Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa
File:                     323830303a3934303a3a2f33322d3634203d3e203237393533.roa (raw, json)
Hash identifier:          R9JHXdcw2uQ76+BvWdLCae4pGvvSblVlS/1fLvLsuJo=
Subject key identifier:   D6:23:98:56:DF:7D:98:6B:29:F8:AC:AA:85:4B:AD:0F:6E:CC:3A:11
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       0F91DCBF74554339BCB1570CF13B0779AA0770BE
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa
Signing time:             Tue 04 Feb 2025 18:56:25 +0000
ROA not before:           Tue 04 Feb 2025 18:51:25 +0000
ROA not after:            Tue 03 Feb 2026 18:56:25 +0000
asID:                     27953
IP address blocks:        2800:940::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:91:dc:bf:74:55:43:39:bc:b1:57:0c:f1:3b:07:79:aa:07:70:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Feb  4 18:51:25 2025 GMT
            Not After : Feb  3 18:56:25 2026 GMT
        Subject: CN=D6239856DF7D986B29F8ACAA854BAD0F6ECC3A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:e5:0e:32:4e:82:42:1b:5d:8a:61:69:3b:
                    94:8a:09:f6:3a:75:aa:dd:ff:aa:98:e9:25:8a:86:
                    1d:e3:7f:ec:c3:21:cb:0f:8b:14:0f:18:5b:60:2a:
                    9b:24:47:7d:d1:46:d9:93:bb:30:5f:81:c3:c5:b8:
                    cf:88:80:2b:d0:bf:2d:5e:94:c2:9a:2e:cb:40:53:
                    0f:9c:3a:5d:27:10:54:23:96:d3:2a:a7:34:71:f4:
                    ac:a5:e4:9b:dd:68:b8:a8:29:d3:75:70:d9:8f:09:
                    53:61:87:31:32:ec:46:cb:06:a8:b4:27:12:1e:0f:
                    51:93:10:37:2d:1a:2f:3b:48:6f:9f:f2:7d:8b:d4:
                    08:61:aa:17:56:b8:38:e5:bf:4a:e5:c2:02:e0:03:
                    e4:1b:ca:36:95:24:b2:0b:15:f8:c9:63:31:ea:ab:
                    d7:81:df:51:89:ee:6b:40:d3:22:ed:7b:eb:35:19:
                    f5:0d:6f:63:63:d0:d5:e6:92:d8:90:9d:60:b6:85:
                    7d:f0:40:4a:e2:d9:40:54:86:33:d6:75:4f:0d:42:
                    76:c1:29:e1:7d:e5:73:21:f2:0c:62:58:14:1e:4e:
                    a3:d4:94:f7:f3:cd:b7:12:58:b1:4c:55:0a:f7:28:
                    32:ef:07:10:1e:a9:87:0d:3a:bb:91:d6:c9:06:71:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:23:98:56:DF:7D:98:6B:29:F8:AC:AA:85:4B:AD:0F:6E:CC:3A:11
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:940::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:96:58:5d:2e:c2:bf:bb:ff:e0:2c:8e:ed:08:fe:c0:cf:99:
         fd:ac:6a:26:08:b6:10:f1:bd:24:68:78:8a:31:7a:b8:d8:3f:
         67:24:7d:6a:a6:e2:34:ef:74:3e:78:f0:1c:a6:bb:3c:f3:48:
         3c:6f:de:2f:3f:c4:58:fc:ca:0d:a0:bc:71:1c:a7:2d:42:29:
         69:6f:45:0d:50:08:27:fd:7d:ae:d9:b5:d4:8e:10:b5:3b:50:
         e8:2e:61:39:0c:ea:bb:d0:01:d5:6a:24:bd:04:07:fd:08:29:
         f2:69:30:37:7a:56:a1:a5:07:e5:62:f2:ff:a6:17:be:93:e7:
         a2:b3:50:04:87:47:c9:80:21:c4:37:67:bc:3c:43:e0:e7:f4:
         83:80:70:a2:8a:31:3d:bc:ef:ba:9d:96:e7:9d:1e:f8:26:ae:
         ce:4c:d2:e5:f5:37:2a:04:6e:d3:3b:6e:c9:01:1c:6c:1f:2d:
         64:17:16:9d:a1:01:69:24:f6:86:4b:a0:e5:b6:fe:16:e1:c2:
         fe:87:0e:b0:b8:95:f3:f2:99:8f:c1:06:63:6d:dd:a3:81:68:
         0d:bc:78:7c:d6:18:23:35:5f:39:fd:23:e7:e7:5a:18:d6:0c:
         8b:95:eb:f0:cd:11:23:c2:ba:e2:b6:32:8a:93:91:6e:6e:98:
         f7:4d:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:33 2025 by rpki-client