Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3166633a31303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          rJggWReWiF5HzcMvNEH+KIiYrNdnMKo/bUWjeQ/pbTE=
Subject key identifier:   60:08:66:6A:F1:01:A0:F9:7A:23:34:22:8F:AA:9F:2F:E9:EB:28:66
Certificate issuer:       /CN=6A4FE860688A76C484112401523A793836137108
Certificate serial:       3C06195FB93D9A31FAA03AD76109F48E89A8AF61
Authority key identifier: 6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:11:40 +0000
ROA not before:           Tue 04 Feb 2025 18:06:40 +0000
ROA not after:            Tue 03 Feb 2026 18:11:40 +0000
asID:                     27951
IP address blocks:        2801:1fc:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:06:19:5f:b9:3d:9a:31:fa:a0:3a:d7:61:09:f4:8e:89:a8:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A4FE860688A76C484112401523A793836137108
        Validity
            Not Before: Feb  4 18:06:40 2025 GMT
            Not After : Feb  3 18:11:40 2026 GMT
        Subject: CN=6008666AF101A0F97A2334228FAA9F2FE9EB2866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:fc:57:df:42:bb:4b:d0:ff:ee:59:ee:39:
                    15:dc:fd:5d:c7:84:6f:2c:ad:f2:30:5d:1a:f0:d0:
                    c2:4d:15:e9:28:16:3d:d3:ff:7b:2c:fd:bd:df:a3:
                    d1:18:a3:ac:26:a6:57:8b:0f:02:ca:4c:b4:95:41:
                    07:cb:52:3a:bd:85:40:3b:2a:89:f8:b7:9e:8f:7c:
                    15:a6:25:3c:b2:5b:c6:33:a8:c2:35:28:d2:1f:ce:
                    f8:6f:b9:3a:e2:2b:ad:4f:9d:8f:b8:20:47:1b:45:
                    2c:e1:d0:ce:16:52:ab:ce:34:e4:a1:36:b2:20:98:
                    8f:66:09:84:c9:79:1d:93:38:64:a7:6a:47:54:ef:
                    fa:93:19:b1:f6:e9:4a:67:3d:28:99:2c:cf:4c:11:
                    0e:71:87:72:e5:5d:50:9c:ac:75:e2:48:27:e7:0b:
                    be:b1:b5:6e:a3:f0:09:50:8d:87:4d:8f:06:c2:75:
                    14:b3:64:7e:8b:a8:de:20:16:21:70:13:e8:39:6d:
                    0f:cd:7c:61:79:b1:e9:f0:e6:4d:66:c1:42:b0:b4:
                    7a:a3:d0:2f:8b:a3:96:a4:18:5e:fc:5d:6a:7f:42:
                    82:a8:2a:68:57:16:25:e7:30:e7:cd:cc:1a:f2:19:
                    c0:ca:18:a0:f9:00:60:eb:a5:77:42:1b:a9:7a:29:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:66:6A:F1:01:A0:F9:7A:23:34:22:8F:AA:9F:2F:E9:EB:28:66
            X509v3 Authority Key Identifier:
                keyid:6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:17:fd:a7:a9:e9:8d:d5:81:76:2c:b8:0d:f6:9e:ec:9b:
         6b:3a:8f:99:e3:2d:1a:ed:93:03:62:5e:d2:7b:fa:91:0a:28:
