Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
File:                     323830333a336332303a3a2f33322d3438203d3e20323636363732.roa (raw, json)
Hash identifier:          brSqKmBNr9Mz1vTVkgyB7Eo7nne6K8DnDVGg/BVQ8g0=
Subject key identifier:   13:94:5C:DF:81:0B:49:71:4E:74:07:FF:4C:59:F2:A8:A8:7A:87:11
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       142CEEE61770992BF556B86379D67C907878F783
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
Signing time:             Tue 04 Feb 2025 18:41:04 +0000
ROA not before:           Tue 04 Feb 2025 18:36:04 +0000
ROA not after:            Tue 03 Feb 2026 18:41:04 +0000
asID:                     266672
IP address blocks:        2803:3c20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2c:ee:e6:17:70:99:2b:f5:56:b8:63:79:d6:7c:90:78:78:f7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Feb  4 18:36:04 2025 GMT
            Not After : Feb  3 18:41:04 2026 GMT
        Subject: CN=13945CDF810B49714E7407FF4C59F2A8A87A8711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:3d:88:39:8b:24:18:b7:e4:9f:7b:eb:b2:
                    fe:c4:0a:b8:68:68:72:ad:4a:61:2b:fd:a6:cf:28:
                    f1:f1:b5:d7:7e:39:13:69:d1:2b:ca:40:25:1e:cf:
                    88:fd:2e:ad:88:b4:3a:df:90:05:c2:bb:01:6b:1b:
                    56:18:6d:00:c9:78:30:a3:e1:1d:2d:d6:44:47:fa:
                    4b:c7:08:d4:c5:2f:f8:c8:1c:f7:a9:11:40:71:00:
                    9b:4a:6d:79:90:43:58:19:a2:f2:28:08:7a:ec:0a:
                    ae:44:86:09:e2:f7:5d:84:1d:3c:1a:ce:5c:c3:be:
                    a1:ce:3a:13:0b:2e:ab:38:ef:a9:2c:cc:de:0d:93:
                    ff:08:c4:32:bc:a0:af:b5:77:07:4d:98:5b:83:62:
                    8b:0d:11:5b:b0:f3:42:c5:c1:55:34:07:e1:cb:53:
                    f6:a2:76:03:33:16:51:93:88:a1:17:50:b3:f1:98:
                    ef:86:57:bf:9e:03:01:01:3d:d0:0a:6a:e0:e3:54:
                    62:72:5e:d5:96:75:36:1b:fa:1c:a5:e5:a4:b9:f9:
                    90:4b:9f:83:0b:7d:b7:fb:43:7d:c3:59:34:3a:bb:
                    4f:9a:27:a4:e1:f2:85:5a:e3:d6:5b:87:aa:30:5d:
                    7b:15:22:87:ec:ca:92:10:33:57:ad:53:f0:18:c0:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:94:5C:DF:81:0B:49:71:4E:74:07:FF:4C:59:F2:A8:A8:7A:87:11
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:70:2f:b2:7d:5c:ae:aa:fa:d8:f8:8a:9f:7c:fe:57:ac:
         36:12:eb:5e:21:43:91:87:5c:27:31:9f:4b:a6:d6:53:fb:f5:
         15:6f:ed:3e:59:a9:b3:59:d0:69:72:7f:7f:5c:12:7e:2e:2d:
         d8:37:b2:cc:fe:db:a4:7b:3a:dd:5e:a4:65:29:5d:63:87:91:
         eb:39:93:b7:8b:1a:17:25:4a:43:3a:b3:d2:1f:b1:6a:d3:18:
         47:92:d8:ce:1f:62:4e:2d:da:fc:a0:16:48:de:02:3b:a9:0a:
         f3:de:9c:f5:49:ef:bf:84:0e:d8:9f:04:40:82:39:19:e2:c7:
         8c:3a:ea:2f:94:ac:c9:48:76:84:e7:a3:53:f2:57:54:7e:96:
         82:02:9a:78:9b:03:39:50:8a:0c:fd:cc:27:3f:88:0d:34:b5:
         cf:47:9a:26:9e:92:a0:b3:63:69:b9:c3:cb:d5:f6:1b:9d:e6:
         f4:db:c4:6d:2f:e3:51:4d:62:0e:3a:22:01:25:6e:eb:2f:a9:
         10:da:54:bb:23:2f:fb:f2:f4:38:8a:ef:f7:64:90:e8:4b:c2:
         72:68:b1:10:60:49:6f:30:ca:55:65:cf:07:7e:e6:a6:ed:50:
         6c:1f:c3:ff:c0:20:b7:2c:f9:0d:91:32:c1:84:90:aa:4b:92:
         09:f6:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:51:21 2025 by rpki-client