Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
File:                     323830333a353363303a3a2f33322d3332203d3e20323635373435.roa (raw, json)
Hash identifier:          kHVPqBrymWiiGYrxxdkqq50fW6+E3g7bB4i0grZlZo8=
Subject key identifier:   71:1A:33:31:B0:C9:AB:9D:9B:14:FF:59:55:9A:4E:B7:40:24:5A:F0
Certificate issuer:       /CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
Certificate serial:       3B8676B4F7025445ED000A0C155B8EAAF6137860
Authority key identifier: B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
Signing time:             Tue 04 Feb 2025 18:05:39 +0000
ROA not before:           Tue 04 Feb 2025 18:00:39 +0000
ROA not after:            Tue 03 Feb 2026 18:05:39 +0000
asID:                     265745
IP address blocks:        2803:53c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:76:b4:f7:02:54:45:ed:00:0a:0c:15:5b:8e:aa:f6:13:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
        Validity
            Not Before: Feb  4 18:00:39 2025 GMT
            Not After : Feb  3 18:05:39 2026 GMT
        Subject: CN=711A3331B0C9AB9D9B14FF59559A4EB740245AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:9e:4a:ef:f1:e0:a3:17:4a:47:13:d3:68:
                    26:03:d4:af:8d:2d:20:7f:6b:1f:5d:0c:38:85:28:
                    d9:28:d3:81:9a:03:a4:b6:0d:c2:44:03:e1:82:1c:
                    b1:57:16:5f:43:09:b2:9c:75:87:e7:2e:c2:05:66:
                    fb:a2:c3:5c:4d:c9:bc:28:0f:2f:d8:f0:0a:36:29:
                    ba:e4:5b:16:6d:ce:47:47:03:dc:dd:9f:09:7a:4c:
                    41:17:2d:42:56:36:3c:93:fb:7a:88:8e:59:e4:45:
                    cd:9f:55:c0:05:58:12:0a:e3:6e:27:db:a8:ea:52:
                    0a:e9:51:8b:e0:cc:05:ef:2a:50:16:04:44:f3:25:
                    7b:bf:51:e8:82:fa:6d:9d:01:99:5d:f6:c7:53:44:
                    0a:94:4a:8f:72:2e:be:52:f4:f3:71:d3:a9:9e:0d:
                    ef:da:07:e8:b1:9e:74:cf:90:83:50:de:01:e4:66:
                    a9:92:e4:41:2b:ca:ec:45:4f:b0:98:dc:eb:a2:7d:
                    6e:4e:89:8e:f7:d3:68:75:69:4c:90:9e:24:f6:e7:
                    ad:03:6f:8b:29:61:1e:7d:32:29:e1:62:c7:1f:a8:
                    fc:3d:1e:66:0e:e7:2e:41:a1:76:f3:65:76:b2:cb:
                    cd:21:5c:f6:57:fe:df:fd:1d:c2:03:5c:c7:00:57:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:33:31:B0:C9:AB:9D:9B:14:FF:59:55:9A:4E:B7:40:24:5A:F0
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:e9:71:66:5b:af:c0:6d:6a:96:dc:2b:53:08:32:28:77:
         41:9b:3d:4b:0e:04:f1:ad:89:f5:b7:c0:f8:a9:32:f2:6c:00:
         dd:66:ec:f9:3e:01:5e:de:9d:a5:a8:35:8a:f7:ee:ac:f5:3f:
         33:0a:64:35:ca:70:b7:de:a1:25:d6:8a:99:bb:6c:4b:fa:86:
         33:66:6d:bb:9a:44:0e:7d:87:ce:e8:03:d8:3d:d9:f4:84:48:
         3d:bd:f5:e7:d2:cb:8c:aa:a1:79:3d:cd:38:1a:60:7f:ad:09:
         c7:b7:9e:b8:7b:f5:10:fb:23:c2:ec:b2:ae:af:e0:61:55:34:
         44:a3:08:47:a5:41:3b:dd:89:cf:14:76:4c:a2:80:be:3a:32:
         65:8a:ea:4b:14:2e:29:6b:e9:19:09:5c:00:96:f6:fb:c0:38:
         bc:03:9c:7c:0a:e6:8d:2e:e0:b2:99:54:3d:43:a8:c2:b9:d3:
         ee:48:d5:5a:9b:54:f2:ce:f1:ea:35:fb:aa:a0:a4:ff:e0:86:
         29:55:5f:5d:b1:26:41:76:ae:6c:51:3a:09:1d:6d:3b:7c:b4:
         f5:44:7f:3c:35:ab:e4:f5:35:a2:a3:c3:c5:49:50:6b:96:64:
         03:d6:a8:99:cf:db:e6:99:14:66:77:f4:7c:2d:49:70:4e:17:
         12:04:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:18:16 2025 by rpki-client