Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938313a3a2f34382d3438203d3e203634313330.roa
File:                     323830333a623065303a393938313a3a2f34382d3438203d3e203634313330.roa (raw, json)
Hash identifier:          3IMgQvWg1X4SSNwC7tq1OKGmWmeNB4jpmxmuKW6PTwg=
Subject key identifier:   3F:5C:C1:FB:E1:B5:76:85:8B:72:25:E4:F1:3E:CA:41:4C:04:D3:78
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       43328D796F9F01E8C089B84485FDD83919A73FB5
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938313a3a2f34382d3438203d3e203634313330.roa
Signing time:             Tue 04 Feb 2025 18:13:19 +0000
ROA not before:           Tue 04 Feb 2025 18:08:19 +0000
ROA not after:            Tue 03 Feb 2026 18:13:19 +0000
asID:                     64130
IP address blocks:        2803:b0e0:9981::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:32:8d:79:6f:9f:01:e8:c0:89:b8:44:85:fd:d8:39:19:a7:3f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:19 2025 GMT
            Not After : Feb  3 18:13:19 2026 GMT
        Subject: CN=3F5CC1FBE1B576858B7225E4F13ECA414C04D378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:42:28:f8:9b:b2:de:f0:70:63:94:f6:ea:
                    a1:6a:65:9c:01:8d:49:2f:4b:88:4f:63:a3:18:cd:
                    d8:86:08:83:52:7b:a3:7a:ca:ef:9f:3e:b3:1a:9f:
                    34:3b:c4:ba:aa:27:2f:46:60:ef:25:40:58:f2:3c:
                    78:af:72:61:93:ce:7f:4a:f0:01:ef:4b:ad:20:b4:
                    67:4a:0b:c2:11:d4:5b:88:a9:77:e3:0f:ec:4c:1d:
                    63:1a:57:ac:4b:69:3f:d3:2b:6d:e8:c6:68:05:79:
                    63:ee:13:1c:a6:8b:76:0e:2e:51:5d:a6:f9:7f:55:
                    1e:fa:66:45:b5:40:62:b9:37:39:37:6c:8e:06:59:
                    db:a8:40:49:b3:59:9f:44:8e:a0:4d:88:f8:8c:2b:
                    a9:78:65:6b:58:9c:6e:11:5b:71:f0:f3:c4:59:bf:
                    08:9f:bc:72:d0:cf:c0:cb:11:f3:02:63:13:b4:c1:
                    b7:36:f0:ad:c7:9c:be:27:29:ef:70:30:99:a0:e2:
                    3c:c8:08:5c:e0:ab:27:9c:ca:99:60:a5:db:a6:82:
                    25:ef:b1:65:64:fd:40:3a:a3:e0:47:e4:60:09:d6:
                    ef:ee:42:17:e8:72:85:9d:7b:f6:f1:e6:11:fe:0e:
                    6d:7e:40:81:06:f2:67:d6:2f:93:11:29:67:95:73:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5C:C1:FB:E1:B5:76:85:8B:72:25:E4:F1:3E:CA:41:4C:04:D3:78
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938313a3a2f34382d3438203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9981::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:43:83:fc:06:48:b4:82:d7:6f:5a:4a:5b:09:5a:79:c4:30:
         be:fc:38:36:04:47:cd:6f:96:e9:61:18:7b:4e:20:a1:8f:94:
         6b:81:d5:0b:34:f2:5c:1d:79:24:85:66:d8:c6:e2:87:e0:3d:
         7a:41:81:6f:e3:80:e5:ca:ad:7c:f3:9d:2b:f4:76:fd:bb:f7:
         b7:13:98:f5:b2:31:19:1d:17:ea:a3:2e:e3:69:37:12:01:cd:
         81:97:05:95:c0:67:d1:ac:03:39:4a:a1:61:bf:36:8c:90:a8:
         e1:88:9a:40:b6:70:0e:11:42:64:81:1d:4c:c1:64:81:c0:1a:
         f5:c3:ca:a1:4e:20:3a:b9:28:6c:d7:5b:08:21:ab:50:89:f1:
         eb:2c:bd:54:d5:ed:66:8d:28:7e:8b:50:0e:c7:7d:61:66:6f:
         6a:24:20:a9:05:d8:8c:13:76:2f:9f:5b:d9:73:ef:af:1d:e0:
         cb:25:fc:eb:4e:ff:2c:9b:d9:55:67:89:3b:c7:d5:e6:63:b4:
         1f:0d:54:05:9e:06:3e:ad:ac:7a:9e:2b:ca:72:4d:dc:bb:81:
         19:c6:20:cd:a9:8a:c6:64:e3:06:ec:4c:03:50:7c:34:a2:b8:
         eb:b3:96:5a:43:81:af:f3:91:29:ad:b5:fa:40:84:43:50:a0:
         05:b2:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:10 2025 by rpki-client