Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          +YAONeJxtIWwX/0Fh/jOLV3xmSFpRpC3cRtQlMIWeUU=
Subject key identifier:   A4:14:55:2B:E0:1B:6D:CE:90:02:EB:75:6F:08:E2:13:06:43:A8:F1
Certificate issuer:       /CN=6A4FE860688A76C484112401523A793836137108
Certificate serial:       3249322B01C7FE247A77DECB0EC6B4B03170D032
Authority key identifier: 6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:11:40 +0000
ROA not before:           Tue 04 Feb 2025 18:06:40 +0000
ROA not after:            Tue 03 Feb 2026 18:11:40 +0000
asID:                     27951
IP address blocks:        2801:1fc:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:49:32:2b:01:c7:fe:24:7a:77:de:cb:0e:c6:b4:b0:31:70:d0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A4FE860688A76C484112401523A793836137108
        Validity
            Not Before: Feb  4 18:06:40 2025 GMT
            Not After : Feb  3 18:11:40 2026 GMT
        Subject: CN=A414552BE01B6DCE9002EB756F08E2130643A8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:51:23:3b:94:af:e1:e4:d1:97:ed:db:89:
                    f5:ee:fc:60:e4:a9:fd:3d:9d:03:4c:1f:be:50:49:
                    34:01:f9:81:b9:bd:20:9e:a8:a6:eb:3e:11:d6:8b:
                    91:d8:d3:02:b6:9b:75:22:e6:e8:73:f7:0b:78:86:
                    b1:98:ee:34:ed:33:e7:1f:f8:96:2f:71:34:ec:f2:
                    e9:03:41:d1:9d:d0:b2:64:4b:f2:e4:e7:31:d6:23:
                    04:f9:1e:07:d8:af:0a:c3:c9:36:4f:3c:6e:18:39:
                    c0:c7:fe:47:d6:dd:a1:dd:45:62:8f:0f:4b:07:01:
                    86:94:fb:11:59:73:df:42:ec:f1:63:07:21:2f:98:
                    cf:5c:08:b6:00:55:1f:62:b5:41:8c:61:ae:17:c6:
                    b7:69:f8:0b:02:4e:fd:65:1f:4a:20:83:57:6a:fb:
                    68:d7:43:16:ce:ee:b7:cd:3f:d6:80:02:2f:de:53:
                    cc:57:30:67:2b:88:61:20:a3:66:5c:9b:07:ae:e2:
                    65:ce:bc:63:ba:92:c3:8a:d9:f4:6b:8f:f4:b7:3e:
                    4d:ad:64:58:1f:31:4d:d5:95:26:b9:3f:51:ea:ae:
                    87:5e:53:1a:49:a4:6a:5b:ce:af:c3:25:66:07:22:
                    25:76:15:fb:86:c1:00:87:ee:ad:4d:26:2a:51:b9:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:14:55:2B:E0:1B:6D:CE:90:02:EB:75:6F:08:E2:13:06:43:A8:F1
            X509v3 Authority Key Identifier:
                keyid:6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:9b:1d:ef:b5:9d:3b:85:17:b6:b7:79:2f:75:c8:a0:27:
         3f:0c:ed:cd:31:a7:60:2a:6c:94:84:68:bd:b3:68:4b:5e:3c:
         61:6e:d8:9c:f3:60:9b:f4:70:0a:41:06:37:67:36:77:03:c4:
         ce:f7:da:55:75:f3:ef:f3:44:50:f2:b8:27:01:c5:fc:3d:69:
         0e:00:24:f2:bc:b2:36:c4:8f:e2:11:31:3f:05:08:47:f6:c5:
         c7:78:76:ea:0f:76:7c:9e:96:1c:93:3e:d2:c9:0e:33:a3:49:
         95:bf:f8:04:7e:2e:37:b4:af:b0:f9:13:52:4c:72:be:5b:ed:
         e6:07:d5:14:d5:cf:26:5b:b5:cb:93:62:a1:a8:21:2f:bf:0b:
         6d:5d:6a:a6:b5:78:31:a8:df:52:fd:11:ab:4f:38:f5:1c:c6:
         7e:fa:e7:3c:37:b2:68:0e:1e:a0:76:c0:0e:22:07:46:20:37:
         0c:7b:cf:c0:f5:26:7c:0b:68:a5:96:97:df:1e:fa:47:3a:39:
         1e:5e:80:93:32:05:f2:b3:59:51:aa:18:31:9c:2b:2c:a7:04:
         16:ed:5c:20:e1:0f:c5:eb:42:e5:3e:c7:b2:86:a5:1c:7c:5f:
         e0:22:13:3d:b3:14:52:70:f6:cc:e5:54:1e:d4:b0:9c:c0:c2:
         6d:5b:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:33 2025 by rpki-client