Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33332d3333203d3e20323633373239.roa
File:                     323830333a346638303a3a2f33332d3333203d3e20323633373239.roa (raw, json)
Hash identifier:          /8oO1vy2gbpPGtEAKfPiA5LMZOD0Un33UseIFPn2v9E=
Subject key identifier:   6C:54:EA:9E:EB:3D:D4:61:9D:04:EA:EF:27:BE:70:EA:DD:97:97:8B
Certificate issuer:       /CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
Certificate serial:       60A7740B769193E48087AF21B12802FDD79EDD7C
Authority key identifier: AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33332d3333203d3e20323633373239.roa
Signing time:             Mon 03 Feb 2025 18:30:00 +0000
ROA not before:           Mon 03 Feb 2025 18:25:00 +0000
ROA not after:            Mon 02 Feb 2026 18:30:00 +0000
asID:                     263729
IP address blocks:        2803:4f80::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a7:74:0b:76:91:93:e4:80:87:af:21:b1:28:02:fd:d7:9e:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
        Validity
            Not Before: Feb  3 18:25:00 2025 GMT
            Not After : Feb  2 18:30:00 2026 GMT
        Subject: CN=6C54EA9EEB3DD4619D04EAEF27BE70EADD97978B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:2d:e4:35:15:9f:e2:2b:56:24:ae:95:1f:
                    cd:64:95:29:ed:3b:3a:05:20:5f:d9:6e:a0:6c:a4:
                    ed:ed:41:c1:f8:b5:a6:64:f6:c9:2a:9e:2f:7a:5d:
                    09:66:27:9c:d0:d9:86:c6:01:ed:21:52:60:bc:d7:
                    a9:9f:db:af:3e:7a:cf:02:7b:5b:b2:9e:63:3a:c0:
                    7e:a3:1d:42:97:db:9e:e4:54:68:b5:62:75:86:43:
                    02:76:06:58:f1:31:d9:08:68:ad:a5:f3:fd:01:cf:
                    96:dc:2f:cc:ae:6a:b4:5e:f3:46:23:aa:51:f7:01:
                    f4:29:5b:74:a2:c7:8d:0c:fc:f3:ae:4d:78:56:e1:
                    0b:ae:a9:b3:f5:e5:de:75:f6:e3:ac:95:a0:18:9a:
                    ef:97:ac:9a:6a:41:98:4c:d0:19:89:0c:b3:59:d2:
                    b2:f4:47:32:fc:f0:c1:f4:77:8b:0e:88:be:5d:cf:
                    6e:f6:ec:1a:98:6e:e5:46:1f:6f:0f:56:f2:98:ea:
                    d3:d0:58:bd:5a:9c:9a:ef:83:23:02:54:74:86:22:
                    18:eb:4c:5f:91:49:96:59:b1:92:35:19:26:a9:94:
                    ec:31:d9:d4:56:ec:d0:0b:19:52:0d:29:93:d9:24:
                    85:30:7b:1b:3b:8b:ec:5b:b5:bd:7d:c4:43:01:88:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:54:EA:9E:EB:3D:D4:61:9D:04:EA:EF:27:BE:70:EA:DD:97:97:8B
            X509v3 Authority Key Identifier:
                keyid:AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33332d3333203d3e20323633373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f80::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:1e:f3:1d:b5:29:8e:f7:1d:a0:0d:5d:8d:03:b4:e9:1f:
         5c:05:1b:5b:43:ff:40:09:45:cc:ee:b9:70:b8:93:f9:f0:6f:
         b5:cb:93:d8:80:a1:9a:dc:dc:30:d3:65:39:dc:0e:29:c7:bb:
         e9:1f:f2:0d:9a:bf:65:4d:11:40:05:5d:5e:0d:34:cb:4c:5c:
         84:8a:6f:30:e9:96:57:9e:14:f3:9c:60:52:ef:54:4f:65:1b:
         a9:64:17:bd:37:a6:81:fb:b6:d9:36:8e:f2:6c:a6:37:d8:e9:
         fc:17:f4:bb:16:9a:57:cb:33:81:aa:4b:e9:51:2d:5d:9a:13:
         d2:01:c2:59:25:dd:38:05:e7:d3:bb:2e:27:2c:57:c3:dc:c2:
         1e:e3:10:10:b5:04:cf:85:22:5c:96:af:bc:ad:a4:82:a0:9b:
         b4:bb:b4:66:5d:38:76:7f:40:a6:22:bf:52:c4:8b:cc:4f:4e:
         da:25:36:e4:d3:1e:1b:ad:30:0d:4d:1d:ca:4b:29:fe:10:e7:
         65:77:b8:f0:67:7a:61:6b:93:2d:19:f3:6a:70:fa:04:53:3e:
         32:89:b0:08:c4:83:c3:30:7a:e7:18:a2:37:20:13:4c:bf:1b:
         89:4a:c5:20:37:20:d6:9c:a3:a5:e0:59:4a:f9:35:bc:96:3a:
         8e:9e:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:31 2025 by rpki-client