Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
File:                     323830363a3366343a3a2f33322d313238203d3e20323730313836.roa (raw, json)
Hash identifier:          Q8gaYcxH+4DA9Vrn7ZxKJtXzTmXX2WlKa5bd6n1/dH0=
Subject key identifier:   5F:E6:90:E8:E4:B5:80:BC:4B:73:4E:7A:2D:08:62:28:67:93:DE:D1
Certificate issuer:       /CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Certificate serial:       4AEEA63105668874A250F2B69EF7570E0A972274
Authority key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
Signing time:             Tue 04 Feb 2025 18:07:55 +0000
ROA not before:           Tue 04 Feb 2025 18:02:55 +0000
ROA not after:            Tue 03 Feb 2026 18:07:55 +0000
asID:                     270186
IP address blocks:        2806:3f4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ee:a6:31:05:66:88:74:a2:50:f2:b6:9e:f7:57:0e:0a:97:22:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED668E47A9AFBFAC1326AC177BF7091598876359
        Validity
            Not Before: Feb  4 18:02:55 2025 GMT
            Not After : Feb  3 18:07:55 2026 GMT
        Subject: CN=5FE690E8E4B580BC4B734E7A2D0862286793DED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:00:e5:d8:98:48:75:cd:ff:aa:93:62:30:
                    be:c0:aa:30:56:ac:63:9b:8b:67:ef:f5:7b:26:00:
                    fd:a3:50:07:7e:87:3f:22:05:a3:d0:02:fa:18:b6:
                    5b:f4:63:b2:b0:aa:a8:15:21:87:de:a9:31:d8:cf:
                    29:5e:8c:18:a2:b7:d3:88:b9:66:71:01:ad:d6:ee:
                    f1:c5:7d:cb:c8:4e:c3:df:f8:2a:9d:34:10:e6:69:
                    67:af:fc:78:d3:57:ec:ca:db:3f:8f:1a:b5:33:12:
                    b3:0b:cf:ea:85:d3:85:e1:79:ec:34:68:9f:90:84:
                    36:50:11:1d:f8:56:0b:8c:ff:9c:39:c6:7a:a7:ff:
                    03:fd:40:b9:32:44:ac:12:87:02:dc:ed:c4:29:cb:
                    ea:af:88:23:18:b4:d7:e1:10:0b:42:e5:c3:c9:b2:
                    26:6e:22:3e:d7:5a:bb:07:e7:9d:b5:23:83:c2:a6:
                    97:82:c6:63:c7:a8:2f:f8:ca:51:be:1a:69:1b:2d:
                    74:6d:71:fe:7d:02:48:00:6a:98:cb:d0:68:0c:23:
                    01:b8:11:bc:f6:81:5a:3a:5c:fe:06:4e:f3:4e:07:
                    6a:fb:c4:18:2c:c6:e9:b8:5f:c9:d2:2b:09:67:51:
                    3a:4d:2b:8b:12:e8:1f:1e:4c:f3:3b:90:ff:87:5b:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:90:E8:E4:B5:80:BC:4B:73:4E:7A:2D:08:62:28:67:93:DE:D1
            X509v3 Authority Key Identifier:
                keyid:ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:83:ce:50:f7:34:1a:87:0f:ab:a4:11:65:ff:c2:1f:7b:
         47:cd:5f:87:d7:a8:17:62:b4:41:0e:a5:6c:e5:3a:80:bf:a0:
         e4:42:6e:a1:3e:a7:3a:26:a7:85:0e:e6:54:2a:74:fb:06:a7:
         9e:82:2d:40:c5:c3:20:29:84:57:f5:cc:f5:64:c5:84:4c:97:
         2a:2b:df:06:6a:ee:67:dc:44:d7:53:97:ee:79:57:8e:3b:b2:
         80:1d:ea:c9:a5:72:89:e7:5d:b8:e8:01:a8:b4:46:95:58:3a:
         40:3a:89:1b:c2:2c:1d:be:b5:30:2b:c5:cd:1f:b2:66:57:45:
         00:96:20:db:9d:44:5b:4f:f2:4a:d5:2b:79:b5:24:a8:f1:e5:
         e3:77:ad:a4:7b:29:9e:d8:bf:f7:7e:37:67:59:3a:b4:90:5e:
         42:d6:6a:3c:4a:77:98:68:fd:ab:b4:0d:6d:20:c2:5b:b2:c7:
         38:68:3b:10:38:e4:99:47:30:2c:c7:7c:fd:d9:c4:88:80:c1:
         ae:7d:f2:03:97:eb:fb:83:d5:d7:29:e2:a7:e0:2c:8e:b4:a7:
         a1:b0:db:e5:76:28:06:42:a1:80:41:9a:93:45:0e:11:6e:73:
         cb:9c:1e:5e:a4:59:57:7f:ee:bf:04:3a:94:06:80:36:f9:1e:
         84:8b:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client