Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/323830313a31613a353030303a3a2f34382d3438203d3e20323634373932.roa
File:                     323830313a31613a353030303a3a2f34382d3438203d3e20323634373932.roa (raw, json)
Hash identifier:          0NUawlpwkwK1awLSVWXzpCiVUpoKOLYyqwWaDE7U6dA=
Subject key identifier:   97:44:07:E9:4C:FD:A5:D0:7D:8F:CE:EE:C6:B4:F2:73:48:F1:23:42
Certificate issuer:       /CN=9F6C7DD1057AD10CAA135E569ABB064960324435
Certificate serial:       079D180259494B452380CCABD0B4497486D85B26
Authority key identifier: 9F:6C:7D:D1:05:7A:D1:0C:AA:13:5E:56:9A:BB:06:49:60:32:44:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6C7DD1057AD10CAA135E569ABB064960324435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/323830313a31613a353030303a3a2f34382d3438203d3e20323634373932.roa
Signing time:             Tue 04 Feb 2025 18:47:08 +0000
ROA not before:           Tue 04 Feb 2025 18:42:08 +0000
ROA not after:            Tue 03 Feb 2026 18:47:08 +0000
asID:                     264792
IP address blocks:        2801:1a:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9d:18:02:59:49:4b:45:23:80:cc:ab:d0:b4:49:74:86:d8:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6C7DD1057AD10CAA135E569ABB064960324435
        Validity
            Not Before: Feb  4 18:42:08 2025 GMT
            Not After : Feb  3 18:47:08 2026 GMT
        Subject: CN=974407E94CFDA5D07D8FCEEEC6B4F27348F12342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:de:c5:6c:96:43:5e:b0:f4:ba:5f:71:4c:
                    68:9b:f3:1f:0c:0b:c9:03:87:f8:a8:f8:23:1c:1b:
                    a2:53:7d:6a:41:29:b0:1b:c4:cf:c6:ef:cd:0b:ce:
                    ec:c5:89:76:19:bc:b2:ae:e7:12:b2:88:bb:2a:ac:
                    12:88:62:e3:e7:b3:2a:29:71:67:52:e8:e6:67:95:
                    e2:5a:fb:3a:d6:4e:02:58:78:3a:de:f4:80:23:77:
                    37:1e:fc:f1:31:b0:24:de:26:03:d1:4d:a7:d8:44:
                    12:5e:a5:98:9f:32:90:a1:ab:c5:53:5f:50:55:d0:
                    3f:56:7e:2a:4a:45:d9:f4:97:39:50:b4:de:54:49:
                    52:54:b8:61:ef:ec:4c:4b:de:5d:61:80:29:20:9f:
                    e3:ab:6c:23:68:89:cf:e5:fb:11:3a:65:f3:ff:1e:
                    21:0f:04:ae:75:9d:6c:46:02:76:75:bd:f7:ad:fa:
                    3b:1f:44:3d:7e:50:a0:1a:33:cb:b2:45:29:7f:3f:
                    94:f4:d0:95:d6:42:2d:e5:7f:ae:51:d2:40:bd:4d:
                    63:1d:52:e4:90:47:f0:81:af:45:54:cc:98:cf:fc:
                    0d:d9:a9:32:d6:5a:72:a9:d8:dc:13:a0:a9:b9:a4:
                    d5:60:82:d6:ae:32:0d:3e:6f:54:73:b1:34:9b:42:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:07:E9:4C:FD:A5:D0:7D:8F:CE:EE:C6:B4:F2:73:48:F1:23:42
            X509v3 Authority Key Identifier:
                keyid:9F:6C:7D:D1:05:7A:D1:0C:AA:13:5E:56:9A:BB:06:49:60:32:44:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/9F6C7DD1057AD10CAA135E569ABB064960324435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6C7DD1057AD10CAA135E569ABB064960324435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/323830313a31613a353030303a3a2f34382d3438203d3e20323634373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:1b:c4:63:1f:c4:c7:c6:91:82:67:03:82:79:db:0b:bf:
         bc:42:5b:a9:f7:d5:fb:2c:60:31:7f:76:72:11:ed:39:79:c0:
         7d:9e:58:8f:f1:e6:36:9c:8a:04:1a:91:19:6c:93:05:74:71:
         40:f4:53:ff:2d:03:a4:08:85:0a:6c:8d:a9:8b:f1:dc:42:89:
         48:44:5e:e0:10:f4:a8:a5:be:f9:af:f8:e5:24:c4:c9:d7:1d:
         9f:46:e2:2f:1e:23:be:69:bf:3d:57:2a:7f:d1:8d:e3:1e:3f:
         80:b1:ff:f4:ab:46:81:6c:b7:f1:8d:f7:aa:13:61:2e:d0:fa:
         d6:54:98:80:de:38:86:c2:12:ed:53:28:79:b1:55:d1:37:f2:
         f4:c0:35:25:4b:cf:6c:f8:6f:8a:b9:8c:e1:9f:30:ea:77:58:
         74:2d:70:ac:44:1d:cb:f2:ab:fd:67:d6:d2:fc:4a:06:05:35:
         4e:47:a8:52:63:3c:4f:87:34:8f:7f:0e:cc:f6:c9:12:2b:d2:
         08:08:6e:56:3c:66:4b:68:68:b6:68:9b:ef:46:05:82:33:2c:
         24:04:0d:94:22:49:45:a5:18:6a:b0:81:61:01:1b:16:c5:8c:
         51:b1:67:f7:27:40:3e:21:1d:23:3b:90:ac:13:66:10:ad:47:
         6d:16:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:53 2025 by rpki-client