Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          re6vA+Il3D31LDIYm7ewK30UXIraQw/qKeZ1/+IlyTU=
Subject key identifier:   10:83:C3:02:25:6B:C0:67:6B:E3:E4:BC:D9:76:CD:D7:6E:7C:CF:E4
Certificate issuer:       /CN=6A4FE860688A76C484112401523A793836137108
Certificate serial:       6208174C5473332A3C54FA59C70F0CEDAD39D100
Authority key identifier: 6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:11:41 +0000
ROA not before:           Tue 04 Feb 2025 18:06:41 +0000
ROA not after:            Tue 03 Feb 2026 18:11:41 +0000
asID:                     27951
IP address blocks:        2801:1fc:14::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:08:17:4c:54:73:33:2a:3c:54:fa:59:c7:0f:0c:ed:ad:39:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A4FE860688A76C484112401523A793836137108
        Validity
            Not Before: Feb  4 18:06:41 2025 GMT
            Not After : Feb  3 18:11:41 2026 GMT
        Subject: CN=1083C302256BC0676BE3E4BCD976CDD76E7CCFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:fd:2d:15:f8:24:d9:80:64:26:3f:a8:e3:
                    fa:4e:5a:26:6c:ec:9a:19:91:70:87:76:c0:6e:38:
                    16:d1:b7:8d:e9:e0:39:f9:d5:77:2d:39:19:f7:02:
                    51:03:0d:ae:bf:1e:72:bf:d3:72:91:47:6b:d8:49:
                    da:c7:05:1a:e5:ba:1b:ab:d2:24:0c:03:9b:5d:1c:
                    b6:49:a2:fb:f1:33:1e:94:ba:de:e5:e7:7f:9f:44:
                    a5:d7:a4:b2:22:5e:ea:02:bd:4f:f7:91:74:68:50:
                    6e:f9:f5:90:2b:9d:01:64:0b:ee:4a:24:8e:87:1c:
                    d6:86:3d:49:d3:d9:ad:0d:d7:47:bc:01:f9:bb:c4:
                    7d:fa:fb:c5:5a:9b:49:7f:fb:a2:db:1e:c9:5b:ef:
                    89:ee:20:ff:ed:82:92:ef:2c:dd:7e:fe:61:9a:42:
                    7d:d1:2f:49:74:44:33:59:f7:0e:42:60:11:e0:c5:
                    9e:39:70:ed:e9:9b:79:0a:66:60:9d:42:42:b2:04:
                    53:a4:d7:9f:8b:fb:86:55:3c:dc:16:08:f4:ce:63:
                    3f:06:4a:8a:9b:29:d2:aa:35:cf:2c:27:5a:08:7b:
                    da:f2:3d:b0:e5:10:9f:22:26:fc:e7:a1:98:7d:e1:
                    cb:18:43:41:b8:cf:a9:dc:20:fb:21:2c:61:af:af:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:83:C3:02:25:6B:C0:67:6B:E3:E4:BC:D9:76:CD:D7:6E:7C:CF:E4
            X509v3 Authority Key Identifier:
                keyid:6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:ba:f5:65:cf:e0:b7:e6:09:02:16:a5:d7:3a:7c:ca:51:
         28:f8:6f:f7:af:61:08:ca:d2:be:c4:d1:bb:d0:75:5b:75:38:
         26:e3:c0:04:9b:52:3e:26:bb:b7:2d:6d:4d:39:c8:1c:05:67:
