Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa
File:                     323830303a3531303a3a2f33322d3634203d3e203238303232.roa (raw, json)
Hash identifier:          47Ec9YUv8RNTWphoBMmGDaPZkNTpiH2unIFIKzn62cQ=
Subject key identifier:   E9:D0:DD:7E:51:D9:D3:D5:2B:AE:0B:A9:0A:EE:FB:22:D5:FF:D0:AB
Certificate issuer:       /CN=2000BFC4CE0B56183990500772974F91AC5629B4
Certificate serial:       0833CBA7CE1D66521EA37C8431D5D21CA42D399C
Authority key identifier: 20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa
Signing time:             Tue 04 Feb 2025 18:32:09 +0000
ROA not before:           Tue 04 Feb 2025 18:27:09 +0000
ROA not after:            Tue 03 Feb 2026 18:32:09 +0000
asID:                     28022
IP address blocks:        2800:510::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:33:cb:a7:ce:1d:66:52:1e:a3:7c:84:31:d5:d2:1c:a4:2d:39:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2000BFC4CE0B56183990500772974F91AC5629B4
        Validity
            Not Before: Feb  4 18:27:09 2025 GMT
            Not After : Feb  3 18:32:09 2026 GMT
        Subject: CN=E9D0DD7E51D9D3D52BAE0BA90AEEFB22D5FFD0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:d3:8f:8e:cd:25:9c:91:f9:33:3b:b3:48:
                    8c:f6:76:18:cc:99:87:05:11:e6:08:71:da:8f:3a:
                    35:49:3a:99:10:a3:fb:38:e1:d9:fa:9c:f1:83:eb:
                    0c:8b:39:07:e6:ae:c5:11:ea:d5:d3:9f:01:a7:30:
                    48:ff:04:fe:fa:d7:64:d9:3f:16:3b:25:dc:ad:6b:
                    4e:f4:e9:fa:c1:24:ad:f5:a7:e0:07:5a:3a:8c:10:
                    cc:5b:6e:b6:34:ed:ae:6f:56:99:57:d1:f8:f8:00:
                    be:9d:85:9e:b3:56:ee:12:1e:2d:32:3c:0a:b0:7e:
                    40:69:19:b1:4c:92:66:21:22:6e:06:93:f2:dc:59:
                    53:4f:d0:e2:17:a4:31:a3:6f:ae:62:86:3c:17:a9:
                    8a:3d:a9:e2:e7:1f:4b:36:11:ab:67:e7:a5:64:b1:
                    d0:74:27:e7:37:3d:73:2f:3e:53:31:0d:29:18:91:
                    9b:71:84:52:ab:a6:58:86:f9:81:2b:5e:7d:bb:e2:
                    be:40:48:72:8d:c5:2f:f4:a2:0a:ab:78:c2:91:83:
                    c0:d6:15:58:eb:e0:af:96:8b:2d:cc:00:81:95:4f:
                    16:6d:6c:f7:4f:67:26:ea:bc:4f:73:90:26:34:ae:
                    87:dd:46:c9:23:94:45:dc:f4:d1:f2:8e:a6:00:bd:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D0:DD:7E:51:D9:D3:D5:2B:AE:0B:A9:0A:EE:FB:22:D5:FF:D0:AB
            X509v3 Authority Key Identifier:
                keyid:20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:8a:b0:f0:b2:48:83:bd:8d:1f:63:b2:0e:17:7b:54:fc:e1:
         7d:2f:3a:9d:6c:6b:5a:b0:f0:82:15:c7:48:19:d1:7b:2a:65:
         e2:46:07:44:a3:00:6b:0b:85:88:24:83:e6:1e:23:82:8a:a0:
         d3:cd:9a:3a:e6:fb:6b:ff:47:ea:f4:c1:7a:69:11:98:8f:3c:
         2b:5e:15:e4:85:e5:1b:a5:ba:8d:7c:8b:85:ce:9f:33:6b:ef:
         93:c8:80:86:b8:7e:77:f1:0f:8c:25:50:5b:66:08:b7:0b:29:
         69:68:72:2c:84:4f:97:99:d9:81:9a:ee:d4:ce:5f:01:a2:0c:
         f0:36:74:85:58:b1:b7:78:01:c1:6d:71:63:86:f0:c1:c5:1d:
         cc:9c:18:aa:7b:05:ec:2a:77:7d:72:85:c2:01:62:3e:6e:95:
         48:89:48:36:49:7a:7b:b9:8b:ab:e8:17:37:47:8f:3f:44:19:
         e8:f7:7b:8a:89:07:47:ec:d3:45:1e:83:c0:51:e1:2f:56:e0:
         36:7c:4c:fd:7d:ff:bb:33:b0:d8:74:01:1f:22:50:8b:df:35:
         ed:9b:52:b0:25:56:0d:bb:9c:75:c1:6f:71:e9:36:d5:6a:a6:
         96:12:50:71:28:67:59:5b:e3:23:11:16:51:dc:47:b7:d0:d3:
         80:04:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:32 2025 by rpki-client