Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          s04QAhlw8XOKF9yrmP/+sP2zJGFRoN4KYWctsrnPhkI=
Subject key identifier:   D2:9A:A5:0B:5D:5F:68:92:65:AC:DD:0F:78:C9:CC:BC:5E:FF:5A:45
Certificate issuer:       /CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF
Certificate serial:       6506B36B9FB2223189C59DB82DB6566E5C38076C
Authority key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:05:30 +0000
ROA not before:           Tue 04 Feb 2025 18:00:30 +0000
ROA not after:            Tue 03 Feb 2026 18:05:30 +0000
asID:                     13489
IP address blocks:        2801:1c:5800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:06:b3:6b:9f:b2:22:31:89:c5:9d:b8:2d:b6:56:6e:5c:38:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF
        Validity
            Not Before: Feb  4 18:00:30 2025 GMT
            Not After : Feb  3 18:05:30 2026 GMT
        Subject: CN=D29AA50B5D5F689265ACDD0F78C9CCBC5EFF5A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:01:e5:3f:90:44:d5:87:bc:a5:2c:34:9c:
                    c7:eb:88:62:74:3d:26:4b:38:f1:e5:e8:18:df:d9:
                    74:81:3f:6a:19:5d:97:10:04:7b:16:6f:71:67:97:
                    bc:6e:a7:30:1b:5c:ae:34:9f:c4:a1:84:98:04:48:
                    b3:59:37:1f:73:ab:30:f1:b0:44:de:f6:54:1c:af:
                    f6:02:30:d5:10:8b:75:9b:7c:80:31:8e:eb:06:2e:
                    e5:f4:8d:20:e2:77:cc:81:1d:ff:53:99:9e:33:f9:
                    af:5d:59:ae:21:4a:57:a4:b4:22:39:10:56:ee:22:
                    42:4b:8b:92:52:15:36:d5:b4:a7:23:38:31:ac:51:
                    06:9c:49:76:ed:14:0a:4c:22:42:eb:43:95:4f:ad:
                    e0:fc:c7:16:2d:e8:40:70:0b:4b:15:e8:90:00:1c:
                    7c:96:4f:94:ea:24:23:23:87:58:84:38:dd:51:95:
                    ce:96:b2:b5:f0:a2:af:ec:18:15:08:a8:04:5f:6c:
                    86:8e:fd:ae:a8:f3:c7:5d:30:73:19:71:2c:96:36:
                    9c:77:f7:53:21:ef:1d:8e:d0:c8:45:61:39:18:20:
                    12:c4:df:f0:ce:f5:94:b5:c8:64:e8:4a:82:40:7a:
                    cc:a9:0f:2c:e3:7c:f5:ab:f4:bc:f6:db:ab:43:22:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:A5:0B:5D:5F:68:92:65:AC:DD:0F:78:C9:CC:BC:5E:FF:5A:45
            X509v3 Authority Key Identifier:
                keyid:24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:b3:fc:3e:2f:31:de:4d:c7:9e:f3:28:e4:6c:73:35:45:
         fd:92:56:79:c3:53:9a:bd:60:1d:e5:af:51:ed:d9:c6:5b:ad:
         9e:8c:d8:4e:b5:c2:bb:c8:33:d0:f6:5e:72:e9:5d:94:91:b1:
         2e:01:d5:51:33:88:72:c7:16:fa:e0:b2:50:ef:fa:67:48:03:
         3a:e3:3c:ee:3d:d0:7a:26:9f:09:ad:4c:9b:fb:94:56:f7:b4:
         c7:e4:2f:e4:04:16:2c:28:ea:24:3b:a6:70:5c:5b:6c:ee:f8:
         5d:c8:1a:ef:14:9b:98:d8:8b:3f:33:f7:ae:3c:ad:02:31:00:
         8f:bc:f1:89:3a:37:8f:7e:51:05:89:1a:a0:4f:79:4c:91:77:
         73:f0:b1:3e:3a:13:4b:26:41:3c:d1:99:c9:6d:6f:d0:2c:5a:
         2c:24:35:8f:ca:52:57:d9:25:c3:81:a5:07:70:8e:45:9c:34:
         57:6d:a2:da:5c:b7:9f:0b:60:b4:db:8d:fc:fb:ad:7a:52:ea:
         6f:56:bb:94:3f:ea:6f:a4:8e:89:d8:ac:41:0d:1b:11:d1:bc:
         cb:0e:c1:f1:c7:75:86:c9:27:e0:cd:7d:1d:df:29:d5:78:31:
         ad:34:22:e1:be:eb:9e:6f:75:a5:38:cb:a5:17:7f:88:99:fc:
         64:9c:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:40 2025 by rpki-client