Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          4HcUyFd+qeIlVD5mVk9tj6aneLywEsWupjpLp/Km3r8=
Subject key identifier:   F6:A9:97:EF:93:53:B2:F6:5A:20:67:04:8A:DB:F4:79:2C:1A:94:D8
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       7D6BC24989BACBFFFFFD5F40B5F9AD5D9A17DE63
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:05 +0000
ROA not before:           Tue 04 Feb 2025 18:20:05 +0000
ROA not after:            Tue 03 Feb 2026 18:25:05 +0000
asID:                     27818
IP address blocks:        2803:3380:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6b:c2:49:89:ba:cb:ff:ff:fd:5f:40:b5:f9:ad:5d:9a:17:de:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:05 2025 GMT
            Not After : Feb  3 18:25:05 2026 GMT
        Subject: CN=F6A997EF9353B2F65A2067048ADBF4792C1A94D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:92:f0:99:c4:87:02:ea:47:87:b0:d0:01:
                    14:e2:83:0b:6f:12:68:fe:a5:40:95:12:c5:5f:5e:
                    1b:31:7f:e3:c7:6c:45:92:7f:04:ed:9e:6e:2e:6b:
                    f1:9b:bd:2b:ca:97:69:89:ee:46:be:17:3e:d1:7e:
                    63:59:86:50:b9:22:14:f3:72:63:39:3d:f8:1c:87:
                    79:d2:36:10:bf:46:48:bc:95:26:6f:8a:96:44:cb:
                    45:16:87:9c:f3:76:63:ad:44:5c:ba:d4:ef:6e:d6:
                    80:2c:eb:97:6e:58:61:9a:e7:8b:92:f4:4e:56:ae:
                    5e:d1:51:be:43:9a:ec:e0:30:8a:fc:60:13:44:3c:
                    09:9b:f5:a2:34:4d:69:df:fb:b1:ef:2c:03:1c:1e:
                    c6:05:bd:55:d7:0b:f5:e8:3c:83:35:2d:9f:40:10:
                    61:fe:19:b5:0c:b3:08:67:9c:f6:3d:08:fe:26:15:
                    f6:c6:e6:fe:73:b0:21:80:a1:cd:fa:2e:21:16:32:
                    ee:e7:00:c2:f8:c6:17:8f:5b:d8:8e:fc:0c:8b:73:
                    7c:a0:82:da:ab:e7:b4:50:42:58:7c:12:9c:c7:d8:
                    ed:f6:5f:37:5d:1c:7f:eb:01:8d:63:3e:85:de:39:
                    fc:fa:a2:d9:15:8f:08:5f:e7:00:29:34:01:8c:0d:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A9:97:EF:93:53:B2:F6:5A:20:67:04:8A:DB:F4:79:2C:1A:94:D8
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:5e:01:9f:2f:f4:05:a2:86:51:40:90:a7:62:5b:0a:e5:05:
         df:82:27:23:ed:1c:d0:2b:40:c0:18:fb:80:e0:a5:19:53:2f:
         53:26:46:30:e6:55:25:96:e2:b3:6c:0c:25:b5:77:3c:c1:da:
         be:f6:0e:e8:c2:2e:e0:d3:d1:ef:6a:83:de:cf:a0:9e:76:04:
         e7:64:c2:63:13:8e:8a:3e:2c:61:11:e1:de:b6:da:19:2f:ce:
         3d:10:57:ce:e7:6e:45:ef:04:44:be:f5:51:56:e6:58:7d:cc:
         54:99:12:a2:82:3f:aa:7a:08:a5:69:d5:c3:e2:77:3b:98:ef:
         e6:91:39:70:cc:ba:84:b4:44:ba:bd:95:9a:ca:5f:82:4d:a7:
         61:f0:03:3a:b5:22:ed:b5:a3:89:1a:0c:f2:f2:74:a9:b0:0a:
         22:d4:9c:1e:dc:43:a4:62:8a:88:c9:98:3d:c6:f9:ee:59:0a:
         90:82:23:31:36:aa:cc:17:17:e6:39:8c:a2:13:2d:38:78:ed:
         0b:38:74:0f:ce:b8:25:a3:b8:1d:d1:1b:a1:33:86:ad:f6:e4:
         94:a4:7c:29:5b:cd:4a:ea:41:a2:51:c0:9b:ad:4b:9d:49:5d:
         b7:6c:c6:94:6c:eb:62:cd:3e:c6:8f:7b:c6:76:ef:5d:e0:06:
         52:e0:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:15 2025 by rpki-client