7:46:38:04:a5:25:db:c6:73:89:a1:56:
         88:d9:f8:11:ee:1f:1b:2f:33:3d:aa:d3:46:e7:97:08:7d:d6:
         6c:80:68:f8:d9:39:34:fd:4e:9c:50:ba:42:62:1c:9a:2e:9d:
         b3:a0:98:69:2b:d9:d1:20:27:44:c5:18:01:3d:c5:75:3b:9b:
         62:05:b4:fb:17:9c:7a:a5:0a:ad:b3:ce:7f:42:d8:56:ea:41:
         b8:8f:90:4a:ec:e1:a0:a2:cf:fb:51:d0:a4:dd:f9:44:bd:fb:
         74:fe:2a:8e:98:cb:8d:a6:67:a1:43:88:8d:a2:5f:4a:4a:25:
         15:e2:2a:a7:77:e5:90:b0:cc:8e:53:f2:e3:38:11:8b:cd:93:
         07:62:8c:ca:1c:59:bf:c4:eb:19:e2:7d:22:fb:8c:0f:77:d9:
         9e:0b:b4:ca:b5:45:d4:3e:43:30:e3:dc:68:4d:21:0c:54:15:
         d2:3a:6b:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:08 2025 by rpki-client