Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
File:                     323830333a393963303a3a2f33322d3332203d3e20323635373032.roa (raw, json)
Hash identifier:          Z8GpE7kygw3MS2y+ymj0Rk94K5OXHJqKZo/MGDJKgSg=
Subject key identifier:   70:36:58:3C:51:CD:EE:7E:25:FE:FB:6F:35:98:88:12:7C:BF:00:B7
Certificate issuer:       /CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Certificate serial:       7A67047F01E10DCFC712892CA7D28F27DEB5A5D1
Authority key identifier: 5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
Signing time:             Tue 04 Feb 2025 18:43:07 +0000
ROA not before:           Tue 04 Feb 2025 18:38:07 +0000
ROA not after:            Tue 03 Feb 2026 18:43:07 +0000
asID:                     265702
IP address blocks:        2803:99c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:67:04:7f:01:e1:0d:cf:c7:12:89:2c:a7:d2:8f:27:de:b5:a5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
        Validity
            Not Before: Feb  4 18:38:07 2025 GMT
            Not After : Feb  3 18:43:07 2026 GMT
        Subject: CN=7036583C51CDEE7E25FEFB6F359888127CBF00B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:71:b7:97:d2:4b:49:15:29:2b:04:c5:5e:
                    7a:cc:9f:fb:58:f4:9f:da:ea:35:e0:44:e5:a4:cf:
                    0e:22:c8:9e:61:25:60:eb:c0:86:44:3c:7b:1b:da:
                    d0:60:29:a7:3f:cf:5b:bd:1f:50:cb:56:67:f8:d0:
                    08:09:9a:da:8e:4b:51:dc:d5:c3:29:e1:fd:f3:93:
                    9a:63:58:57:47:c7:8f:a1:33:74:1d:cd:7f:7b:1c:
                    6f:7a:7a:46:15:a2:13:7e:23:b5:a5:03:b5:4c:e1:
                    34:15:b6:b1:fa:ca:f6:37:b3:a5:d4:43:62:6e:bb:
                    0a:88:5a:1a:65:2c:eb:0a:59:49:8e:d4:40:bb:4a:
                    d3:dc:1d:f0:b4:e9:3f:1a:83:34:ca:cc:ca:88:c7:
                    73:99:03:21:63:4f:be:9d:27:73:38:4e:4e:36:51:
                    73:3c:5a:f9:a9:6f:be:5c:bc:0e:77:e7:2c:6f:6e:
                    fa:23:ea:5a:bc:27:f0:85:25:4a:09:d0:4b:03:1e:
                    f9:81:d6:cc:82:74:b9:af:41:e2:da:9e:69:bd:35:
                    8d:f6:02:15:09:fa:84:76:03:8b:b5:fd:06:32:52:
                    14:62:81:81:32:c7:ec:62:a9:74:35:46:bf:56:84:
                    4e:e1:39:de:74:22:39:af:b6:44:d8:fc:f4:59:89:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:58:3C:51:CD:EE:7E:25:FE:FB:6F:35:98:88:12:7C:BF:00:B7
            X509v3 Authority Key Identifier:
                keyid:5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:ca:cc:e9:c6:25:ec:d0:73:84:da:7f:55:d3:bc:34:3b:
         b6:96:8b:9b:b5:9f:b3:bf:a4:1f:58:8f:c9:b4:aa:15:d7:a5:
         15:fa:3d:55:a8:70:fc:ae:c9:ea:4c:c9:1f:93:ca:d7:17:30:
         79:ef:47:7d:c9:40:e4:76:61:d3:48:b6:63:23:9b:2f:eb:b7:
         e7:e2:1c:f3:5f:bf:65:98:09:44:9a:c3:c0:86:d2:3b:1b:e6:
         51:1f:3e:3a:25:f2:54:0b:79:5a:4f:06:1b:ce:25:0b:74:6a:
         8f:72:bb:8c:2d:4b:bf:43:ac:4c:fd:1c:5d:19:05:ab:ca:f7:
         be:d2:3a:34:0e:7d:79:73:eb:29:b0:45:60:9d:b0:d3:2f:2b:
         a6:75:cc:c9:b0:8a:e8:53:00:96:2b:50:93:c4:08:29:cd:90:
         4e:0f:7c:66:c2:ad:d0:06:2f:5b:eb:a2:97:92:3f:54:70:76:
         02:56:59:c1:9e:fa:75:df:c3:14:b4:53:c0:b9:5f:b3:35:45:
         b2:0f:cf:d7:af:1e:d7:cb:e8:d4:5c:a9:26:72:81:05:9c:fd:
         53:ff:2e:fb:ed:74:2d:d6:57:62:6d:35:e9:40:f7:d5:56:7a:
         91:cb:72:dc:c3:7c:8c:85:fc:f2:a6:80:1e:a2:f6:68:55:99:
         8c:b4:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client