Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/323830303a6139303a3a2f33322d3332203d3e20323632313935.roa
File:                     323830303a6139303a3a2f33322d3332203d3e20323632313935.roa (raw, json)
Hash identifier:          stHcGs8Yqp4yIqZ3nDKpukIPA1wwNDnQVmV0xlOpphA=
Subject key identifier:   61:D4:1D:B7:14:81:43:66:41:84:CA:F1:C5:76:E9:AA:63:10:8D:29
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       0FE7664F9B58C96916042C9350BE27ADC309A0E9
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/323830303a6139303a3a2f33322d3332203d3e20323632313935.roa
Signing time:             Tue 04 Feb 2025 18:35:34 +0000
ROA not before:           Tue 04 Feb 2025 18:30:34 +0000
ROA not after:            Tue 03 Feb 2026 18:35:34 +0000
asID:                     262195
IP address blocks:        2800:a90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e7:66:4f:9b:58:c9:69:16:04:2c:93:50:be:27:ad:c3:09:a0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Feb  4 18:30:34 2025 GMT
            Not After : Feb  3 18:35:34 2026 GMT
        Subject: CN=61D41DB7148143664184CAF1C576E9AA63108D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:5f:c5:ba:72:a4:f3:3c:24:84:2b:66:b3:
                    c2:ac:58:26:e6:f3:2e:f8:f4:b2:58:fb:39:8a:3c:
                    65:2c:e7:b9:9c:aa:04:22:3a:f7:70:af:ba:9b:d0:
                    95:e2:54:12:d3:da:b9:0a:46:41:e9:8a:32:96:0d:
                    f5:ff:e2:df:52:ca:dd:66:bb:18:6c:4f:20:65:81:
                    3f:56:0a:f7:a2:71:06:aa:1f:b7:30:47:c9:bc:30:
                    f5:a3:fa:de:a5:bd:22:c3:8b:1a:f3:44:ca:8f:75:
                    6f:cd:b5:a7:10:30:d8:74:3a:5a:1c:41:6e:57:1d:
                    8f:6e:36:29:75:1e:44:1b:1e:07:5e:ee:4a:5a:45:
                    97:5d:d1:b0:e0:71:dd:e6:a3:08:79:c9:f1:59:e7:
                    bb:8e:47:3f:4e:8b:93:2b:10:1a:48:10:5a:39:40:
                    7b:eb:93:43:e2:6b:57:48:0b:be:45:72:91:2a:8f:
                    2e:c3:71:e9:8b:2f:5d:f8:1a:e7:bf:fa:16:c8:aa:
                    7f:1d:c6:51:d3:1e:da:0c:da:5b:72:04:05:27:4b:
                    24:72:32:6f:36:5b:95:d7:f9:04:58:b1:14:58:b3:
                    55:7b:4d:d9:d0:b1:58:e2:b0:d9:e3:ad:10:13:7a:
                    b6:be:03:17:64:e2:7e:7c:58:4c:a4:70:ba:38:ca:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:1D:B7:14:81:43:66:41:84:CA:F1:C5:76:E9:AA:63:10:8D:29
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/323830303a6139303a3a2f33322d3332203d3e20323632313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:e2:b7:34:f7:9b:54:b6:93:0e:e9:f4:23:65:d1:ff:90:
         37:94:64:6f:65:31:5c:00:cb:20:dc:02:a3:49:e2:d3:19:4b:
         dc:75:c4:69:e6:24:5e:d3:ec:2f:b9:ee:98:82:9d:1b:4e:ac:
         22:9e:58:7e:64:ee:23:c0:9e:f3:b7:d6:13:2d:e4:0f:3a:cd:
         86:11:c7:31:e7:b9:42:8d:78:25:1b:9e:5c:62:16:58:7c:f2:
         a4:cb:35:07:f3:08:f7:e3:18:16:88:88:68:9f:88:d7:8c:46:
         22:ee:04:46:3d:dc:7a:9d:10:7a:35:21:a8:d4:43:11:0d:b7:
         5c:63:7c:9b:5f:82:20:d8:db:14:74:2f:3d:37:3f:9b:dd:13:
         5a:c1:e9:61:89:54:66:7b:f6:c8:b6:60:8e:3b:71:8d:ed:a7:
         93:a5:dc:a5:35:5f:69:e5:00:ce:dc:6b:06:8a:0f:5b:c8:e5:
         f2:c6:b8:59:88:64:cf:d9:75:24:2b:17:e2:bc:d1:87:37:be:
         a6:50:13:b6:5d:e9:c8:a4:08:b2:68:fd:e0:6c:51:c0:be:76:
         c0:02:b3:73:d1:95:c4:82:1c:4e:c2:55:7e:d0:4d:9d:b8:a6:
         4c:31:03:62:4c:51:33:54:a9:9b:4b:6a:8a:d5:d7:ca:ba:ea:
         9b:f2:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:09 2025 by rpki-client