Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa
File:                     323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa (raw, json)
Hash identifier:          zxLKDIIVTHdeI8b0+DcHGH5tSXF4sc7mR5UQ+yIfKXs=
Subject key identifier:   0D:02:CA:00:B6:63:EA:2A:7F:A0:D2:0B:90:59:BB:A7:05:06:D6:1C
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       4FD5ECED5634F894436520F63A434B926195D9F1
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:49 +0000
ROA not before:           Tue 04 Feb 2025 18:10:49 +0000
ROA not after:            Tue 03 Feb 2026 18:15:49 +0000
asID:                     269782
IP address blocks:        2803:2360:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:ec:ed:56:34:f8:94:43:65:20:f6:3a:43:4b:92:61:95:d9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:49 2025 GMT
            Not After : Feb  3 18:15:49 2026 GMT
        Subject: CN=0D02CA00B663EA2A7FA0D20B9059BBA70506D61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:d8:3f:ac:2e:d1:1d:68:2a:36:23:c6:f4:
                    43:0f:57:bf:74:16:5e:be:c8:4b:98:b3:31:a0:18:
                    fe:70:90:06:c6:76:6b:5f:b5:8f:8c:9f:99:2c:d4:
                    5e:11:f2:a3:69:ef:1c:59:70:89:86:7b:40:84:78:
                    42:9b:74:7f:28:7e:6c:9b:58:8e:e9:41:ef:c7:44:
                    89:d2:44:4e:af:ea:ef:83:b7:8c:f7:75:9b:23:4a:
                    60:59:6f:a9:72:af:94:61:72:d8:e1:f3:da:61:4d:
                    df:8c:03:1f:e5:28:87:a2:20:4d:e4:e9:bb:75:eb:
                    db:fc:f2:3d:c7:2e:3f:e3:b3:09:c4:cc:30:83:49:
                    d6:f9:f5:47:9f:7e:5e:69:ab:ef:90:a5:1e:9e:59:
                    b5:fb:72:d9:c4:f8:1b:b7:46:ed:c7:60:08:d4:34:
                    77:35:2a:57:43:c7:fb:25:3e:57:d8:9a:8b:dd:58:
                    61:0a:f7:80:a3:4d:f1:94:8e:63:e6:e6:01:d1:c2:
                    e1:7a:40:15:76:87:64:90:c6:52:00:e9:d8:e3:e8:
                    53:bb:b6:60:32:1c:4f:69:c3:67:39:aa:f9:b8:d3:
                    a2:15:02:35:08:6b:43:bd:33:7d:33:f6:2f:8b:ac:
                    2f:6e:38:dd:bf:2b:61:69:1b:37:ba:b6:a7:ce:85:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:CA:00:B6:63:EA:2A:7F:A0:D2:0B:90:59:BB:A7:05:06:D6:1C
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:1b:76:64:8d:ef:d6:8a:db:c0:ba:ed:0b:0a:be:c9:b1:
         73:ac:6f:69:34:8b:b2:5a:8a:b7:96:30:8e:1a:a6:5b:30:83:
         2b:2a:70:22:41:66:3b:70:35:4b:7a:d7:32:93:f7:e3:0b:b8:
         2b:ab:0a:95:6b:b8:a3:c7:a4:ce:40:e8:5d:b2:32:70:97:b9:
         29:9e:68:60:bb:31:b1:1a:2b:66:90:29:64:1f:0c:4d:82:f7:
         40:2b:34:52:84:76:bc:91:1a:47:73:ff:8a:64:8f:2c:12:24:
         d3:e1:b4:60:ac:17:48:36:10:a8:ef:7b:50:08:2f:1a:90:8a:
         d4:e1:34:f4:4b:9c:e2:24:a4:fb:ee:42:e3:35:4a:cd:bf:3f:
         f4:6b:cd:96:fd:cf:76:ec:b5:e3:d6:8e:e8:c2:9a:e0:6d:81:
         b8:de:51:75:9b:fd:37:46:d1:24:52:ca:d1:52:dd:4a:f0:b7:
         a4:cb:8a:3c:73:e7:df:4b:68:39:9c:ba:c8:c5:9e:94:d9:9e:
         4f:78:e0:45:62:21:6c:a9:43:9f:f2:f8:21:e4:5c:c5:bf:45:
         32:cd:bb:9b:53:95:c9:12:8e:7c:32:bd:5b:62:89:4a:f3:09:
         71:ac:0d:84:b0:2f:9b:50:e8:e2:4f:c4:b8:44:4d:42:69:ae:
         6e:45:b9:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:41:53 2025 by rpki-client