Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33342d3334203d3e203631343933.roa
File:                     323830333a656238303a3a2f33342d3334203d3e203631343933.roa (raw, json)
Hash identifier:          bcJTILbJJQk7IlOjfsxOQQBsfRM470IN+k30dWDYSoA=
Subject key identifier:   F1:17:03:1A:80:4A:06:7F:41:65:4F:2B:43:6B:5B:95:62:A4:D4:50
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       124B9ACE738864CA91CEEC1C313BEFCCBA523AC9
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33342d3334203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:44 +0000
ROA not before:           Tue 04 Feb 2025 18:45:44 +0000
ROA not after:            Tue 03 Feb 2026 18:50:44 +0000
asID:                     61493
IP address blocks:        2803:eb80::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:9a:ce:73:88:64:ca:91:ce:ec:1c:31:3b:ef:cc:ba:52:3a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:44 2025 GMT
            Not After : Feb  3 18:50:44 2026 GMT
        Subject: CN=F117031A804A067F41654F2B436B5B9562A4D450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:10:0d:16:2c:e9:1c:a8:34:49:91:4c:54:
                    8f:ea:a0:35:d4:e8:ed:8c:92:79:69:9e:da:cc:6a:
                    cf:a8:b8:93:f6:b9:03:55:2c:25:a6:89:60:a1:27:
                    56:68:a6:a3:7d:ef:5f:85:07:75:b3:26:fa:8c:fb:
                    cd:8d:f6:34:a0:6e:26:b4:33:95:2e:83:a6:0b:22:
                    9d:4a:33:a5:6c:ca:b2:0a:5c:77:5b:65:a9:c9:b7:
                    e2:5d:97:47:b1:c5:fd:f0:fd:f4:28:ff:7d:0a:9b:
                    31:60:b8:83:45:d5:2b:20:f5:08:24:16:22:2f:ea:
                    eb:ae:ab:aa:c7:c0:fc:9f:2c:a5:69:87:67:9f:72:
                    73:01:53:7b:dd:ef:98:a4:31:af:33:7e:0f:99:9a:
                    41:02:3d:e9:0d:62:d7:a1:e7:69:5d:48:2b:1f:67:
                    bc:f9:57:1e:b6:83:d4:8e:5f:73:35:02:95:14:fe:
                    42:86:d4:0a:d0:17:39:eb:b2:fb:f4:59:16:38:4e:
                    c0:4f:0e:8f:81:3e:e7:b9:3d:5a:e3:25:f1:b4:9e:
                    52:4c:49:19:25:3d:00:d9:16:56:32:8e:3d:7e:0d:
                    49:77:c1:d8:12:b1:f2:15:ac:bd:27:ce:de:50:42:
                    f5:5e:1f:68:95:05:ea:74:d8:a3:8f:24:db:f6:db:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:17:03:1A:80:4A:06:7F:41:65:4F:2B:43:6B:5B:95:62:A4:D4:50
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33342d3334203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:03:f0:6e:7a:8d:91:6d:dc:1e:98:51:07:03:da:bd:2b:e8:
         3b:bf:81:2b:75:51:c3:6f:df:69:84:d8:4e:9f:ac:5e:b8:bc:
         ab:d0:90:63:96:b1:7b:37:a0:17:d5:01:33:89:62:b7:ca:2a:
         b8:40:c6:3b:cc:b3:5d:d3:89:2c:37:1d:27:74:ae:84:05:a9:
         19:c5:25:7e:e4:4f:66:06:e2:57:55:65:7e:e6:01:62:ff:a0:
         22:d1:b9:5e:e7:8e:69:7c:9e:13:d1:db:96:12:fa:52:2e:45:
         c5:43:9b:09:f1:b6:76:75:bd:49:87:69:0c:a0:bf:11:aa:48:
         80:e3:92:48:f7:70:51:dd:13:43:15:93:26:4a:dd:be:97:4f:
         2e:68:f0:3e:1d:1f:33:89:38:f2:52:c5:cf:07:5e:4d:1d:f8:
         6b:3c:f2:4e:19:30:5a:45:db:ea:38:94:00:b4:6b:86:dc:9b:
         93:89:17:87:bf:32:07:5c:94:94:5e:d7:16:6a:62:0b:cf:df:
         44:77:72:6d:28:5b:c2:67:ad:9e:5d:ca:80:23:5a:44:96:07:
         7c:77:f9:2e:ff:3b:ad:83:48:29:77:ee:e6:4b:c9:e4:ce:bc:
         8b:37:df:8e:79:df:5d:62:71:84:2c:1c:35:c5:6b:14:65:49:
         36:a7:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:49:53 2025 by rpki-client