Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          ix7LgZ+S7FXurjpEgr7D+d4njhVaJuCYBEo74OYIaI0=
Subject key identifier:   3A:7F:16:A8:B3:86:08:82:06:B6:59:65:EF:F7:26:81:27:8F:12:36
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       7ECAB6BE3FB30BF81977A8774D62F0895E5905D3
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:50 +0000
ROA not before:           Tue 04 Feb 2025 18:10:50 +0000
ROA not after:            Tue 03 Feb 2026 18:15:50 +0000
asID:                     269782
IP address blocks:        2803:2360:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:b6:be:3f:b3:0b:f8:19:77:a8:77:4d:62:f0:89:5e:59:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:50 2025 GMT
            Not After : Feb  3 18:15:50 2026 GMT
        Subject: CN=3A7F16A8B386088206B65965EFF72681278F1236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:2b:44:1e:82:fa:75:45:ae:fa:3b:0f:a6:
                    21:8a:6f:84:f1:db:a7:a5:58:3b:c8:42:d6:10:3d:
                    33:3b:2d:c5:0d:56:c0:1b:9f:e5:f3:00:02:96:4d:
                    fc:67:98:04:a1:9b:43:a8:5e:22:74:02:26:3e:0d:
                    a6:92:a9:33:98:03:d7:44:68:13:c9:41:97:09:87:
                    b0:7d:74:87:8b:b1:cf:36:58:49:20:80:8e:29:db:
                    b6:39:1b:1c:da:98:bd:e7:55:1b:a7:7d:99:fd:d8:
                    8d:29:58:b8:8e:88:35:14:32:0e:47:af:33:e1:82:
                    ba:01:99:86:f8:79:92:6f:b4:67:e3:b1:d8:84:70:
                    f2:e7:26:9e:6c:ad:f9:87:35:f8:cf:b0:09:e1:bf:
                    37:35:1e:14:bc:b1:42:5d:f5:66:3a:af:97:61:66:
                    8e:9e:a1:a7:9a:4a:77:bc:45:4c:de:a8:c9:0f:54:
                    57:24:b1:cd:49:6b:6e:5f:ea:ee:d0:68:c0:04:b9:
                    30:36:b3:3d:36:4c:f6:78:1c:ae:e1:0e:a3:28:c9:
                    9f:b3:69:25:2a:32:fa:c9:d1:44:55:02:d2:5d:0a:
                    5b:85:38:18:a9:6d:6a:4e:68:b7:ee:16:84:44:50:
                    db:df:ea:97:17:55:7b:6a:c5:60:72:74:92:1a:b5:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:16:A8:B3:86:08:82:06:B6:59:65:EF:F7:26:81:27:8F:12:36
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:e8:8c:bc:bb:12:1e:9f:9f:ec:d9:ba:37:fd:cd:b8:95:
         f2:85:eb:e1:fc:a4:d1:29:7f:2a:aa:e3:a4:37:5e:1c:bc:9d:
         a2:d9:8c:b3:aa:b1:b9:5a:64:88:f1:8d:a7:9c:b5:ac:90:26:
         63:8f:05:cc:21:60:27:f6:d4:d6:87:cc:22:30:b8:8a:6e:5a:
         d4:17:ea:a0:f6:4d:c4:77:89:05:b3:cb:93:05:66:3e:cd:be:
         e3:1d:74:79:ca:49:e7:3d:de:26:4c:73:6c:8e:e8:f5:21:a1:
         d9:90:80:b1:0e:73:05:82:b4:78:43:a6:c7:0a:e6:47:9c:a4:
         90:a9:ca:4a:40:bf:1e:09:e1:86:65:72:77:53:67:42:63:25:
         2d:00:ff:a4:45:76:f0:d2:08:f7:57:de:65:06:26:a7:d3:02:
         e1:a5:99:30:08:12:3b:1b:2c:5e:25:ca:f3:a9:a5:2b:e5:e4:
         8a:c5:d6:5f:1b:8d:b4:cc:25:d2:e9:a0:f6:ac:3c:44:fb:88:
         9a:62:e1:ac:66:83:14:a6:bf:d3:f5:44:e7:d4:ac:8f:3c:d0:
         82:ce:2d:d5:af:7a:a3:82:2f:37:40:c3:1a:51:40:5f:ea:ac:
         ae:47:c9:ec:51:c0:4a:1a:29:a8:2e:85:93:8d:8b:13:7c:dc:
         2c:d4:f3:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:30 2025 by rpki-client