Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f33322d3438203d3e20323636393034.roa
File:                     323830333a663661303a3a2f33322d3438203d3e20323636393034.roa (raw, json)
Hash identifier:          Dw97+/Kn2TMzM1Don4OjvEtUYeeyABvv/WtaNFBo7hg=
Subject key identifier:   85:1A:7D:98:71:BD:88:A3:3D:25:CD:BE:D0:2A:69:89:9A:4A:4C:57
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       52E39E45050977F8FBA12038D67662C823284FD9
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f33322d3438203d3e20323636393034.roa
Signing time:             Tue 04 Feb 2025 18:46:06 +0000
ROA not before:           Tue 04 Feb 2025 18:41:06 +0000
ROA not after:            Tue 03 Feb 2026 18:46:06 +0000
asID:                     266904
IP address blocks:        2803:f6a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e3:9e:45:05:09:77:f8:fb:a1:20:38:d6:76:62:c8:23:28:4f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Feb  4 18:41:06 2025 GMT
            Not After : Feb  3 18:46:06 2026 GMT
        Subject: CN=851A7D9871BD88A33D25CDBED02A69899A4A4C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:d1:fa:e9:a3:e2:e8:80:1d:a9:40:8f:76:
                    57:db:65:a1:71:7e:b3:74:cd:36:01:4d:da:28:c0:
                    06:d2:c8:32:fe:d7:c9:18:0a:da:e5:98:a1:08:fc:
                    09:ef:9b:c1:15:eb:1d:73:f5:f1:ec:ea:2a:0c:89:
                    54:d2:ac:aa:44:77:2e:4a:d9:48:41:2d:ef:15:56:
                    ba:47:6a:7e:a4:ef:da:d0:fe:a3:1f:28:f3:31:b8:
                    42:12:61:31:8a:54:3a:9e:74:24:ac:b9:73:14:ba:
                    f1:e1:4d:c7:8b:aa:37:bc:09:5d:eb:95:62:20:0b:
                    10:bd:7f:26:14:6d:9c:3d:7f:e3:80:a8:72:39:5f:
                    97:50:34:f9:4a:6f:03:ad:dc:bf:12:1c:00:41:4a:
                    42:ec:42:dc:87:bc:45:5d:fa:d0:57:fc:f8:7a:4c:
                    83:26:37:4d:6e:85:3c:2b:7d:26:ca:0a:12:52:48:
                    c8:b3:2e:72:a0:71:6f:7e:3b:14:54:d9:3d:41:fe:
                    62:98:b2:7b:35:7f:a9:f0:a0:58:7a:dc:8e:69:0e:
                    cd:d6:5a:4e:88:23:0f:31:51:05:e8:06:87:9c:22:
                    a7:e8:4e:fb:57:93:ac:04:94:bf:ca:2c:f0:01:d2:
                    84:7a:1c:42:a5:b3:1f:f6:54:39:1f:55:2f:4f:f8:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1A:7D:98:71:BD:88:A3:3D:25:CD:BE:D0:2A:69:89:9A:4A:4C:57
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f33322d3438203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:67:c2:20:38:fe:4a:d0:48:c9:bf:6d:60:cd:bc:4c:b1:
         bb:a8:71:81:5f:44:70:59:89:6e:f7:5a:e3:1e:ad:58:22:4c:
         ba:3e:bc:0f:be:67:ca:2e:8a:7f:d9:a6:23:eb:05:ca:84:5c:
         21:ee:ef:5b:27:b3:05:79:d4:8f:ba:61:c0:0f:21:a2:c5:c5:
         0c:da:93:ed:9d:08:a1:56:d0:7a:38:88:69:f7:df:00:06:1c:
         69:dd:d6:42:b8:7f:c3:cb:8e:d9:00:aa:8b:ea:11:83:fc:77:
         90:9f:e4:c0:76:b2:d5:12:4d:a0:57:00:f4:df:ec:5c:33:6a:
         58:6b:3e:6e:85:41:e2:eb:64:10:0c:d5:e2:c9:06:45:5c:aa:
         a4:fd:7c:f6:0f:c7:31:97:c4:07:79:f9:db:cf:76:38:04:7c:
         4a:02:87:27:75:bc:34:a8:2a:80:45:30:8e:aa:85:e2:e1:2b:
         fd:92:9b:5c:db:99:2e:eb:d9:8c:03:e2:a6:f8:9c:ff:6f:fc:
         ab:cf:67:4d:55:26:9d:12:38:fa:a9:3b:bf:b9:94:11:22:28:
         78:80:23:d1:d2:4e:68:e1:84:85:e0:af:49:c9:64:59:41:b6:
         cd:20:84:3a:c8:96:77:e1:96:46:24:12:74:40:9e:29:a3:b0:
         10:28:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:26 2025 by rpki-client