Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31343a363830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          cIS5KWRgBXD8RbtGoHvCNulDJ1rw67oOxICE9yjANzM=
Subject key identifier:   58:16:88:52:02:2F:B6:AC:59:37:20:6B:B2:0D:66:A7:21:01:73:6A
Certificate issuer:       /CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
Certificate serial:       6CB74753186E3DFD13295E833768C9E002843398
Authority key identifier: C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Wed 05 Mar 2025 17:10:00 +0000
ROA not before:           Wed 05 Mar 2025 17:05:00 +0000
ROA not after:            Wed 04 Mar 2026 17:10:00 +0000
asID:                     27951
IP address blocks:        2801:14:6800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:47:53:18:6e:3d:fd:13:29:5e:83:37:68:c9:e0:02:84:33:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
        Validity
            Not Before: Mar  5 17:05:00 2025 GMT
            Not After : Mar  4 17:10:00 2026 GMT
        Subject: CN=58168852022FB6AC5937206BB20D66A72101736A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:01:21:41:27:49:cd:57:3b:3e:2a:f0:8b:
                    00:e9:31:ed:ea:1f:15:05:b9:14:06:ef:1e:c2:3c:
                    af:62:54:c6:5e:fe:f9:48:11:ee:41:1e:6c:f1:37:
                    3d:50:06:92:b6:f1:97:93:d5:8a:01:de:49:ee:e8:
                    45:d7:ae:97:3e:d1:5b:f1:c7:c9:aa:81:cb:c3:bb:
                    66:0e:43:70:8d:07:38:20:36:49:ea:79:06:d0:67:
                    77:27:1a:b3:68:9a:e3:61:03:94:a5:d8:e8:e2:25:
                    42:43:32:4b:8a:12:1e:76:30:b8:05:7f:f7:7e:99:
                    69:3c:62:b8:2b:ed:06:44:c8:90:6a:34:de:30:41:
                    d4:11:3f:12:56:7a:39:d2:f5:28:88:ed:87:0e:f6:
                    cb:51:ab:f1:b2:e9:b2:da:7f:a1:4a:18:4b:6a:83:
                    40:5d:3d:f0:57:c0:39:a9:82:55:57:01:ff:7b:81:
                    fd:d9:94:08:a5:27:35:51:77:46:87:7d:57:29:2f:
                    a7:60:01:d7:c1:8a:7f:36:09:83:e4:67:aa:5d:37:
                    b9:93:ca:f4:a1:86:de:a0:a3:c2:ea:94:f1:bf:43:
                    78:ef:84:29:a8:9d:74:0c:87:1e:7e:fd:1d:00:2f:
                    e7:20:b7:64:56:5f:d7:30:1b:5a:16:b4:e9:c2:a0:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:88:52:02:2F:B6:AC:59:37:20:6B:B2:0D:66:A7:21:01:73:6A
            X509v3 Authority Key Identifier:
                keyid:C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:31:b2:72:d6:78:cc:28:93:83:6e:82:db:6a:e1:2a:5c:
         9b:cc:2a:7c:f6:e4:8c:41:76:08:04:61:ef:21:b4:13:19:65:
         73:05:07:40:d9:22:b0:bd:48:03:74:07:e7:c0:6a:bd:a4:50:
         a9:15:13:7f:5b:b4:65:94:21:fa:45:0f:e8:49:a6:30:bd:9f:
         b5:bf:8b:bc:86:9d:14:35:0b:11:85:8e:50:a8:02:e9:72:c4:
         35:a2:39:d7:68:fc:e9:25:af:cc:0e:f8:7c:9c:8f:d0:f3:16:
         aa:4a:e5:a3:b3:26:ef:c9:b5:07:b1:c0:2f:e5:9e:d7:3a:f7:
         0a:a5:2b:08:9c:44:62:7e:67:da:3f:3a:e2:bc:f8:56:76:83:
         57:47:cb:84:95:ae:c2:2c:18:ac:64:fb:77:28:7f:ef:a5:c1:
         42:71:b8:78:44:4e:fd:2d:a0:68:31:d4:05:ba:a1:f5:c4:8e:
         aa:34:34:46:27:12:e9:46:eb:59:61:38:ed:27:f1:bd:17:0d:
         13:2f:2f:47:76:6c:03:e3:3e:cb:7c:45:1a:12:98:36:ac:e8:
         65:4f:51:c2:8a:1a:ce:5d:df:5a:b5:e9:2c:39:cb:86:4e:2a:
         ce:c6:1b:99:76:b3:17:b1:77:47:e7:41:18:ec:68:6a:ce:d7:
         36:fd:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:29 2025 by rpki-client