Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/3d59dd7e5ececac4cce88c91252e3c531ecbb46f.roa
File:                     3d59dd7e5ececac4cce88c91252e3c531ecbb46f.roa (raw, json)
Hash identifier:          cpJEi27taFhJ5uKgMpUCeomDCgs8XXayymrc5CjTEhQ=
Subject key identifier:   2A:84:B4:8E:76:5B:21:5E:EE:6C:12:6C:1D:7B:1D:0E:34:37:42:14
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       0C6011
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/3d59dd7e5ececac4cce88c91252e3c531ecbb46f.roa
Signing time:             Fri 28 Jul 2023 00:02:46 +0000
ROA not before:           Thu 27 Jul 2023 00:02:46 +0000
ROA not after:            Mon 28 Jul 2025 00:02:46 +0000
asID:                     272062
IP address blocks:        2803:a310::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811025 (0xc6011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Jul 27 00:02:46 2023 GMT
            Not After : Jul 28 00:02:46 2025 GMT
        Subject: CN=3d59dd7e5ececac4cce88c91252e3c531ecbb46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:e1:c9:49:75:77:d7:5a:5d:16:2c:0c:d3:
                    63:39:aa:ca:15:5e:ff:8f:8f:80:a8:79:35:73:42:
                    0b:1d:5d:4e:b5:9b:93:06:54:ce:7f:26:a7:7f:40:
                    d2:cd:b8:aa:08:d3:14:08:c6:df:92:67:4c:7f:8d:
                    67:5a:5b:0c:f8:cc:d7:f3:ca:cd:ea:c7:ec:57:2b:
                    07:25:50:ad:94:5c:da:b6:28:f7:3d:36:a2:7c:d9:
                    24:c8:8d:2e:ef:18:c0:81:6c:72:6d:af:32:1a:12:
                    29:c2:f8:fc:e1:6a:b1:2d:cf:64:f7:ab:9c:08:d4:
                    49:d7:1b:73:ec:04:da:a5:6c:22:08:70:64:95:d5:
                    55:78:b2:1a:a0:c6:c0:39:a1:1f:da:3b:e9:98:41:
                    a5:96:52:e3:e0:97:0a:ab:d1:7a:5e:11:62:1d:a1:
                    3c:e9:b6:b4:a9:1b:ff:96:c6:7b:a4:24:ca:15:3d:
                    84:3b:1e:f6:87:80:07:9c:b1:14:be:2b:27:e5:13:
                    a1:58:5b:a6:91:da:e6:04:86:a9:76:4a:46:8f:08:
                    b6:0c:c5:b4:dd:8f:11:61:6f:dc:ec:f6:34:11:9c:
                    33:5e:8e:2e:fe:8d:e7:f4:89:e4:2b:4e:a8:46:eb:
                    44:47:0c:fd:95:b0:83:e0:92:e3:81:7d:cd:fb:b6:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:B4:8E:76:5B:21:5E:EE:6C:12:6C:1D:7B:1D:0E:34:37:42:14
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/3d59dd7e5ececac4cce88c91252e3c531ecbb46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a310::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:3f:e2:2f:c4:57:a1:fc:0e:68:40:02:85:aa:30:ce:18:
         84:8c:fe:69:ea:42:8b:d7:0f:62:3e:72:a5:19:3c:59:18:d3:
         5f:e4:c0:26:bb:65:d0:fa:12:c7:e5:54:5c:c4:37:90:e1:da:
         cb:3a:03:aa:10:61:e3:d9:bd:d1:45:c0:5a:e7:61:3c:3c:f2:
         ed:5c:50:b5:c9:3b:7f:0d:73:65:21:6e:8e:c7:d2:4e:e9:ea:
         84:a5:54:71:09:14:f2:f2:c2:81:c1:0d:65:51:8b:84:02:36:
         67:a6:61:0c:57:05:6f:91:17:22:11:7b:35:1b:03:34:6c:ed:
         6e:11:c8:0b:8b:9f:65:8f:35:14:f5:ee:7d:31:21:c4:7b:9a:
         8e:92:67:37:e6:87:dd:e7:2f:7b:07:e8:44:49:1b:9e:61:f7:
         99:5a:3d:2c:8f:99:ee:63:e9:15:fe:45:cd:ee:a0:af:b2:35:
         54:e0:3e:7c:37:cf:8e:ad:7c:90:9c:a6:17:d3:72:29:11:44:
         3b:a5:22:82:ca:52:b7:9e:20:e7:87:62:db:fa:c1:d8:d6:f7:
         3b:d8:1f:61:db:de:fa:9e:fc:5e:9c:ce:33:e7:c6:bb:d8:4d:
         f5:ed:3f:94:9a:d9:4e:45:0b:d2:63:91:66:31:3a:65:8e:8a:
         e1:bc:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:22:27 2025 by rpki-client