Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          mY0Zy1AlevZjofWzuweBdt9tjX7aEro1P/IuplDLVEQ=
Subject key identifier:   59:BA:9E:41:1D:BF:10:55:9F:0D:71:CD:5B:DD:59:22:4F:AC:D1:31
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       21F3B5C3ACED2E6DEA4F9ADA178EBA541BD9F822
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:26:52 +0000
ROA not before:           Tue 04 Feb 2025 18:21:52 +0000
ROA not after:            Tue 03 Feb 2026 18:26:52 +0000
asID:                     61468
IP address blocks:        2801:10:6800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f3:b5:c3:ac:ed:2e:6d:ea:4f:9a:da:17:8e:ba:54:1b:d9:f8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Feb  4 18:21:52 2025 GMT
            Not After : Feb  3 18:26:52 2026 GMT
        Subject: CN=59BA9E411DBF10559F0D71CD5BDD59224FACD131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:87:59:8e:9b:03:1a:a2:df:c1:29:65:ef:
                    a9:5c:87:aa:cb:ba:e6:e5:0d:8b:d5:bd:c3:f1:c5:
                    2c:c1:91:70:1a:42:2b:a0:00:a6:8a:db:99:d8:7c:
                    f4:22:79:2b:1c:31:e9:c3:cc:18:8e:3d:d9:ea:78:
                    0a:71:b3:29:a6:06:b1:bb:c2:f5:75:e4:11:30:32:
                    65:b0:0f:95:74:a6:eb:06:25:49:b8:c2:cc:35:4f:
                    72:39:a0:4f:d6:7e:5d:f5:98:e9:db:22:e4:98:12:
                    b4:cd:2f:8c:f1:36:87:29:cf:8f:3f:8e:e1:07:97:
                    6b:70:7c:65:1a:9c:65:d6:6c:a6:d9:77:b0:ab:df:
                    81:e4:0a:93:f5:42:15:24:2f:10:ac:4f:a7:1c:c3:
                    54:5f:f0:b1:fd:00:2a:ef:05:99:bc:9e:4c:63:6a:
                    a0:d9:2b:e9:f6:01:c8:c5:72:8f:76:e0:68:d8:ea:
                    66:90:f3:03:8b:03:dd:b7:c5:66:98:ad:82:48:0f:
                    89:c0:9c:76:c1:49:64:fa:2f:41:09:4e:f5:cc:fe:
                    0f:21:0d:ec:db:a4:5b:e0:b7:bf:78:df:8a:13:d0:
                    bc:be:1c:26:2a:af:7c:6e:f1:3e:aa:42:68:c9:67:
                    c3:9e:86:d2:d3:83:b1:76:cc:5e:e1:bb:67:9b:eb:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:9E:41:1D:BF:10:55:9F:0D:71:CD:5B:DD:59:22:4F:AC:D1:31
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:c5:2f:eb:ad:94:a7:ab:33:c8:9e:7a:af:02:69:0b:86:
         a1:aa:66:d3:52:8e:46:68:af:ce:b2:09:dd:3d:cf:12:58:84:
         53:f6:69:f8:b2:b0:c3:f2:d8:38:82:d3:98:a7:3f:b4:5a:80:
         ce:76:fe:c1:70:b9:c8:cf:63:fd:82:94:75:e8:67:7f:d0:7e:
         ae:f8:85:97:b3:48:69:13:bd:0f:08:bd:64:dc:16:07:ec:a1:
         bb:b9:c8:85:4f:09:e4:f6:39:7a:1f:b5:4c:bd:3e:4f:7d:d5:
         06:37:aa:0d:b8:db:25:86:2c:92:9c:46:36:ff:1c:99:97:96:
         e8:eb:91:ee:93:c3:84:c5:5d:e1:16:a3:b3:48:e8:7c:20:e5:
         14:58:56:36:3f:fa:e7:55:8e:e0:59:86:5b:31:f3:d4:22:52:
         cc:26:0b:42:51:1d:2b:73:6b:c4:77:c3:28:dd:72:65:59:42:
         1f:b9:72:8a:7c:f1:5a:ce:bd:e3:fd:48:e9:38:b6:75:cc:a9:
         f8:a4:09:e1:3f:42:8a:19:8b:d6:46:01:02:7c:d1:da:f9:0f:
         c8:5d:e1:de:d8:c0:0a:50:85:ee:43:48:3f:fa:d1:5c:2b:0b:
         e3:38:9c:67:a3:8c:f3:ef:50:ca:2e:ab:b1:70:47:d1:cf:c0:
         99:40:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:03 2025 by rpki-client