Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/323830333a613638303a3a2f33322d3332203d3e20323633323231.roa
File:                     323830333a613638303a3a2f33322d3332203d3e20323633323231.roa (raw, json)
Hash identifier:          +DUKTIUZayYjSlWHEz+98MRhAAJmAuDS2NdQeRUMqKY=
Subject key identifier:   B9:C8:1E:39:6A:5F:13:5E:F9:45:31:8B:5D:BC:49:8E:60:52:65:4E
Certificate issuer:       /CN=5D6C01932C342063BFD909811E1D18892BDD422B
Certificate serial:       3EB92F6E37FCE25B279CE697F3A2D77CFB9BBABA
Authority key identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/323830333a613638303a3a2f33322d3332203d3e20323633323231.roa
Signing time:             Tue 04 Feb 2025 18:45:44 +0000
ROA not before:           Tue 04 Feb 2025 18:40:44 +0000
ROA not after:            Tue 03 Feb 2026 18:45:44 +0000
asID:                     263221
IP address blocks:        2803:a680::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b9:2f:6e:37:fc:e2:5b:27:9c:e6:97:f3:a2:d7:7c:fb:9b:ba:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6C01932C342063BFD909811E1D18892BDD422B
        Validity
            Not Before: Feb  4 18:40:44 2025 GMT
            Not After : Feb  3 18:45:44 2026 GMT
        Subject: CN=B9C81E396A5F135EF945318B5DBC498E6052654E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:eb:7f:9f:a1:95:55:b9:36:56:dc:68:60:
                    8e:17:e2:ce:c4:02:d4:0c:40:12:1a:e5:35:ae:2f:
                    87:5c:c6:e6:21:cb:db:d5:3c:5e:87:ec:17:78:d7:
                    91:ce:04:a6:c9:de:56:2b:b7:3d:63:34:9b:92:dc:
                    65:c7:a2:af:11:a7:e7:f3:85:63:44:79:17:96:22:
                    5f:a4:99:ef:83:06:06:fd:8f:aa:45:e7:bb:38:76:
                    e4:60:21:6f:71:af:f3:ad:35:e6:a9:4b:ff:9b:c0:
                    46:1b:05:72:cd:c7:cf:70:7d:d6:33:c3:b2:4d:4b:
                    a6:5e:09:0d:b1:77:6e:1e:02:e2:27:0b:39:64:b9:
                    82:cd:53:d1:2b:36:e6:d4:11:b1:4f:0b:19:15:44:
                    5e:23:3f:09:67:54:d9:8b:e5:40:5a:52:12:8e:5f:
                    d8:e2:5a:29:c3:df:04:8b:66:27:03:b3:35:68:7f:
                    82:4b:75:d3:9b:f6:ee:46:64:53:8e:96:be:ac:3e:
                    7a:86:f2:6a:02:48:c3:96:79:fa:86:e5:9d:15:ff:
                    0c:84:d0:8b:32:81:dc:c2:9d:63:f9:33:87:b9:54:
                    0f:92:54:90:51:ad:54:1b:34:4b:bc:60:af:d6:b7:
                    4d:d5:47:c3:3e:00:64:2b:28:c6:36:68:bf:0e:58:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:1E:39:6A:5F:13:5E:F9:45:31:8B:5D:BC:49:8E:60:52:65:4E
            X509v3 Authority Key Identifier:
                keyid:5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/323830333a613638303a3a2f33322d3332203d3e20323633323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a680::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:09:39:a3:2b:db:09:96:bf:7e:a7:9f:3b:b9:60:86:68:
         63:e3:39:cb:c5:d7:33:0c:78:8f:5e:6b:e2:46:d3:a1:1c:b5:
         2b:5d:a6:c8:85:12:5b:fb:0a:69:57:58:de:45:66:36:98:61:
         dd:ed:b8:4b:ac:b6:52:fc:bb:0a:66:91:41:bf:87:11:f8:b0:
         51:39:5b:19:41:be:b4:87:3b:3d:09:e4:7f:55:8d:7d:ac:bb:
         ae:ca:d7:2e:c1:d0:77:f5:e0:c1:1b:a1:e3:5d:e3:a2:04:9b:
         e1:d7:b7:48:c9:c6:4c:56:59:e4:26:f4:a0:33:2f:15:09:21:
         89:ea:df:d0:e0:4a:5d:a8:f5:bc:c3:82:ed:e7:e2:5b:12:9c:
         53:83:3d:f6:ff:c8:fa:00:3f:84:fe:82:cf:c8:15:79:ba:41:
         77:f3:3a:a1:ec:af:fa:e4:fd:bc:16:cd:ff:2d:eb:49:9e:f9:
         c7:e3:ff:18:e1:1a:28:4d:04:94:a2:46:f2:58:a0:c7:2b:fb:
         23:9b:36:54:bc:92:f4:e6:0b:af:1d:65:68:7d:ac:b8:28:d0:
         8b:0e:dc:f3:09:14:d1:28:29:e4:03:08:d0:2d:5e:08:99:25:
         1c:18:73:74:e2:28:4a:f6:cf:81:1c:79:59:1a:96:bc:ad:4a:
         67:6d:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:13 2025 by rpki-client