Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
File:                     323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier:          vMVcckgsQxxU4s6K2j9/m4fapfFs06oEsWHHV2bGNCc=
Subject key identifier:   35:23:89:99:DC:D4:50:F3:30:07:0F:F7:29:DD:60:93:5E:6C:7E:82
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       579F89B50F66A3E3846E0D495891011575D94854
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
Signing time:             Tue 04 Feb 2025 18:21:26 +0000
ROA not before:           Tue 04 Feb 2025 18:16:26 +0000
ROA not after:            Tue 03 Feb 2026 18:21:26 +0000
asID:                     271916
IP address blocks:        2803:4a10:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9f:89:b5:0f:66:a3:e3:84:6e:0d:49:58:91:01:15:75:d9:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Feb  4 18:16:26 2025 GMT
            Not After : Feb  3 18:21:26 2026 GMT
        Subject: CN=35238999DCD450F330070FF729DD60935E6C7E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:8b:17:90:e2:d1:3e:0f:92:5a:f6:79:85:
                    50:e8:39:9e:35:4d:47:1c:a3:a8:25:c8:20:e1:8e:
                    73:30:33:3b:33:a6:54:77:a8:31:62:16:ff:84:3b:
                    c3:ca:52:63:dc:57:7c:0d:8a:b2:21:c0:2d:e8:e3:
                    31:90:04:af:a3:5a:97:fa:e1:5e:11:f8:89:8a:ce:
                    0c:68:4b:ed:d9:74:e5:18:01:a7:1d:58:fa:9b:ea:
                    0a:87:21:14:a7:bb:91:f4:4e:b5:fa:3e:3f:aa:5a:
                    a6:74:04:3f:8a:d8:b9:50:c6:6a:a5:82:44:62:b1:
                    e6:c8:93:8a:dc:1a:18:b4:41:4a:3b:7d:84:37:7e:
                    1d:68:53:b4:b1:c8:97:54:ef:5e:2e:0c:4d:ec:97:
                    8b:b0:2b:bd:15:19:a9:ee:21:80:bf:e3:94:20:48:
                    af:f4:54:0f:b9:8b:35:c2:95:dd:6e:5f:c2:cf:bc:
                    12:78:2d:70:11:19:45:db:65:08:8d:67:0b:60:10:
                    05:b3:ef:85:ff:dd:86:cc:34:98:33:ae:4d:60:a7:
                    ff:2a:69:bb:59:e7:cb:eb:7d:bb:64:1a:34:b3:17:
                    7a:c9:fe:b2:4c:e6:d5:cb:6c:32:d0:b0:93:ce:87:
                    43:26:b5:ee:dd:ea:ef:ad:8b:0d:0f:1a:44:1b:d0:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:89:99:DC:D4:50:F3:30:07:0F:F7:29:DD:60:93:5E:6C:7E:82
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:f1:b2:e5:3d:7e:ed:83:75:04:da:50:a6:b6:d8:84:dd:
         ef:8b:f2:73:7f:ba:80:4f:2b:99:0e:b8:a8:37:4f:fa:cf:9e:
         c2:37:56:f1:90:bb:84:12:29:b0:33:c9:04:4c:4b:82:0d:ee:
         8e:a3:67:01:7e:3e:da:48:4e:34:d5:9e:fb:96:84:00:57:a7:
         63:e5:a3:c7:07:ae:5a:7a:a6:d0:d3:18:2b:d4:71:06:93:5f:
         d1:b9:30:80:44:25:84:69:9c:ef:68:a2:b5:6f:ba:c5:3e:cd:
         c3:de:b1:28:a5:31:35:57:0c:d0:48:2e:68:75:a8:dc:80:95:
         5e:99:9e:43:9d:59:a4:f6:07:b5:9c:7f:02:2d:d8:a9:80:18:
         57:69:35:0c:4a:63:54:da:7e:6b:8f:09:52:33:5a:14:fc:4c:
         db:03:d5:89:aa:55:2f:75:85:e1:43:08:86:da:b7:81:c0:ca:
         3b:34:a4:86:64:43:62:f7:af:a5:1c:be:19:f4:52:f6:33:a8:
         50:1e:20:94:9a:62:8b:03:21:d3:a1:55:57:66:ae:2b:98:9e:
         11:e5:b7:68:97:3e:03:21:30:e7:8a:11:06:a5:7b:7a:63:64:
         32:7a:c5:d4:aa:fe:f8:ac:20:86:d5:5d:dc:98:ce:7c:8c:d6:
         b4:a1:78:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:37 2025 by rpki-client