         5f:e7:45:4c:7f:3c:05:18:3d:a8:15:b4:fd:bf:2f:a3:80:dc:
         ef:c8:f0:ef:cd:f3:a8:39:20:ea:43:96:d5:c7:f2:a5:d0:bc:
         4c:06:bb:35:d0:cf:4c:94:7a:36:b7:6f:34:b2:59:2b:35:99:
         89:45:a3:ed:74:ab:00:72:ca:18:1b:b9:ac:d3:56:bb:28:14:
         79:71:d0:91:fa:1e:3c:52:46:d5:53:05:11:17:62:c8:d0:bc:
         a3:95:03:17:84:67:d7:1b:c9:1f:54:70:52:c2:30:31:87:18:
         d2:5f:8f:d8:08:0a:ae:d7:3e:ac:50:24:bb:f6:66:32:6f:ee:
         34:10:ad:8f:7b:2c:6d:ad:db:b1:76:b9:6a:a4:71:b7:57:c7:
         c1:cd:e6:d6:d1:a0:d2:98:c1:bb:1a:38:6d:b1:21:37:50:9a:
         df:27:b5:41:06:93:c6:e0:e8:82:0c:4a:b1:b1:52:f1:d2:e2:
         13:db:dd:d5:b4:64:d1:54:55:c3:cf:ee:4e:6a:80:ad:b1:69:
         f5:37:96:ac
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUYggXTFRzMyo8VPpZxw8M7a050QAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0RkU4NjA2ODhBNzZDNDg0MTEyNDAxNTIzQTc5Mzgz
NjEzNzEwODAeFw0yNTAyMDQxODA2NDFaFw0yNjAyMDMxODExNDFaMDMxMTAvBgNV
BAMTKDEwODNDMzAyMjU2QkMwNjc2QkUzRTRCQ0Q5NzZDREQ3NkU3Q0NGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZf0tFfgk2YBkJj+o4/pOWiZs
7JoZkXCHdsBuOBbRt43p4Dn51XctORn3AlEDDa6/HnK/03KRR2vYSdrHBRrluhur
0iQMA5tdHLZJovvxMx6Uut7l53+fRKXXpLIiXuoCvU/3kXRoUG759ZArnQFkC+5K
JI6HHNaGPUnT2a0N10e8Afm7xH36+8Vam0l/+6LbHslb74nuIP/tgpLvLN1+/mGa
Qn3RL0l0RDNZ9w5CYBHgxZ45cO3pm3kKZmCdQkKyBFOk15+L+4ZVPNwWCPTOYz8G
SoqbKdKqNc8sJ1oIe9ryPbDlEJ8iJvznoZh94csYQ0G4z6ncIPshLGGvr7FFAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUEIPDAiVrwGdr4+S82XbN1258z+QwHwYDVR0j
BBgwFoAUak/oYGiKdsSEESQBUjp5ODYTcQgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjlENTVBMkVFRTYzODY4Q0UwNkI3NjEwMDg5RkY1MDJF
QTJFRDdCODZDNUQ3ODY3NkQzMTJGRUU4MDc0RUE0LzAvNkE0RkU4NjA2ODhBNzZD
NDg0MTEyNDAxNTIzQTc5MzgzNjEzNzEwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTRGRTg2MDY4OEE3NkM0ODQx
MTI0MDE1MjNBNzkzODM2MTM3MTA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY5RDU1QTJFRUU2Mzg2OENFMDZCNzYxMDA4OUZGNTAyRUEyRUQ3Qjg2
QzVENzg2NzZEMzEyRkVFODA3NEVBNC8wLzMyMzgzMDMxM2EzMTY2NjMzYTMxMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
/AAUMA0GCSqGSIb3DQEBCwUAA4IBAQBPnbr1Zc/gt+YJAhal1zp8ylEo+G/3r2EI
ytK+xNG70HVbdTgm48AEm1I+Jru3LW1NOcgcBWdf50VMfzwFGD2oFbT9vy+jgNzv
yPDvzfOoOSDqQ5bVx/Kl0LxMBrs10M9MlHo2t280slkrNZmJRaPtdKsAcsoYG7ms
01a7KBR5cdCR+h48UkbVUwURF2LI0LyjlQMXhGfXG8kfVHBSwjAxhxjSX4/YCAqu
1z6sUCS79mYyb+40EK2PeyxtrduxdrlqpHG3V8fBzebW0aDSmMG7GjhtsSE3UJrf
J7VBBpPG4OiCDEqxsVLx0uIT293VtGTRVFXDz+5OaoCtsWn1N5as
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:00:52 2025 by rpki-client