         d6:78:92:04:36:9e:e2:ca:83:fd:28:6b:a0:f3:02:b1:61:d4:
         ce:5a:28:3c:c9:47:26:1f:3c:b7:5b:5d:e6:c0:49:3c:02:05:
         55:90:d2:b3:87:85:0c:d6:8e:d5:13:80:70:fc:0f:16:74:42:
         88:43:7c:6d:06:9c:8f:38:3a:1e:35:76:77:48:f1:1d:aa:74:
         94:07:b5:38:54:42:4c:81:ce:79:3c:23:e7:ff:dd:f6:0d:7d:
         90:f7:97:43:b8:6e:0c:c8:66:1a:40:51:0c:44:9a:c0:fb:32:
         2e:3c:b9:5f:23:7f:cf:9d:fa:68:31:90:e9:ad:d2:0a:b3:6d:
         c3:c9:24:96:21:63:1f:c5:cb:56:44:67:f0:68:62:c0:c9:88:
         33:6a:3d:00:e1:34:6e:01:b6:9b:92:ea:d7:a8:47:c4:53:b9:
         58:29:12:d8:e2:74:5e:b1:e0:cb:74:2c:a0:df:56:47:e7:bc:
         c3:5c:45:c6:a1:0f:d3:62:90:71:2a:fc:bd:d7:a7:4a:f8:36:
         81:89:ec:b1:09:58:bd:20:f7:bc:ca:48:97:9d:98:5d:e0:a5:
         a2:42:63:b5
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUPAYZX7k9mjH6oDrXYQn0jomor2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0RkU4NjA2ODhBNzZDNDg0MTEyNDAxNTIzQTc5Mzgz
NjEzNzEwODAeFw0yNTAyMDQxODA2NDBaFw0yNjAyMDMxODExNDBaMDMxMTAvBgNV
BAMTKDYwMDg2NjZBRjEwMUEwRjk3QTIzMzQyMjhGQUE5RjJGRTlFQjI4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDliPxX30K7S9D/7lnuORXc/V3H
hG8srfIwXRrw0MJNFekoFj3T/3ss/b3fo9EYo6wmpleLDwLKTLSVQQfLUjq9hUA7
Kon4t56PfBWmJTyyW8YzqMI1KNIfzvhvuTriK61PnY+4IEcbRSzh0M4WUqvONOSh
NrIgmI9mCYTJeR2TOGSnakdU7/qTGbH26UpnPSiZLM9MEQ5xh3LlXVCcrHXiSCfn
C76xtW6j8AlQjYdNjwbCdRSzZH6LqN4gFiFwE+g5bQ/NfGF5senw5k1mwUKwtHqj
0C+Lo5akGF78XWp/QoKoKmhXFiXnMOfNzBryGcDKGKD5AGDrpXdCG6l6KbqBAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUYAhmavEBoPl6IzQij6qfL+nrKGYwHwYDVR0j
BBgwFoAUak/oYGiKdsSEESQBUjp5ODYTcQgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjlENTVBMkVFRTYzODY4Q0UwNkI3NjEwMDg5RkY1MDJF
QTJFRDdCODZDNUQ3ODY3NkQzMTJGRUU4MDc0RUE0LzAvNkE0RkU4NjA2ODhBNzZD
NDg0MTEyNDAxNTIzQTc5MzgzNjEzNzEwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTRGRTg2MDY4OEE3NkM0ODQx
MTI0MDE1MjNBNzkzODM2MTM3MTA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY5RDU1QTJFRUU2Mzg2OENFMDZCNzYxMDA4OUZGNTAyRUEyRUQ3Qjg2
QzVENzg2NzZEMzEyRkVFODA3NEVBNC8wLzMyMzgzMDMxM2EzMTY2NjMzYTMxMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
/AAQMA0GCSqGSIb3DQEBCwUAA4IBAQCqWBf9p6npjdWBdiy4Dfae7JtrOo+Z4y0a
7ZMDYl7Se/qRCijWeJIENp7iyoP9KGug8wKxYdTOWig8yUcmHzy3W13mwEk8AgVV
kNKzh4UM1o7VE4Bw/A8WdEKIQ3xtBpyPODoeNXZ3SPEdqnSUB7U4VEJMgc55PCPn
/932DX2Q95dDuG4MyGYaQFEMRJrA+zIuPLlfI3/PnfpoMZDprdIKs23DySSWIWMf
xctWRGfwaGLAyYgzaj0A4TRuAbabkurXqEfEU7lYKRLY4nReseDLdCyg31ZH57zD
XEXGoQ/TYpBxKvy916dK+DaBieyxCVi9IPe8ykiXnZhd4KWiQmO1
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:30 2025 by rpki-client