Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/323830333a363934303a3a2f33322d3438203d3e203631353132.roa
File:                     323830333a363934303a3a2f33322d3438203d3e203631353132.roa (raw, json)
Hash identifier:          HN6UpAOBFqqfg2gwL4pZ20HlcViH2AJsXmYHgG/N0FE=
Subject key identifier:   87:56:E6:67:53:00:F5:79:0B:08:CD:1A:7F:65:F8:AC:59:A0:8A:48
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       34495148D094D30745A64CE1B67A0ABE1921FF8D
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/323830333a363934303a3a2f33322d3438203d3e203631353132.roa
Signing time:             Tue 04 Feb 2025 18:47:37 +0000
ROA not before:           Tue 04 Feb 2025 18:42:37 +0000
ROA not after:            Tue 03 Feb 2026 18:47:37 +0000
asID:                     61512
IP address blocks:        2803:6940::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:51:48:d0:94:d3:07:45:a6:4c:e1:b6:7a:0a:be:19:21:ff:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Feb  4 18:42:37 2025 GMT
            Not After : Feb  3 18:47:37 2026 GMT
        Subject: CN=8756E6675300F5790B08CD1A7F65F8AC59A08A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:53:41:a9:a3:c0:e1:25:ec:72:45:7a:da:
                    4e:b0:e6:6b:82:6f:87:79:c5:87:e6:d0:3d:c7:92:
                    a9:fe:39:3a:01:fd:1d:c9:5a:4f:b5:16:9d:5b:60:
                    66:c3:32:21:b0:80:34:77:37:56:a1:a6:8f:a9:a9:
                    2f:f7:6b:fb:c9:08:61:35:b6:1e:cb:79:1e:11:a3:
                    d4:65:25:da:b6:a7:2f:09:37:99:76:4f:b7:ef:84:
                    77:93:56:c8:b2:6a:67:2c:87:07:95:45:5d:2a:01:
                    c2:83:86:de:eb:d5:8e:cc:d2:5d:5d:66:5a:08:af:
                    01:04:f6:d3:7e:88:61:6b:67:bd:6d:04:06:39:51:
                    e1:b5:e4:30:da:13:2a:76:bd:d5:6b:1b:d8:70:75:
                    4c:ff:6a:44:06:0b:3f:f0:21:99:e9:fa:a3:5a:b2:
                    15:e0:63:c5:a3:b8:35:b2:44:1c:ef:81:e5:91:10:
                    3a:6b:62:ed:c6:f8:95:53:98:26:b4:80:e1:f6:87:
                    bf:8a:ab:e1:60:bd:85:30:54:9b:25:5d:78:1a:fb:
                    91:c3:85:be:30:62:35:93:d8:28:aa:b3:95:22:55:
                    ea:48:91:cc:10:51:09:20:0e:c6:bf:6a:b0:c3:55:
                    ee:f5:b8:90:7b:4b:e2:4d:c4:48:7b:9c:33:f6:0f:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:E6:67:53:00:F5:79:0B:08:CD:1A:7F:65:F8:AC:59:A0:8A:48
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/323830333a363934303a3a2f33322d3438203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6940::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:56:f4:b7:d4:81:e0:c8:ac:87:d9:df:f0:4d:f7:d3:d9:b7:
         38:84:b8:c8:88:00:a9:1b:2d:71:88:54:7a:68:7e:d6:54:07:
         33:c5:a8:70:14:0a:8a:a4:1c:dd:e8:23:1c:92:16:b8:31:8a:
         2a:56:ec:33:6d:a8:91:a7:21:1c:8b:93:00:d8:c6:8f:ba:7f:
         71:23:d3:55:22:fc:a3:d5:76:d7:5e:d3:df:13:2f:6a:54:bc:
         58:d5:dc:86:34:f8:70:db:bd:e1:fe:2b:ed:8d:bc:84:1d:90:
         b7:12:b0:ed:f2:39:51:20:b7:30:d8:0b:88:45:d3:79:ca:87:
         b4:03:c9:d5:4b:bf:0f:39:3c:ba:6d:3a:57:a1:98:1c:41:5c:
         66:bc:43:4e:5f:ed:c5:de:63:d0:8d:1b:0b:69:7b:3d:91:b5:
         cb:3c:3c:64:85:d4:72:63:06:bd:0c:31:a0:a4:49:a7:5d:f8:
         65:88:c0:06:77:e6:7f:cd:38:c2:02:03:5a:88:24:73:d3:0b:
         45:8f:e6:bb:91:2d:fe:ea:f6:a4:e7:ef:a3:4c:1b:c8:b7:bd:
         bf:e2:78:f2:05:0f:99:ef:64:f0:c7:76:31:21:8d:ad:df:8b:
         29:f6:34:04:34:0d:dc:2c:7f:aa:c5:c1:2c:b0:b4:2d:32:76:
         39:3d:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:06 2025 by rpki-client