Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/323830313a31383a363030303a3a2f34382d3438203d3e203631343936.roa
File:                     323830313a31383a363030303a3a2f34382d3438203d3e203631343936.roa (raw, json)
Hash identifier:          NVEdBQgFFUdJXjImi8xBtel/9OaGsQEm1J72mskzv74=
Subject key identifier:   29:AA:59:A4:4E:40:46:D2:D1:99:06:FD:C2:82:18:9C:A7:6C:F7:12
Certificate issuer:       /CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
Certificate serial:       1669908A77B1A74A602730B3B7AFF664EDBADF2B
Authority key identifier: 5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/323830313a31383a363030303a3a2f34382d3438203d3e203631343936.roa
Signing time:             Tue 04 Feb 2025 18:19:08 +0000
ROA not before:           Tue 04 Feb 2025 18:14:08 +0000
ROA not after:            Tue 03 Feb 2026 18:19:08 +0000
asID:                     61496
IP address blocks:        2801:18:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:90:8a:77:b1:a7:4a:60:27:30:b3:b7:af:f6:64:ed:ba:df:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
        Validity
            Not Before: Feb  4 18:14:08 2025 GMT
            Not After : Feb  3 18:19:08 2026 GMT
        Subject: CN=29AA59A44E4046D2D19906FDC282189CA76CF712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:41:45:c0:2b:93:5d:fe:6c:f2:aa:b2:15:
                    7d:43:63:7b:da:58:a8:ba:65:9c:eb:f3:29:39:b1:
                    19:a6:34:90:6c:2e:32:55:c1:de:7f:03:e2:25:0f:
                    a1:10:de:e0:8f:c2:f6:20:38:46:b5:cb:9b:04:cd:
                    ab:fe:60:7c:c8:47:a4:b2:f8:8d:5b:02:b9:19:1e:
                    fb:94:31:65:52:e5:13:74:8c:c5:fd:12:d6:09:4a:
                    30:8f:2c:36:27:29:75:24:52:c5:16:84:11:47:14:
                    b1:39:b0:ae:b4:2a:a4:7f:b1:a1:c4:bf:44:4b:69:
                    a9:a4:8a:b2:72:3e:6c:d9:d3:20:f8:1f:9b:1b:37:
                    87:a0:28:6f:43:4e:19:6d:55:1d:7d:0e:27:2f:b9:
                    43:d0:9f:96:ad:5f:f6:d8:f1:28:59:87:00:68:ed:
                    9b:d8:e3:cc:91:57:fe:a2:d0:04:84:ab:12:44:01:
                    a1:d2:57:40:b7:e0:7d:80:bd:12:41:f5:d1:2b:ae:
                    68:8a:26:1b:85:2c:be:87:a4:65:e8:23:ff:75:d0:
                    ac:03:5e:2b:31:f2:0b:a0:c0:8e:36:b5:90:da:f5:
                    63:5c:e3:37:60:ef:01:f9:01:c8:84:61:be:78:24:
                    9e:8f:15:84:de:61:c6:3c:c2:2c:62:f9:23:87:b6:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:59:A4:4E:40:46:D2:D1:99:06:FD:C2:82:18:9C:A7:6C:F7:12
            X509v3 Authority Key Identifier:
                keyid:5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/323830313a31383a363030303a3a2f34382d3438203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:b1:c7:50:32:50:f5:b3:21:a0:d4:44:2a:d0:3b:fe:bc:
         37:e9:18:76:48:f4:86:4b:0a:34:f4:16:7d:f0:31:6a:10:dc:
         0d:23:08:7f:ce:3f:cb:7e:c3:ef:f3:a1:1a:29:3c:0f:a0:2b:
         c0:2e:bb:e4:9c:61:ce:fd:32:5f:57:06:3f:b5:8c:52:35:17:
         11:37:11:5e:3e:ce:8e:cf:0b:90:93:01:5f:fa:a2:10:09:85:
         70:97:4f:43:bd:e7:1a:3e:2c:22:a7:98:ce:14:53:63:11:b7:
         03:59:25:23:d9:a2:71:c9:29:10:92:76:84:2d:57:99:4b:d7:
         d3:e2:ec:e5:38:96:bb:79:0e:32:cc:b6:ad:29:23:6f:48:b0:
         18:13:3d:00:dd:e1:76:45:d6:86:9c:27:ad:67:c5:70:cd:57:
         e2:a8:b6:ab:3b:2f:e1:77:1c:a9:5d:b9:d5:93:cb:64:05:e7:
         6f:2c:b0:01:63:da:4d:83:c9:cb:0f:ee:11:62:2c:a8:19:dc:
         a2:26:be:d2:99:8b:74:b7:6b:da:a7:74:f7:22:43:7f:dc:bb:
         a8:0d:da:75:4b:06:52:ee:b6:c3:60:56:d1:73:a5:a9:12:96:
         a1:81:aa:52:18:2c:65:62:19:9e:79:d0:59:7d:65:f3:40:c1:
         a9:70:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:32 2025 by rpki-client