Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          6JcIKobOqBXOa8K1OFQCjPj15KQweNlH0wo9NeI6x/M=
Subject key identifier:   88:93:AE:37:D4:07:12:88:70:2C:5D:9C:36:90:60:1B:59:7F:A3:C2
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       7CB24A7A55AB6A64FD9B365B940716958170AA72
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:31 +0000
ROA not before:           Tue 04 Feb 2025 18:47:31 +0000
ROA not after:            Tue 03 Feb 2026 18:52:31 +0000
asID:                     263762
IP address blocks:        2803:5180:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b2:4a:7a:55:ab:6a:64:fd:9b:36:5b:94:07:16:95:81:70:aa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:31 2025 GMT
            Not After : Feb  3 18:52:31 2026 GMT
        Subject: CN=8893AE37D4071288702C5D9C3690601B597FA3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:16:48:50:74:3e:c5:65:5b:b7:7c:45:8f:
                    c6:c3:f7:6a:a6:c7:cd:98:d0:a5:4d:9b:4b:d0:2b:
                    eb:23:9e:f1:9f:cc:ce:2b:1a:3a:48:ef:03:87:51:
                    01:21:09:e4:fd:5b:43:49:03:4d:23:2e:91:43:c5:
                    ae:ba:66:6b:da:4a:ca:bc:3e:5b:8c:48:4e:22:f6:
                    cb:10:be:7c:9f:e4:13:58:6a:f2:af:c0:d0:8b:f4:
                    58:eb:c2:9f:2e:95:b0:72:73:37:0d:48:08:ea:4b:
                    51:37:1f:74:f0:3d:ec:40:4a:89:09:bf:16:27:13:
                    db:ee:67:93:ca:12:ac:6c:09:de:f7:46:81:3c:9a:
                    e1:09:ae:e7:e6:36:33:1f:b2:c9:2a:3e:b7:17:11:
                    47:8f:55:81:42:45:f1:af:c0:4d:fc:7e:17:5a:4a:
                    61:9f:2a:76:34:6a:5e:10:c3:d8:8e:63:49:d3:ad:
                    6e:f6:63:71:aa:cd:82:11:e4:9a:1d:88:32:83:31:
                    8b:e9:c8:96:7f:e7:91:61:87:48:03:f2:32:a2:aa:
                    ec:df:85:9b:a0:27:47:4f:1c:4a:d8:c6:97:2c:68:
                    81:8e:f5:00:ea:17:34:46:b2:86:0b:55:1b:b5:b7:
                    cb:84:73:57:35:31:ef:d2:5f:2d:8f:86:a5:d3:fe:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:93:AE:37:D4:07:12:88:70:2C:5D:9C:36:90:60:1B:59:7F:A3:C2
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cd:63:1e:f2:6c:a0:ac:70:c9:f8:56:35:b5:c8:7e:57:f5:b6:
         ef:be:1f:1d:2c:d1:77:c3:b8:13:bd:e8:9e:b7:3e:3c:95:c9:
         bb:07:24:a9:32:27:34:d8:0d:2b:18:43:82:c0:9e:c1:73:00:
         49:a9:a4:84:a0:3e:24:9b:32:32:1c:11:e3:18:d9:14:dc:84:
         05:e7:d8:52:5d:11:2c:3a:34:87:fd:da:ca:22:f8:b0:23:4c:
         64:ed:60:87:20:e2:06:3a:3d:46:5d:b6:30:6b:4a:60:12:7a:
         bb:f7:3e:aa:d6:1c:68:6c:fb:56:48:d2:25:a5:85:ff:96:51:
         73:c6:36:f0:59:3a:28:ab:32:b7:55:25:0d:5f:65:ba:76:39:
         6e:dd:d4:f4:5c:19:e8:8b:68:88:d7:97:54:b9:7d:09:6b:0a:
         79:b4:b1:d3:3c:16:d7:25:c3:af:a9:30:fc:7e:6f:7e:23:ff:
         95:f4:6f:73:f8:74:bf:05:09:65:20:e5:56:f4:34:09:15:cc:
         15:9a:87:50:28:2a:dd:6b:86:4a:fa:96:10:e2:3d:66:e0:57:
         8b:28:80:cc:53:d5:51:69:29:94:60:79:68:d9:63:90:33:9a:
         9c:1e:a1:5e:94:97:b3:4b:cc:1c:43:2f:d7:e0:9b:fc:10:87:
         56:f4:14:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:44:03 2025 by rpki-client