Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/d5fa57d33092bcdbdd22688686e6b33e06ac6ade.roa
File:                     d5fa57d33092bcdbdd22688686e6b33e06ac6ade.roa (raw, json)
Hash identifier:          nr72++2vqSxXUr2z7FNW4GxTFNa4j6vZG44We33a+L4=
Subject key identifier:   03:70:CB:1D:C6:BC:4A:A2:67:73:B1:B4:60:7A:51:4E:21:D1:60:63
Certificate issuer:       /CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
Certificate serial:       0BCBD1
Authority key identifier: 52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/d5fa57d33092bcdbdd22688686e6b33e06ac6ade.roa
Signing time:             Thu 11 May 2023 18:32:44 +0000
ROA not before:           Wed 10 May 2023 18:32:44 +0000
ROA not after:            Sun 11 May 2025 18:32:44 +0000
asID:                     265605
IP address blocks:        2806:361::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773073 (0xbcbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
        Validity
            Not Before: May 10 18:32:44 2023 GMT
            Not After : May 11 18:32:44 2025 GMT
        Subject: CN=d5fa57d33092bcdbdd22688686e6b33e06ac6ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:f7:27:aa:1e:79:bc:40:d1:b5:c1:51:2c:
                    66:7d:85:f6:98:42:b4:b4:bc:d9:e0:a3:ce:ad:2a:
                    37:c5:f5:b3:98:58:2f:ea:4d:3b:d7:18:f6:8c:b9:
                    b4:f6:25:28:76:c4:a0:30:6c:79:40:10:64:7c:11:
                    c8:6c:ea:03:c0:65:09:8d:1f:96:57:1b:61:e1:0e:
                    df:f7:fb:6c:0e:01:6a:33:90:07:24:4d:e2:22:60:
                    cd:3d:a5:97:30:5e:fc:9d:ad:51:05:37:c2:9a:56:
                    68:f8:80:e8:c5:6d:35:41:bd:2c:27:21:b6:0c:9c:
                    cf:4a:74:f0:55:2e:60:ca:24:81:35:0d:15:86:4f:
                    71:e1:2f:fd:03:d4:15:4e:3a:20:9a:80:72:bb:2f:
                    b1:a7:a1:40:d1:16:a5:33:e6:4e:11:1d:b4:28:2f:
                    78:23:44:f6:05:0f:2f:18:0f:77:af:63:20:87:c5:
                    8e:b8:35:8c:16:9e:b6:a4:3b:11:24:05:fe:aa:2d:
                    c7:88:d4:bb:e7:ce:ad:a5:08:43:e7:1a:fe:71:fa:
                    81:c5:79:a0:67:b4:26:8d:1d:2d:6a:15:85:f8:d1:
                    66:49:ae:81:e1:4e:a1:e7:6a:7d:c3:58:4f:b2:1c:
                    42:44:e8:f1:99:ce:b3:8c:cf:dd:d6:eb:1b:50:96:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:CB:1D:C6:BC:4A:A2:67:73:B1:B4:60:7A:51:4E:21:D1:60:63
            X509v3 Authority Key Identifier:
                keyid:52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/d5fa57d33092bcdbdd22688686e6b33e06ac6ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/6ab2d820979a406ed3e6351e0a821ee6b903737f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:49:7a:fb:66:fb:49:ba:cc:70:59:c0:9d:3a:c7:9d:78:28:
         29:49:c1:49:96:05:e0:cb:7f:83:d3:3f:84:ac:94:22:3e:04:
         4e:25:be:4b:23:76:0b:e3:a6:3e:51:8d:58:1f:70:02:ec:db:
         78:dc:56:c2:fd:96:77:49:be:be:04:83:e3:b7:76:12:fe:f8:
         62:11:d1:2d:7f:c9:03:ff:dd:e9:a0:cb:a5:ea:ed:2e:33:b8:
         c7:7c:5f:e2:0c:9a:cc:3a:3f:43:c6:fa:b9:a7:98:af:88:6f:
         fd:c6:ae:2d:1c:41:96:ec:a9:f3:22:10:70:a3:59:2a:34:19:
         76:d6:d1:e9:de:21:c7:86:b9:95:bb:9f:9c:58:72:9f:6a:ec:
         f8:a9:57:aa:e8:2a:64:af:57:ca:b9:e4:eb:37:b2:17:e7:c6:
         92:43:db:1c:a5:2a:94:56:29:d2:a0:9b:fc:04:5c:27:94:d3:
         b3:f1:fb:5c:f3:10:23:b7:19:94:fe:77:6d:29:5a:d2:d2:9f:
         af:47:19:b7:e5:dd:83:a6:24:06:e1:9c:cf:39:49:7d:be:ca:
         2a:48:a9:dd:99:96:ad:6d:ae:e5:85:eb:4d:c9:5c:c7:c7:d8:
         57:33:db:fd:40:f6:1f:4a:e4:e9:89:f9:44:1b:7c:b6:06:af:
         5d:3c:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:38:22 2025 by rpki-client