Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a383030303a3a2f33342d3334203d3e203631343933.roa
File:                     323830333a656238303a383030303a3a2f33342d3334203d3e203631343933.roa (raw, json)
Hash identifier:          qGGa0/5zeWwvoaKY7wsLkUFM3VK3ZGHV4fSbqYhyPqA=
Subject key identifier:   24:A2:FD:5A:B3:2E:55:CF:E5:9A:29:92:13:F5:B1:1E:CF:EE:AC:1A
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       3644E00E61CF08E3F8D2F8910606B837923594D3
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a383030303a3a2f33342d3334203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:45 +0000
ROA not before:           Tue 04 Feb 2025 18:45:45 +0000
ROA not after:            Tue 03 Feb 2026 18:50:45 +0000
asID:                     61493
IP address blocks:        2803:eb80:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:e0:0e:61:cf:08:e3:f8:d2:f8:91:06:06:b8:37:92:35:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:45 2025 GMT
            Not After : Feb  3 18:50:45 2026 GMT
        Subject: CN=24A2FD5AB32E55CFE59A299213F5B11ECFEEAC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:ed:db:13:c6:59:2b:3a:a1:df:84:21:07:
                    44:a2:9c:46:e5:07:2b:4e:f4:01:90:cc:20:6d:82:
                    22:93:50:55:a3:28:df:45:94:e6:3c:07:23:f1:50:
                    32:69:03:29:8d:28:65:df:eb:c1:1f:73:d5:86:14:
                    b5:59:b7:eb:19:87:1f:94:76:64:86:25:f8:91:29:
                    b7:03:8d:68:b2:f4:91:ad:03:21:85:2a:7b:c5:85:
                    74:a2:82:35:c1:48:2e:ef:ef:7b:63:cc:d1:2a:7d:
                    b9:b0:ff:59:05:2e:d1:7c:45:98:6a:57:42:29:9f:
                    4e:ba:ee:b9:6e:83:cd:ff:47:2c:a0:5c:17:59:7f:
                    56:4b:5d:f4:c0:3f:24:5c:17:43:78:16:02:e9:90:
                    a9:d2:08:04:77:26:cd:f9:76:f9:cb:a2:25:f2:00:
                    e6:58:6f:c4:98:9d:52:80:3f:fb:0c:d2:96:78:97:
                    22:6b:02:42:af:b8:20:e4:b9:7c:a3:b5:47:30:b7:
                    80:bd:ce:38:06:b5:22:39:0c:ad:a2:ec:cc:e3:51:
                    7f:a9:88:9a:d4:0f:ca:43:5f:88:ca:50:ee:b0:b3:
                    b0:ed:e4:1a:ba:d7:3f:c6:26:fb:38:0e:40:6d:5c:
                    18:fa:48:99:d4:e7:5e:13:7c:47:e4:7b:cf:2c:0a:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A2:FD:5A:B3:2E:55:CF:E5:9A:29:92:13:F5:B1:1E:CF:EE:AC:1A
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a383030303a3a2f33342d3334203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:27:9e:82:df:d5:fb:aa:62:00:7a:45:c3:0b:86:77:59:5e:
         f1:d4:dd:47:59:bb:96:6c:44:59:10:e5:ac:ec:5d:53:74:90:
         ed:fc:26:29:97:b2:98:43:45:48:4a:d5:01:00:cb:d7:e7:77:
         c4:f3:7d:78:6b:6b:1c:e6:b2:72:8d:e7:01:a5:f4:7c:d1:48:
         43:16:d3:d2:c9:bf:d8:ea:f7:4d:28:1c:df:52:8b:d9:9a:2d:
         9e:38:ee:ed:82:9d:5b:f9:19:8a:37:3f:99:0f:1d:f4:0e:57:
         48:2b:d5:c9:2a:42:34:9e:56:74:f0:8f:a1:2d:4b:64:ae:55:
         e3:a1:36:9f:ce:02:75:f5:39:0b:2a:a5:2b:d1:35:a0:35:dd:
         a5:27:cd:f6:56:81:90:ca:b9:7f:dc:9a:f2:de:76:3b:a5:0d:
         37:ff:f7:8a:55:86:dc:70:b9:fb:bd:35:0d:91:70:3e:35:ff:
         cc:08:b2:8e:e4:d8:41:4c:e3:bc:9e:e5:65:df:ba:60:7f:ce:
         30:0d:48:c3:40:9c:53:f4:c2:08:8e:75:3d:6c:b8:ee:b2:43:
         dd:e5:64:9c:97:88:69:0f:dc:4c:5c:1f:70:ec:de:8a:0e:4a:
         5c:0e:bb:75:ec:1e:51:6b:fd:89:5b:cb:8c:8a:d3:6c:97:c0:
         b8:0d:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:54 2025 by rpki-client