Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          W0UxMasttGFUakZXo5lSqXT1HsQodOHocSbuep2GvO0=
Subject key identifier:   65:33:D9:38:27:E3:A6:F9:4D:48:B2:28:EA:1C:6E:33:85:D7:51:5A
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       015EA26C987C8BAEEAD442BE347823833A9C8BEF
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 10 Jul 2026 17:51:51 +0000
ROA not before:           Fri 10 Jul 2026 17:46:51 +0000
ROA not after:            Fri 09 Jul 2027 17:51:51 +0000
asID:                     272966
IP address blocks:        2803:8590:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5e:a2:6c:98:7c:8b:ae:ea:d4:42:be:34:78:23:83:3a:9c:8b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Jul 10 17:46:51 2026 GMT
            Not After : Jul  9 17:51:51 2027 GMT
        Subject: CN=6533D93827E3A6F94D48B228EA1C6E3385D7515A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:2a:ed:1b:01:a5:15:5d:1b:37:34:40:fe:
                    8e:73:30:3f:44:83:8c:0f:47:41:c0:7a:fd:d8:ee:
                    74:b3:a1:7f:a3:09:23:84:cf:37:7d:15:3c:54:00:
                    70:43:5a:2d:3a:3c:ea:36:99:5b:e2:24:84:2b:b1:
                    fb:c8:07:f4:13:13:c8:cc:b0:0d:08:34:11:73:bf:
                    2e:8e:8f:79:54:ae:93:92:ec:71:7a:bd:9a:f4:e1:
                    cc:9a:42:5b:77:5d:d3:07:0f:b3:77:94:17:cb:6d:
                    3a:cc:28:ad:91:29:35:4d:84:ab:7f:2d:01:06:ef:
                    8d:dd:f5:41:7b:9f:8f:07:34:71:d6:de:bb:9f:8a:
                    97:19:73:9f:5b:3c:98:6f:0e:76:3a:20:80:ea:da:
                    59:fc:de:0d:fd:f5:dc:f4:20:b7:43:17:99:59:e5:
                    a4:a5:0b:d4:81:4c:1f:a6:a6:2b:2f:8e:65:27:8e:
                    00:55:5a:da:91:47:ed:1c:81:27:e7:61:27:e7:e4:
                    a1:ea:56:12:ee:de:63:d2:d2:a7:23:c9:7d:8a:c6:
                    48:40:af:f0:1d:2b:18:74:ca:71:ec:98:36:ef:26:
                    67:4b:7c:21:e2:1a:b3:bd:54:a0:20:da:d0:7c:5c:
                    2f:b4:54:94:20:b2:02:b4:0b:b4:3f:29:24:95:11:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:D9:38:27:E3:A6:F9:4D:48:B2:28:EA:1C:6E:33:85:D7:51:5A
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:88:89:ae:c6:04:44:33:65:f9:02:08:b8:a4:67:33:a1:b4:
         01:73:29:55:c7:80:09:58:f4:ae:7a:5f:1c:b7:47:22:9e:80:
         4a:0b:a2:43:b3:99:9a:9f:f2:d3:35:26:19:8e:c4:57:4e:7e:
         22:4b:7b:d2:54:e9:30:57:c7:8c:4a:94:2e:d2:dd:bd:bb:ac:
         27:bf:76:73:94:50:01:fd:1a:3b:5f:26:0d:51:9e:ac:e4:46:
         6a:c5:76:18:de:17:e8:e0:da:74:a0:f0:10:59:fd:84:7e:39:
         af:68:c3:14:f6:3d:27:1a:9e:46:8b:87:6c:d4:1b:34:bf:04:
         14:33:77:99:3b:fa:f6:bb:99:d1:20:ea:e2:b2:d0:5d:f4:f4:
         8f:7d:e6:b4:2b:1d:23:42:4f:bb:4a:db:98:e9:97:75:d8:e0:
         f2:47:f0:51:34:7b:8e:e7:6a:e4:62:f2:2b:09:e4:29:25:08:
         22:8b:7e:2f:6f:9c:c9:08:91:7d:a8:cd:6f:a1:4b:d3:57:46:
         11:a3:ab:e3:34:f5:26:c2:dc:df:ea:84:2d:aa:4c:ef:65:46:
         65:c7:0a:44:b9:bb:cf:d4:12:f0:e2:20:8a:eb:1e:19:11:eb:
         ab:d2:49:75:a1:b0:82:75:0e:d6:9c:ef:f0:6b:7c:29:d7:94:
         d1:f2:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:19:27 2026 by rpki-client