Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          EnzRDViUWHhmsDCVbv9bVfyMztQyqFGJjSjrP4IyZ7Y=
Subject key identifier:   F5:61:EB:DD:8D:57:80:72:9E:E5:20:91:2A:A8:E9:9A:54:E7:03:BD
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       7A689B1B9A238D5B413C5BD2DE58D3C22DF1E3C2
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:48:27 +0000
ROA not before:           Tue 04 Feb 2025 18:43:27 +0000
ROA not after:            Tue 03 Feb 2026 18:48:27 +0000
asID:                     19429
IP address blocks:        2801:16e:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:9b:1b:9a:23:8d:5b:41:3c:5b:d2:de:58:d3:c2:2d:f1:e3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Feb  4 18:43:27 2025 GMT
            Not After : Feb  3 18:48:27 2026 GMT
        Subject: CN=F561EBDD8D5780729EE520912AA8E99A54E703BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:df:4d:d8:c5:b5:83:45:a8:49:3b:cb:09:
                    ac:59:7a:15:af:b8:be:81:51:b2:9b:49:2c:6c:03:
                    01:fa:0c:55:72:a1:27:0e:28:15:39:c4:06:09:b4:
                    a7:60:77:0c:1f:59:5a:a8:ae:23:6f:d3:be:d9:b1:
                    b5:6a:6c:95:5a:bd:87:f6:fd:61:34:76:17:c1:69:
                    86:52:6d:0a:87:e2:7f:37:3e:d7:90:2a:8d:22:a2:
                    d6:ab:d0:e7:17:cf:e7:9b:3f:be:81:69:14:03:bb:
                    03:c2:3f:97:bb:2f:bf:73:cb:62:c2:e8:2b:aa:e6:
                    c9:61:f9:40:53:45:47:ae:38:c2:ce:77:c2:d0:85:
                    e8:ba:36:3f:3d:06:47:b5:c7:13:d6:75:8d:f1:6c:
                    5f:59:1a:13:b7:8a:83:1d:8a:78:22:f3:ed:80:23:
                    63:09:c4:bd:29:da:c0:0b:6f:34:ab:97:f0:46:3c:
                    bd:d7:b7:0f:c6:44:ba:0e:5c:86:24:50:f9:75:b7:
                    dd:d6:cf:d3:90:e4:a1:f7:7a:10:74:67:df:db:67:
                    ee:38:5b:0a:d2:f8:a8:6b:4d:0e:05:d4:d4:cf:d8:
                    8a:4e:41:e4:97:7d:ab:e7:c7:ee:f2:9f:5f:9e:0c:
                    91:55:12:04:a5:7f:8e:2e:36:a6:a4:ed:73:f8:35:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:EB:DD:8D:57:80:72:9E:E5:20:91:2A:A8:E9:9A:54:E7:03:BD
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:23:8c:5e:43:2c:91:ad:5c:5c:74:7f:28:98:f3:ff:0b:fe:
         5f:96:9a:7c:7a:cd:1a:2e:fd:60:9b:8d:cc:4e:cc:ec:23:51:
         bb:e5:00:ee:6c:a2:be:f0:68:16:98:25:94:a2:d8:c2:e3:3b:
         03:e1:39:b8:d3:22:5b:be:d3:90:8b:5f:17:4e:b9:f0:66:08:
         8f:0e:77:6e:ef:ab:77:59:0b:e6:f2:79:71:1f:f6:25:88:01:
         07:ea:6e:f4:4a:ad:9f:92:51:1d:f2:f7:3b:b0:3c:6e:f1:b3:
         67:e1:34:1c:ae:15:8c:18:ce:a5:81:67:8d:18:c2:82:65:a5:
         29:1e:da:33:94:27:77:ff:1f:b0:9b:82:e0:72:6c:c4:31:a5:
         5c:6a:66:90:04:4e:58:4a:7e:16:71:ac:26:7d:a2:07:3f:c5:
         f6:a7:8b:58:a3:69:85:e0:36:ca:85:b8:29:8b:2b:c8:01:a3:
         88:91:4d:22:85:9a:d2:6f:35:73:c4:c6:bb:c4:16:47:08:a6:
         e7:79:d3:64:fe:1f:b7:df:84:94:90:6b:e5:25:9a:70:47:39:
         55:79:ea:b8:7e:6e:60:2c:36:c3:47:84:62:45:2a:11:e4:fd:
         b2:c2:59:ba:49:f6:cc:76:09:5d:b8:2c:6d:ed:82:31:e7:ee:
         fb:13:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:53 2025 by rpki-client