Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
File:                     323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa (raw, json)
Hash identifier:          5+qlsszRj4uBfEmXN2Plq0tbc88iszlY6YcMtXg4eT8=
Subject key identifier:   B9:15:6E:B0:30:55:4F:5E:FE:71:AC:6B:7C:17:FE:20:CF:CF:60:D3
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       1475C0EFF9BB53EB7573E097EE3034B8195CB5CD
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:48:29 +0000
ROA not before:           Tue 04 Feb 2025 18:43:29 +0000
ROA not after:            Tue 03 Feb 2026 18:48:29 +0000
asID:                     19429
IP address blocks:        2801:16e:10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:c0:ef:f9:bb:53:eb:75:73:e0:97:ee:30:34:b8:19:5c:b5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Feb  4 18:43:29 2025 GMT
            Not After : Feb  3 18:48:29 2026 GMT
        Subject: CN=B9156EB030554F5EFE71AC6B7C17FE20CFCF60D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:ff:24:b9:fa:6a:41:5a:0a:de:b1:be:e8:
                    ba:36:3b:15:8e:26:14:0a:d4:fd:4e:c6:4f:0c:31:
                    c2:9f:f4:86:93:94:fb:12:3e:ea:98:51:35:da:41:
                    54:f0:eb:12:c1:ef:df:0e:e0:97:ce:56:c6:36:17:
                    34:c5:30:4c:c4:e6:98:f3:8b:6d:d9:4c:d9:1e:de:
                    9a:e7:9a:9e:67:99:81:9a:2d:9f:d9:ae:60:18:5f:
                    71:83:f4:c1:0b:37:1b:02:77:7e:13:b5:8c:94:60:
                    bb:00:c8:ea:be:8b:98:b8:d6:37:e3:27:23:20:09:
                    57:12:d9:98:d5:55:d5:e5:fd:3c:2a:5a:1f:c7:17:
                    64:9d:8c:9a:58:9d:95:00:88:b0:db:67:27:f2:69:
                    3f:eb:14:0a:a5:24:9b:35:e8:3e:bd:cc:f9:56:6c:
                    96:fa:7c:2c:bb:49:49:ab:97:cf:5a:60:19:3e:2e:
                    ad:59:f3:c1:13:a3:39:1e:73:e2:d2:52:81:01:47:
                    ca:94:1e:b0:26:10:03:04:b0:95:ab:81:9f:c4:98:
                    a5:32:10:3e:0d:8a:42:b5:19:19:e3:d3:88:c5:a1:
                    48:1f:75:4e:fe:70:03:83:20:93:53:b6:1e:87:9a:
                    60:48:5c:cf:1a:b4:81:7d:81:64:69:40:2a:32:6a:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:6E:B0:30:55:4F:5E:FE:71:AC:6B:7C:17:FE:20:CF:CF:60:D3
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:09:b2:19:5a:19:eb:2e:14:1c:ca:23:36:79:7c:9f:78:
         33:03:e9:10:6a:0c:9d:91:bc:cf:cd:e5:1f:a9:bf:f4:77:b3:
         d1:41:27:d5:57:d3:ed:26:4f:75:d1:d1:9a:c6:3a:db:75:95:
         5d:09:b5:3b:62:c5:51:49:86:d3:d3:34:1c:b6:4b:82:6f:a0:
         3f:85:d7:aa:d1:3a:a8:69:e7:84:29:02:05:32:46:f2:64:2b:
         db:e5:30:c9:21:b1:a7:09:2b:dd:62:df:13:88:fb:ae:08:34:
         60:ad:7d:a2:40:58:f9:23:3e:88:19:26:d8:55:8a:96:fa:6b:
         5e:25:07:69:a6:1d:8d:35:0a:1a:5f:68:3e:8a:a7:2b:3c:b5:
         98:54:63:de:54:d0:8f:d6:3a:06:b9:64:99:98:0b:30:dd:de:
         10:32:8a:bc:fd:7a:83:4a:f5:9c:89:9d:74:d0:3b:59:04:a0:
         38:06:35:70:3e:e1:5b:a9:97:52:c3:a5:33:30:f8:be:6a:78:
         d2:6b:f0:ce:19:56:e4:9d:28:8b:72:a8:2e:2a:2d:3d:58:a2:
         11:5b:8a:00:71:e0:d9:bb:bb:f3:65:5b:07:34:ec:ff:34:cb:
         b1:6f:0d:fd:08:64:b0:99:cd:31:c7:11:65:bf:66:ef:51:e5:
         4f:57:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:50 2025 by rpki-client