Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          i8nPauYkxsUVljoduOsVQo+khBteQAvrebo5CcIn7es=
Subject key identifier:   A5:23:8C:91:CE:43:DB:CF:75:78:88:FD:3B:CC:EA:FB:AF:4E:5B:0E
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       7AB39605124B74A9C0895ABE35677A473E1B8CA6
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:52 +0000
ROA not before:           Tue 04 Feb 2025 18:10:52 +0000
ROA not after:            Tue 03 Feb 2026 18:15:52 +0000
asID:                     269782
IP address blocks:        2803:2360:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b3:96:05:12:4b:74:a9:c0:89:5a:be:35:67:7a:47:3e:1b:8c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:52 2025 GMT
            Not After : Feb  3 18:15:52 2026 GMT
        Subject: CN=A5238C91CE43DBCF757888FD3BCCEAFBAF4E5B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:46:05:6f:44:56:b0:87:7c:8e:50:e1:81:a3:
                    b2:74:75:7f:66:02:1b:23:3b:b8:88:02:93:57:0d:
                    47:d6:a8:f2:21:eb:65:6b:8a:f1:70:5f:b6:a3:1a:
                    a0:f6:77:f7:df:a2:03:84:bf:82:c7:f1:2e:be:af:
                    81:6b:53:44:81:c7:35:84:4c:87:5f:f0:17:36:86:
                    e4:a3:99:5b:b2:32:0b:19:01:e7:a9:74:18:a2:00:
                    6a:4e:9f:cc:63:4e:e2:8b:e8:9b:7d:b0:86:52:77:
                    aa:12:d5:88:fd:c8:99:b4:aa:51:91:09:e2:85:18:
                    aa:b1:54:3b:89:55:2f:df:d4:56:dc:db:71:ca:18:
                    a6:a1:79:f8:a3:d1:b6:75:bd:15:2c:cf:15:47:11:
                    b5:ce:4a:6b:c9:b2:73:53:a9:ea:5d:95:e1:a8:e7:
                    00:06:47:c4:11:8a:84:8a:6a:35:cc:d7:97:79:5e:
                    d8:c0:b4:92:f3:81:d5:1a:bd:e5:11:9c:7b:a0:d1:
                    be:1f:e4:96:09:e6:56:dd:bd:16:a5:15:34:7d:49:
                    c9:ab:0f:83:0f:44:67:33:eb:f1:66:da:84:da:15:
                    3b:e7:2a:48:34:a4:2b:ee:f5:30:08:bb:43:29:57:
                    80:fb:74:35:e5:de:22:b5:56:01:c3:54:39:ac:b6:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:8C:91:CE:43:DB:CF:75:78:88:FD:3B:CC:EA:FB:AF:4E:5B:0E
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:98:56:a9:88:7d:5f:19:28:bf:f5:fa:2f:6e:36:4a:88:
         55:7d:59:d6:f2:77:ca:b2:df:c1:7e:d6:dc:fb:a2:43:c8:55:
         90:6d:27:a1:89:0d:bb:73:28:d3:c9:9a:02:21:f9:89:8d:65:
         ff:94:66:0e:fb:6c:6f:d4:f4:5d:56:f8:51:30:fd:4d:06:81:
         11:a5:b5:c1:1e:4b:1b:86:61:45:a1:79:da:fd:fc:c0:40:23:
         1c:e4:83:4a:ef:f3:e2:13:68:d7:98:15:2a:3e:80:e1:27:79:
         91:03:dc:61:58:90:d6:21:98:41:e1:b4:51:89:15:ba:c5:ee:
         95:57:f9:04:90:4f:6a:46:17:57:5c:e7:f0:6c:94:ee:b7:d7:
         43:5d:2d:61:6f:95:df:09:3f:92:48:ef:64:35:46:44:d1:0a:
         07:28:36:f0:1d:27:13:0e:59:d1:b4:8b:0b:14:82:74:95:e3:
         ce:72:18:4a:d2:5e:ca:5f:f3:b2:10:6b:4a:74:70:52:1d:1b:
         87:c9:0b:50:47:13:b7:57:65:82:66:25:32:45:c3:77:9a:77:
         4b:17:59:6f:50:a5:8d:41:05:6a:d8:79:b6:d8:54:b9:d8:89:
         56:97:97:77:33:f7:bb:44:20:f7:ba:d5:a5:66:47:c1:ec:3c:
         6d:ac:82:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:51 2025 by rpki-client