Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830303a3331303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          N4Yj9Fp6C9rSbfWQ02NiaJbK33+COMZwJXqmKzHLzZ8=
Subject key identifier:   5F:71:3D:A1:D8:7A:9E:CE:1C:A1:60:FA:95:14:E7:2E:AB:42:8C:E6
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       656CC30590A7270734B7F587E06544EE3F093D82
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:24 +0000
ROA not before:           Tue 04 Feb 2025 18:12:24 +0000
ROA not after:            Tue 03 Feb 2026 18:17:24 +0000
asID:                     262589
IP address blocks:        2800:310::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:c3:05:90:a7:27:07:34:b7:f5:87:e0:65:44:ee:3f:09:3d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:24 2025 GMT
            Not After : Feb  3 18:17:24 2026 GMT
        Subject: CN=5F713DA1D87A9ECE1CA160FA9514E72EAB428CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:a8:e0:18:70:36:70:b2:f1:9b:cb:af:bb:
                    38:c8:8f:e1:cf:e4:d9:56:85:75:c1:55:d0:c9:c0:
                    55:5e:b7:5e:d6:61:86:ae:36:2e:14:67:0e:6f:30:
                    25:d6:77:c7:01:e4:7c:4c:07:e3:82:2f:c7:b4:d3:
                    4e:33:9a:b4:0b:55:45:2e:36:de:ee:85:a5:ca:63:
                    20:dc:4a:fe:cd:92:be:0b:a7:b6:40:50:9c:5e:a6:
                    4f:f1:96:53:6a:09:44:a6:f2:a3:c3:94:df:a9:c0:
                    13:4b:55:8b:8a:70:30:e6:f6:7e:52:60:0e:a5:dc:
                    9f:b4:ea:fc:65:88:30:85:a9:60:f6:45:9e:0f:e8:
                    31:ea:a0:40:53:6e:81:f9:2f:46:36:25:15:10:8e:
                    05:b1:8e:a4:59:79:48:4f:ef:ef:be:ea:eb:d9:ab:
                    3c:91:7d:94:8c:12:3f:93:19:e0:76:fc:eb:65:1a:
                    5d:48:72:db:bd:89:ee:d5:72:ff:1f:c5:72:a3:c4:
                    7a:a8:90:b5:65:c8:86:82:68:04:05:86:27:35:80:
                    6a:3e:59:26:71:ce:00:26:fb:13:1c:9a:c0:9d:2b:
                    39:78:5c:05:d8:4c:a6:05:c0:34:08:19:2f:33:f0:
                    c6:f4:d9:ae:e6:36:3c:c1:20:e8:b6:d5:0e:55:43:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:3D:A1:D8:7A:9E:CE:1C:A1:60:FA:95:14:E7:2E:AB:42:8C:E6
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:0a:40:01:58:d4:90:77:38:51:75:08:f2:33:c8:cd:f9:62:
         16:17:03:4c:86:92:26:f2:2d:59:46:1a:19:a5:c6:e4:99:89:
         78:fa:ea:b6:1d:29:6b:dc:7f:bc:e4:40:95:4a:2b:f0:45:e5:
         c9:6d:40:8c:59:41:f7:61:3b:81:9f:63:d1:4d:af:57:f0:b7:
         2f:72:4c:24:73:68:fa:99:4c:79:18:bb:05:51:18:89:ee:34:
         62:80:47:3b:9d:65:07:4d:2a:f6:a0:d5:05:ad:8c:27:78:3b:
         fa:8a:00:1a:f0:f6:cb:0e:d6:a0:25:6f:27:ed:01:4c:5f:9e:
         50:7a:e2:1a:5b:65:7c:23:ef:6b:9b:79:34:61:ad:bc:e1:fc:
         65:97:09:e4:1a:29:a0:19:7c:2c:94:ee:8f:21:81:fc:f4:68:
         f3:72:d2:05:47:44:98:b5:be:e0:fa:fa:96:fc:87:b1:bf:5d:
         2c:1d:73:a3:5b:a7:41:f4:2d:e9:27:87:97:75:e6:52:98:54:
         bd:9e:16:8c:de:63:e9:73:01:19:93:1a:5f:bb:5c:49:f0:a8:
         58:cd:3b:4c:bc:16:86:18:c6:ab:54:d3:13:67:51:71:03:6e:
         98:af:48:d6:c6:34:97:da:73:8b:26:32:fd:60:ec:dc:06:c5:
         a6:c7:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:26 2025 by rpki-client