Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa
File:                     323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa (raw, json)
Hash identifier:          7qMwO9D+oyC1nXP+rkngTnUAyzzAys8cJyOs2XYqOE8=
Subject key identifier:   24:B1:56:2D:81:C6:D3:AE:50:02:39:8B:72:5A:6B:B7:52:95:98:C4
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       4B12B7A60AAACF378572A26CDD06403953739420
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa
Signing time:             Tue 04 Feb 2025 18:19:53 +0000
ROA not before:           Tue 04 Feb 2025 18:14:53 +0000
ROA not after:            Tue 03 Feb 2026 18:19:53 +0000
asID:                     263690
IP address blocks:        2801:10:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:12:b7:a6:0a:aa:cf:37:85:72:a2:6c:dd:06:40:39:53:73:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Feb  4 18:14:53 2025 GMT
            Not After : Feb  3 18:19:53 2026 GMT
        Subject: CN=24B1562D81C6D3AE5002398B725A6BB7529598C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:24:db:1c:84:54:a1:f8:e4:c2:e4:a8:4a:
                    fd:3b:d4:99:67:f6:a9:59:d8:a9:9c:92:d0:c6:c5:
                    ae:eb:0c:7f:8d:13:b8:5d:23:98:ce:a6:34:42:ff:
                    19:42:af:f8:4a:81:a1:e2:17:08:1d:02:4e:71:3c:
                    62:09:59:cf:c4:8d:40:5e:25:cf:5d:7c:d0:ca:98:
                    a6:a4:a7:42:f9:c8:a2:fe:73:f2:71:d9:56:b5:b0:
                    b4:97:b6:a3:a6:5a:b5:6d:ee:ce:a6:29:d2:7d:32:
                    8c:7a:03:7f:93:f4:24:d5:fe:55:46:ff:aa:79:10:
                    26:dd:1f:95:44:0a:85:a5:e7:97:74:19:1e:2c:4e:
                    83:77:18:f5:a8:ae:30:58:3e:26:eb:d2:99:25:ef:
                    6f:ed:d6:35:78:03:6b:d7:12:d1:55:96:6c:cc:97:
                    1f:c7:09:08:2c:d4:1c:9e:8e:c2:b3:70:0a:72:78:
                    7d:dd:79:2c:49:01:69:07:3c:8d:61:f3:19:df:0b:
                    34:59:b8:76:8a:cc:76:be:7e:8a:82:ba:1b:4f:00:
                    11:42:2d:84:6c:15:b8:2d:9e:d8:44:e4:7b:e3:5e:
                    fd:17:8a:c4:24:35:e0:76:9a:cb:68:50:50:10:e4:
                    16:66:8e:6d:56:ba:e9:71:0f:1d:59:c9:2f:8f:07:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:56:2D:81:C6:D3:AE:50:02:39:8B:72:5A:6B:B7:52:95:98:C4
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:c2:45:f6:f3:27:07:27:eb:7a:96:3b:86:3b:41:57:fe:
         31:a9:0f:c0:c4:ab:cf:1f:93:4c:a4:ad:c5:d4:5e:61:1a:46:
         55:f1:43:b9:8b:0c:5f:f6:01:60:6b:0b:69:a4:75:db:4f:0f:
         fe:a0:37:be:ae:fc:a6:e6:e5:98:52:fe:c7:c9:69:97:ff:6c:
         58:a5:a0:6a:69:85:53:92:29:f0:26:df:66:06:4a:a9:90:2f:
         a2:b8:b5:e4:68:b7:5c:fd:59:18:90:fd:2c:44:69:84:61:b3:
         1f:be:bf:5d:cd:7a:51:51:26:8f:9b:ed:f2:27:d6:c7:9d:36:
         4a:11:53:ab:18:67:19:14:10:e5:2b:a1:1f:75:eb:eb:e2:8c:
         df:48:34:a5:ce:43:72:d9:8d:e5:ad:43:73:13:a9:d8:2f:3a:
         ca:de:b1:9e:47:2e:94:d8:98:1c:c1:de:75:95:17:84:28:fe:
         2c:40:85:cf:cd:af:5c:c9:21:65:5d:91:57:37:9a:b3:89:aa:
         5f:d1:ad:09:3c:b8:8b:7f:6c:69:f1:0f:02:68:68:c3:97:52:
         8a:76:c7:13:0a:c2:44:2e:5d:98:0a:fa:2c:a4:90:b2:e3:52:
         e3:9b:20:6f:b7:1d:82:5a:5f:5b:0b:f0:33:52:af:f8:fd:78:
         00:37:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:28 2025 by rpki-client