Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          X2Gv9YhHj3srR3zTdYSKTf9FmniJlBUTasW6H9Jzchc=
Subject key identifier:   42:51:EB:0A:7F:67:78:64:CE:D8:0D:AB:C5:DB:30:A0:A9:3F:28:CD
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       68622EF11CB8D25AC71733B240B59473E44CB5D9
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:55 +0000
ROA not before:           Tue 04 Feb 2025 18:10:55 +0000
ROA not after:            Tue 03 Feb 2026 18:15:55 +0000
asID:                     269782
IP address blocks:        2803:2360:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:62:2e:f1:1c:b8:d2:5a:c7:17:33:b2:40:b5:94:73:e4:4c:b5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:55 2025 GMT
            Not After : Feb  3 18:15:55 2026 GMT
        Subject: CN=4251EB0A7F677864CED80DABC5DB30A0A93F28CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:8b:c1:f3:1e:e9:f0:e7:19:f3:56:a4:70:
                    7f:4d:32:92:93:b2:03:e0:ff:ba:4d:67:2c:e5:82:
                    02:9d:67:63:e4:68:0e:73:45:a2:9d:3f:23:9e:4a:
                    41:f3:bc:d8:0c:64:31:88:15:0c:8b:4d:c5:2c:65:
                    6d:25:65:86:69:a6:46:31:4d:c4:c0:e3:ca:f4:c4:
                    08:3b:c2:b9:eb:1e:f7:2f:18:88:a5:66:91:1c:dd:
                    ed:ca:39:d9:c1:0a:95:ad:d1:ac:fc:5d:5f:55:2a:
                    9f:de:91:b0:e4:56:c2:10:fb:ee:d5:f6:37:7b:8b:
                    bf:8a:5e:44:17:1c:1a:b2:cd:d9:60:8a:6b:9e:8a:
                    bd:1f:0a:aa:cc:6d:c8:ea:c8:7a:f7:7e:0b:40:94:
                    8a:32:6c:41:5b:74:b2:80:25:d5:83:30:03:51:4c:
                    ff:4b:c7:25:a6:cf:9a:bb:2e:ae:55:96:57:1c:6c:
                    d4:6f:e0:c7:b2:79:04:5f:77:4d:1e:66:4e:79:c7:
                    b9:fd:c5:8d:6a:74:15:bb:96:8c:3d:bc:ce:a5:73:
                    c6:aa:e4:cb:d0:69:de:d7:a5:be:de:17:c9:8a:e0:
                    a7:80:80:8f:4e:be:b4:01:bb:7f:60:0c:9b:a5:dd:
                    0f:50:ca:00:f4:fb:97:9f:46:7c:b1:04:1d:33:6f:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:EB:0A:7F:67:78:64:CE:D8:0D:AB:C5:DB:30:A0:A9:3F:28:CD
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:9b:ba:0e:90:1f:00:dc:0d:3d:16:10:8c:50:a2:ee:54:
         44:73:eb:29:af:3f:ec:aa:a5:34:60:4f:8c:9b:71:b8:0f:60:
         bb:06:e0:dd:6c:1f:89:ab:79:9c:65:dd:64:13:9e:6b:ad:70:
         36:68:3a:81:e0:23:c9:4c:0b:f8:7a:65:1f:1e:12:83:79:71:
         42:c7:96:ff:2a:f2:ec:fc:e5:ab:68:5e:82:40:27:60:c6:d1:
         c0:3f:ab:46:f6:ac:ec:d4:2c:d5:dc:ce:18:7f:f8:ee:38:53:
         04:82:8a:27:95:cb:db:ab:47:ee:6a:23:ef:5e:64:56:7b:2b:
         8d:29:aa:dc:bd:14:4f:08:31:ae:81:b7:49:7a:2d:ff:57:bc:
         12:b3:88:70:47:d9:8d:81:22:a3:e7:b8:e9:f8:b5:27:d6:d3:
         fb:7f:75:cc:68:dd:b8:89:8b:d4:f8:08:95:1e:10:e9:0b:e5:
         86:eb:98:94:35:29:2d:73:f8:ed:c6:fd:bb:07:8b:9c:71:1a:
         d5:d4:05:ce:49:a8:aa:d6:f0:ac:c9:c8:15:70:f7:4c:50:ed:
         c5:7d:a7:a0:f7:35:64:2b:67:36:78:b8:1b:2b:d6:79:7c:ea:
         bb:de:45:88:b7:50:f2:4b:a4:00:53:50:78:2f:d9:7d:ac:89:
         e9:21:26:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:34 2025 by rpki-client