Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31653a643030303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          xydf0edpKclOgvzjHh+9JvpzmExzma3hc0LjInXoXXI=
Subject key identifier:   95:FF:A5:1F:07:E5:27:11:9F:37:91:F4:B0:AB:A3:F1:8A:E5:80:B5
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       43AE627047E6D745AB05691AE32750504E80F449
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:09:39 +0000
ROA not before:           Tue 04 Feb 2025 18:04:39 +0000
ROA not after:            Tue 03 Feb 2026 18:09:39 +0000
asID:                     14080
IP address blocks:        2801:1e:d000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ae:62:70:47:e6:d7:45:ab:05:69:1a:e3:27:50:50:4e:80:f4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Feb  4 18:04:39 2025 GMT
            Not After : Feb  3 18:09:39 2026 GMT
        Subject: CN=95FFA51F07E527119F3791F4B0ABA3F18AE580B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:09:6c:14:10:35:09:97:7d:d6:0f:a2:ae:
                    3e:b8:3f:9f:af:dc:61:ca:6b:cf:14:33:b5:ef:f3:
                    89:a9:12:5b:3d:28:2d:25:4c:07:a8:65:0a:fb:35:
                    38:4c:84:84:41:b7:b8:d8:8a:5d:bf:73:73:e4:39:
                    7c:3f:c7:8d:96:e8:ab:db:95:55:4a:da:d3:9f:e7:
                    ac:a6:bf:95:fb:5f:7d:15:ea:b6:c4:c9:6f:c6:6e:
                    13:54:c7:51:70:8c:63:5e:13:a4:a6:e8:c2:4e:f5:
                    5c:00:f1:b4:c7:53:77:2b:77:68:fd:c9:94:56:2d:
                    ae:b9:f6:77:fc:49:d3:f1:aa:f6:97:00:04:85:8e:
                    8f:fd:32:d8:ba:31:c2:c8:9f:d4:bc:bc:1b:df:e1:
                    49:0a:30:be:6b:47:48:f4:5d:0e:ff:76:57:5c:7b:
                    73:05:4a:c7:83:53:52:5d:61:6c:09:33:49:e8:d8:
                    a0:65:04:67:85:db:cd:46:07:7a:ba:27:11:30:2c:
                    c5:bf:cf:af:76:5a:1e:33:4f:cd:17:e9:6e:be:a2:
                    15:26:02:54:06:ef:c4:ba:55:6e:f2:09:80:b7:96:
                    17:67:38:5c:25:29:92:fe:e4:f2:de:17:78:2b:41:
                    1c:da:74:91:81:ad:e0:5e:2e:d7:bc:ca:5b:50:69:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:A5:1F:07:E5:27:11:9F:37:91:F4:B0:AB:A3:F1:8A:E5:80:B5
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:42:74:a9:be:09:c5:d2:e2:74:ee:e3:58:49:01:e0:ba:9b:
         9d:17:ca:24:c8:b5:d1:ed:e6:6d:7d:db:f2:14:e9:fb:ac:af:
         74:ee:2e:01:8c:e5:57:d6:15:5b:50:52:60:d4:ee:c6:eb:c7:
         5d:e3:a3:f4:12:61:0e:33:d3:3a:d6:5c:12:15:d1:ff:ad:5d:
         d9:7f:53:ac:d7:72:54:00:aa:1f:f4:a1:f2:99:b2:c0:63:64:
         7a:b1:c3:24:dc:26:16:68:77:49:68:17:0d:4b:5b:09:41:ce:
         c7:c7:f9:ad:5a:11:1d:a3:9a:88:93:c0:5a:bc:e6:bd:09:9b:
         98:6e:a8:7b:bd:3d:e1:63:cd:b0:02:0c:db:6b:c0:27:2c:3e:
         02:25:a1:d0:aa:48:ca:ae:2f:a8:3c:68:4f:bd:94:80:57:0b:
         8a:fa:30:58:5a:3a:02:a5:41:a9:6f:1a:c5:f5:f5:4c:4b:7b:
         23:4f:dd:0e:e4:82:fb:35:a8:bc:1a:49:92:77:b2:e7:15:df:
         bd:ab:6d:d3:77:94:e7:5b:9e:5d:95:e9:a0:e0:7a:14:87:9f:
         cc:77:5f:8a:8c:65:db:dc:34:8b:24:7d:40:03:00:aa:38:54:
         f6:c1:88:a5:1c:dd:64:62:4a:68:c0:bb:c9:c7:40:6e:c3:12:
         66:f7:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:43 2025 by rpki-client