Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a363a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a363a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          zuKhH7FjOj48Re28rYyz5Vt2duNfvyNwLY/DISfXRzo=
Subject key identifier:   C8:00:51:C5:A5:93:E4:3B:F2:83:B9:8B:1D:CA:92:A9:F0:94:81:B7
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       1B7F06B6B2E2CBFF41D41944AE80C4C2C81B4879
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a363a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 10 Jul 2026 17:51:51 +0000
ROA not before:           Fri 10 Jul 2026 17:46:51 +0000
ROA not after:            Fri 09 Jul 2027 17:51:51 +0000
asID:                     272966
IP address blocks:        2803:8590:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7f:06:b6:b2:e2:cb:ff:41:d4:19:44:ae:80:c4:c2:c8:1b:48:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Jul 10 17:46:51 2026 GMT
            Not After : Jul  9 17:51:51 2027 GMT
        Subject: CN=C80051C5A593E43BF283B98B1DCA92A9F09481B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:1a:4c:80:8b:3b:91:ee:79:79:60:a7:99:
                    f1:08:cf:6a:8f:c7:73:95:8a:76:65:85:43:09:a5:
                    86:7c:29:6b:9c:8e:54:43:b8:d9:67:36:8f:67:f2:
                    d1:60:61:6a:9d:80:a6:ed:d6:72:b3:e3:5a:f8:e9:
                    14:4c:51:f4:1c:41:fb:06:ca:4e:f4:fc:c3:03:98:
                    e4:dd:19:d1:9c:c8:89:2e:8f:1e:70:71:a8:5c:5b:
                    b4:c0:82:a8:e2:8d:fe:f8:f9:da:e7:8c:08:ac:ed:
                    d5:b6:91:b8:0d:03:3d:c2:6c:51:c9:7d:d2:49:15:
                    32:a3:ed:b7:da:a5:23:39:c1:cc:d2:db:aa:5b:a0:
                    88:69:d3:bf:56:82:d5:80:13:0e:83:3b:65:5d:b4:
                    bc:fa:e7:b6:5b:7f:91:cd:36:94:8f:fd:4a:94:cb:
                    d6:1d:b3:e8:7d:5b:e5:1a:50:4d:c8:c0:a5:3a:16:
                    f0:32:6b:46:bd:c6:ae:d6:75:02:90:8e:e6:dd:a2:
                    38:a9:6e:1c:55:86:91:e7:ee:0d:5b:98:6a:b1:9e:
                    10:a4:34:4a:16:51:2a:d3:d8:06:1f:2f:a2:a8:e0:
                    8f:8b:60:c1:0e:c7:b0:70:b3:b1:b6:5a:51:df:89:
                    64:88:0b:42:d0:9d:ec:0f:4a:92:d3:93:5e:54:a7:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:51:C5:A5:93:E4:3B:F2:83:B9:8B:1D:CA:92:A9:F0:94:81:B7
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a363a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:ba:c1:6b:42:c7:9d:3c:48:0d:be:a3:cc:7a:14:79:a1:
         29:a2:ce:2d:b4:a8:0b:34:f6:ca:d3:77:b6:8b:b8:b7:a1:14:
         5b:2d:3b:61:13:93:c6:89:15:02:fc:36:39:73:b7:47:66:e2:
         b1:1d:ae:68:89:60:1f:47:3e:92:0a:a5:37:07:0c:ac:ad:b9:
         c8:32:71:5c:ec:23:1b:7f:c8:49:8c:54:ca:ae:b0:8b:9e:ba:
         af:87:19:87:f0:45:ae:1d:1a:d6:56:24:0f:ed:04:33:58:19:
         e8:42:8e:70:69:89:b5:f1:05:83:e4:df:b1:a6:4b:70:b1:63:
         92:d6:34:b6:fa:1a:24:13:54:2f:7e:1c:99:de:41:5a:d4:98:
         b1:57:52:86:85:24:8a:16:88:33:5f:a5:12:23:3e:75:09:41:
         1b:d0:93:82:d7:79:7f:0d:dd:df:a4:99:d0:d8:f4:33:7d:91:
         31:02:f7:76:d5:ce:f9:4e:7f:cb:4d:30:5e:f9:b4:0a:2e:12:
         7c:99:1a:86:0d:d1:5a:c8:67:27:91:79:d4:28:31:9e:94:9b:
         64:8b:51:66:f1:d8:bd:99:e5:b4:7a:9f:c2:84:d5:12:05:ca:
         c7:6f:98:26:64:db:fc:e6:bf:c7:d5:a0:23:42:a3:bf:1a:2a:
         16:15:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:19:28 2026 by rpki-client