Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33322d3438203d3e20323636363638.roa
File:                     323830333a613932303a3a2f33322d3438203d3e20323636363638.roa (raw, json)
Hash identifier:          ZD14nq/xwhA2wmTK9J7rJdpKuj5pyTDp2quGSBAxG4Q=
Subject key identifier:   3B:DA:54:EE:CE:36:53:BF:EB:D2:5D:49:C7:56:DF:71:3E:A6:F9:70
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       390A77A51B1E0B5EB7CBCD228E805B4D8A2A6174
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33322d3438203d3e20323636363638.roa
Signing time:             Tue 04 Feb 2025 18:53:12 +0000
ROA not before:           Tue 04 Feb 2025 18:48:12 +0000
ROA not after:            Tue 03 Feb 2026 18:53:12 +0000
asID:                     266668
IP address blocks:        2803:a920::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:77:a5:1b:1e:0b:5e:b7:cb:cd:22:8e:80:5b:4d:8a:2a:61:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: Feb  4 18:48:12 2025 GMT
            Not After : Feb  3 18:53:12 2026 GMT
        Subject: CN=3BDA54EECE3653BFEBD25D49C756DF713EA6F970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:bd:fc:11:20:ee:c6:da:ed:e1:86:55:ce:
                    e3:27:50:10:a5:e5:2a:38:f7:d5:a7:b2:bb:0d:13:
                    85:26:e9:07:8b:fb:48:4a:d5:b6:2f:4e:13:3b:b8:
                    0a:52:bf:60:07:c2:ce:c7:65:de:0c:87:f6:9e:3f:
                    c4:c1:06:a0:ea:ff:f7:34:41:b4:25:1f:45:c6:bb:
                    77:31:81:64:22:88:86:8c:4b:94:84:a3:75:15:28:
                    16:57:da:9c:b6:82:15:ca:90:33:e7:1e:76:fb:d8:
                    65:a1:30:ce:ac:70:64:3d:7c:ab:6f:5c:c1:75:67:
                    45:53:e9:87:e1:36:dd:60:35:0c:8a:6c:29:39:a2:
                    74:8d:0a:dc:ca:ad:12:2e:16:37:93:81:53:08:95:
                    a4:1d:72:39:90:71:34:19:47:3b:43:8b:d9:ae:ab:
                    3b:f6:0b:35:0d:8a:13:ca:01:cd:24:40:5b:32:26:
                    fe:82:f4:2b:e6:cf:36:ae:80:c9:44:3c:86:88:45:
                    b3:f6:19:35:af:1f:d2:0a:08:7d:08:b2:5e:6a:32:
                    1c:27:37:a2:16:65:cd:14:d1:2b:a2:d0:4d:b1:dd:
                    73:e2:db:25:a6:35:a3:f2:83:49:35:9d:9e:92:17:
                    35:ae:d7:bc:b7:36:7a:27:44:c8:2e:cd:0f:39:bc:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DA:54:EE:CE:36:53:BF:EB:D2:5D:49:C7:56:DF:71:3E:A6:F9:70
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33322d3438203d3e20323636363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:07:90:e1:f3:f6:44:0b:bc:2b:23:af:6d:e0:13:21:ec:0e:
         08:38:1c:b0:63:57:41:ff:33:be:fd:ad:ef:c0:ff:2f:07:39:
         02:95:05:4f:db:68:19:79:da:a2:5b:eb:4d:ec:eb:c1:23:00:
         59:1a:84:84:a6:82:b3:b4:6b:49:03:0a:a9:94:3e:08:11:c2:
         e6:fd:12:89:8d:e5:25:09:fe:e2:22:46:ba:af:4e:df:d4:da:
         38:f9:6f:24:4e:f8:d5:b6:d0:c4:e7:74:a5:6c:7f:a4:54:ba:
         ae:d8:70:cb:e9:39:74:2d:d7:47:3f:b0:ff:c3:4e:57:40:e8:
         ac:53:c1:6a:7c:a0:0b:e5:08:c3:c9:ca:f2:5b:e6:85:5f:f2:
         1f:67:cb:7d:f6:70:1b:6b:3f:6b:f9:fb:82:85:1e:62:6e:96:
         5e:21:e4:21:c0:cf:80:04:a0:7c:8b:23:52:de:02:d8:9d:05:
         df:89:69:7f:a8:1f:0d:08:43:2d:b7:98:39:d2:ad:a6:cf:ed:
         62:d3:b2:b8:79:d8:eb:03:6a:ac:42:ff:33:f0:f7:b7:a0:34:
         b4:6f:98:db:64:ab:1c:6c:23:07:30:8b:00:07:ef:23:92:c6:
         c7:46:58:96:a0:d5:5c:43:a1:5b:ca:3b:ee:e2:94:2c:6a:7a:
         a9:e2:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:44 2025 by rpki-client