Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa
File:                     323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa (raw, json)
Hash identifier:          NBDRJ3d0RsK1ybd5oQI36FFyLBbsQG1JnTlulLO4ytE=
Subject key identifier:   71:88:38:3B:11:E4:98:EE:4C:1B:CF:D6:04:5C:4C:F1:97:C8:EB:DA
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       6217EF0329DB49FD4E26844D7DCCC37EBC62FFCA
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:48:27 +0000
ROA not before:           Tue 04 Feb 2025 18:43:27 +0000
ROA not after:            Tue 03 Feb 2026 18:48:27 +0000
asID:                     19429
IP address blocks:        2801:16e:8::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:17:ef:03:29:db:49:fd:4e:26:84:4d:7d:cc:c3:7e:bc:62:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Feb  4 18:43:27 2025 GMT
            Not After : Feb  3 18:48:27 2026 GMT
        Subject: CN=7188383B11E498EE4C1BCFD6045C4CF197C8EBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:2f:4e:92:f4:09:a4:85:20:ef:da:66:e6:
                    97:12:c9:8c:f8:3c:0e:54:f0:cb:17:82:53:f8:c0:
                    ba:c0:9c:f5:60:71:58:0a:24:eb:97:fe:53:60:ae:
                    ac:44:06:19:49:d2:ac:93:51:05:fb:8e:df:18:df:
                    c0:0b:8c:f6:6f:c2:72:37:69:5b:1f:a0:47:8c:f5:
                    6c:3a:d9:bd:0b:41:be:36:3c:e1:84:4e:a5:b1:b8:
                    82:6a:3d:a2:5f:b1:59:de:c8:80:d8:63:0c:01:31:
                    24:71:a9:d1:83:9b:87:d7:5a:25:ef:b4:d0:3a:57:
                    7a:98:cc:de:37:e6:94:2d:50:6e:3d:af:b9:e0:5a:
                    6c:99:7b:5c:4e:e2:fc:17:fa:59:40:99:b8:1e:f5:
                    3d:8a:34:a5:59:1b:7a:65:7d:9e:c4:85:92:f6:f0:
                    f7:3f:96:0d:21:73:c7:78:2e:46:f8:f0:74:fa:e8:
                    fc:91:0a:16:36:78:a7:30:54:0f:9d:c1:73:ca:9a:
                    e3:7b:53:1d:a5:cc:c9:e8:a6:63:35:d5:8b:9f:3e:
                    43:15:09:c0:2e:5c:d3:18:b9:01:d3:ff:f5:0c:86:
                    6a:c1:f0:0f:06:4d:d5:65:87:4b:43:43:a3:ae:40:
                    13:27:86:35:79:83:02:3b:8c:ec:ee:10:d9:99:96:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:38:3B:11:E4:98:EE:4C:1B:CF:D6:04:5C:4C:F1:97:C8:EB:DA
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         54:36:70:53:fd:ed:be:f3:b9:90:04:c8:fe:29:64:40:e6:85:
         08:b4:af:62:f6:45:d7:ac:3f:04:d6:97:6e:d3:8f:e9:27:d0:
         c2:26:41:f9:0b:06:c0:05:7d:24:0a:13:e2:63:46:af:ab:e1:
         33:ae:d6:d8:6c:36:8b:d3:fc:21:ef:f0:a5:5a:42:f0:49:6f:
         0b:5c:ad:0d:d2:df:75:0a:1b:25:3a:51:92:ff:41:23:80:0c:
         bf:da:3d:be:53:a2:53:38:0c:f8:20:48:e8:c2:af:b0:1d:11:
         08:34:96:60:3d:87:af:19:03:f6:71:31:f1:ac:46:7e:6b:a3:
         1c:3b:66:9a:88:bf:cf:81:3b:89:e8:00:9e:a7:56:62:43:29:
         c6:a0:17:11:91:26:d6:28:83:51:b1:ea:b6:7f:38:fd:bb:66:
         f7:f4:72:5f:df:9f:b8:89:ee:7a:11:c6:71:88:83:d3:ac:14:
         cf:77:9e:c7:0f:97:30:92:2d:a2:e3:43:bf:ae:07:2b:43:fb:
         61:80:a9:68:f5:53:81:34:2e:8c:c1:38:b7:63:4c:b9:bd:63:
         33:1f:d3:db:df:56:91:62:6f:9f:f3:a2:a1:89:c2:d7:78:16:
         6f:1f:84:1a:61:7f:93:5f:4d:3c:c6:6b:95:b6:7b:14:e6:2b:
         06:a2:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:08 2025 by rpki-client