Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a3a2f33322d3634203d3e203634313136.roa
File:                     323830333a636436303a3a2f33322d3634203d3e203634313136.roa (raw, json)
Hash identifier:          uY25zXecmcHuT78ezRpmDnJvNpRoStLYbY/VQF7NqqU=
Subject key identifier:   E2:14:F6:13:5C:F1:A6:B2:78:4F:AD:EC:4B:D1:79:BB:A7:8B:30:33
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       337B8521E10E5A818BF2A30679754FEA8EDE7AE5
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a3a2f33322d3634203d3e203634313136.roa
Signing time:             Tue 04 Feb 2025 18:24:45 +0000
ROA not before:           Tue 04 Feb 2025 18:19:45 +0000
ROA not after:            Tue 03 Feb 2026 18:24:45 +0000
asID:                     64116
IP address blocks:        2803:cd60::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:85:21:e1:0e:5a:81:8b:f2:a3:06:79:75:4f:ea:8e:de:7a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Feb  4 18:19:45 2025 GMT
            Not After : Feb  3 18:24:45 2026 GMT
        Subject: CN=E214F6135CF1A6B2784FADEC4BD179BBA78B3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:d9:ee:30:59:1b:53:fd:e2:60:3b:26:b7:
                    41:ad:3d:21:e7:70:c4:0b:28:36:7a:d5:f4:82:ed:
                    e5:5e:27:74:80:91:d4:12:d2:e5:af:4e:50:3a:2e:
                    51:ac:56:35:de:83:7f:ce:34:3a:c9:5b:78:e8:a9:
                    3e:38:df:fb:1c:9f:3f:57:4f:ff:49:d6:e4:8d:b7:
                    3a:a8:de:43:e2:dc:07:88:3d:9a:98:66:78:a8:c4:
                    b8:60:0d:ea:ee:20:ed:1c:b5:94:ac:98:40:40:07:
                    4c:ce:2b:1f:23:a3:9d:9c:18:71:64:06:3c:60:06:
                    8b:3a:cf:09:54:c5:15:e1:95:2b:b8:b5:86:eb:54:
                    0a:a0:38:8a:52:d7:4b:d4:a8:ca:29:5b:77:b2:c2:
                    71:4a:40:8c:97:d0:5a:76:a8:e6:a7:46:b7:68:39:
                    5d:0a:76:1c:6d:a1:16:ad:5c:23:10:c6:a7:40:6d:
                    6b:1b:71:4a:65:4a:5c:6e:3b:4a:56:87:65:72:0d:
                    aa:7f:d7:ea:ed:ed:df:ef:b6:53:4b:36:5f:e5:f3:
                    44:a7:94:7a:08:8b:f0:b1:e1:59:62:1a:74:18:d0:
                    2c:51:c3:42:02:d9:3e:c4:c8:9f:b2:62:c2:23:26:
                    95:42:54:19:40:9e:04:d6:df:37:1b:21:8c:a9:3a:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:F6:13:5C:F1:A6:B2:78:4F:AD:EC:4B:D1:79:BB:A7:8B:30:33
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a3a2f33322d3634203d3e203634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:48:31:07:a5:10:ad:cd:1f:67:eb:7b:8c:24:c3:6c:fb:92:
         1f:8f:70:cf:ed:b5:d7:5a:d9:9f:2d:7e:e9:36:c4:b0:ea:db:
         fd:80:3d:62:9a:d5:60:2f:ae:cd:bf:20:13:26:ad:f6:7f:2a:
         98:f2:68:2c:cb:53:d7:19:7d:05:36:a7:f3:de:b8:48:52:55:
         58:15:65:de:06:25:66:5f:20:d2:c9:8a:16:67:96:ae:cf:4b:
         29:a4:4b:d4:0e:04:98:5d:74:ca:18:55:94:88:83:ce:bb:96:
         0c:fa:16:bd:e9:9f:5a:f5:ae:e6:51:df:62:a7:b6:6d:7e:47:
         65:a4:21:7f:b7:8d:f8:70:73:70:c3:bd:a2:f4:1e:1a:4e:1b:
         8d:7c:20:91:a8:6d:6d:a3:ff:f0:e8:52:44:8b:f7:54:ef:9a:
         e2:ec:01:0c:4f:13:9b:a6:e4:24:ea:e5:76:68:1c:ea:3a:1a:
         ae:b9:65:74:f8:81:84:ee:3c:af:8d:44:01:c5:88:74:7a:46:
         f9:95:d2:99:1c:4e:f6:7a:da:11:93:4b:36:b7:eb:be:dd:ea:
         f0:29:b1:8c:75:5b:92:e5:23:76:0e:75:e6:6e:4d:d3:cb:16:
         56:dc:53:2d:ff:dc:c2:d0:8f:ce:ee:bc:2f:c0:82:8a:fd:92:
         5b:10:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:52:47 2025 by rpki-client