Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e2037373237.roa
File:                     323830313a31303a363030303a3a2f34382d3438203d3e2037373237.roa (raw, json)
Hash identifier:          HgL6iNm73mmmsiFRL4h/zPNju707V29nTyhi/eXo3tc=
Subject key identifier:   57:30:C0:ED:D8:11:BE:ED:3D:9C:5A:02:46:5F:6B:5F:37:83:EC:24
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       F2C397D0461BD0F46532A36F25338BBC30429B
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e2037373237.roa
Signing time:             Tue 04 Feb 2025 18:19:51 +0000
ROA not before:           Tue 04 Feb 2025 18:14:51 +0000
ROA not after:            Tue 03 Feb 2026 18:19:51 +0000
asID:                     7727
IP address blocks:        2801:10:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:c3:97:d0:46:1b:d0:f4:65:32:a3:6f:25:33:8b:bc:30:42:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Feb  4 18:14:51 2025 GMT
            Not After : Feb  3 18:19:51 2026 GMT
        Subject: CN=5730C0EDD811BEED3D9C5A02465F6B5F3783EC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:4b:aa:90:94:44:19:e6:ec:1a:c4:23:b1:
                    d5:dd:ea:09:cb:d1:6a:26:53:da:da:20:cd:db:3f:
                    39:6c:39:5a:14:ad:c6:b3:aa:ab:b1:92:67:c4:84:
                    ac:dc:cf:b5:d7:ab:00:9c:30:82:70:f2:14:1a:17:
                    43:6f:f2:2b:1d:81:b1:ff:69:91:4b:7b:0a:eb:b7:
                    21:c8:9c:0d:8a:1c:62:50:13:a2:1f:be:8f:43:1e:
                    cf:e6:64:3b:d9:18:03:1f:f5:22:7f:a5:bf:9e:dd:
                    1b:3c:53:0e:18:ce:21:73:ba:c7:18:6d:55:83:ae:
                    55:5c:3c:b5:8d:bc:54:82:fd:6e:28:33:f1:67:2b:
                    9c:da:18:ca:f7:ef:1c:7a:ce:4d:48:c1:51:e2:5c:
                    09:df:dd:0d:23:fd:69:3e:04:7d:95:f2:c0:0e:c1:
                    fe:26:d5:17:a5:ee:f4:9d:49:05:7e:57:49:d0:ef:
                    b0:53:40:65:4f:8c:3e:7f:76:d3:71:50:13:a3:bf:
                    62:2b:3e:35:67:d9:3b:9e:1e:38:2d:7e:dd:5d:c9:
                    ef:fe:04:e5:76:04:36:f9:a7:f3:92:64:2c:e7:49:
                    a9:9c:71:4e:d6:12:ff:c2:a1:03:75:3d:66:7e:a5:
                    86:6a:3e:48:e2:0f:43:1d:53:57:c7:1d:22:52:61:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:30:C0:ED:D8:11:BE:ED:3D:9C:5A:02:46:5F:6B:5F:37:83:EC:24
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:12:3b:e0:ac:d0:fb:b4:9c:67:74:86:5a:56:20:c6:02:7e:
         a4:90:d9:7d:73:69:28:35:f8:c8:b2:25:24:31:14:ad:01:2b:
         f9:1e:f9:04:fd:2c:f1:ff:73:76:f5:51:52:4b:b9:22:62:06:
         78:69:c7:38:ee:61:0e:9f:ec:4d:b9:21:25:36:b2:b4:83:b4:
         fa:2c:22:f3:aa:71:16:94:87:26:41:e8:2a:e5:04:aa:1d:b9:
         bb:be:83:0c:4b:5f:5c:c4:8f:11:a1:7b:73:31:52:98:e1:a4:
         19:fb:dc:06:20:c8:d9:cf:aa:c6:03:79:ad:20:15:f7:1e:1f:
         b9:a5:b1:05:02:d8:93:b8:5c:f4:41:f9:47:86:6b:7c:40:4d:
         cc:72:c1:01:08:f9:18:96:24:4d:04:1c:55:0b:d5:eb:5e:f8:
         74:55:57:ff:8a:66:40:67:e8:47:b1:37:a5:67:1a:47:2e:b0:
         ce:16:df:81:a5:ff:7f:ef:a0:26:66:5e:e1:21:dd:64:f4:34:
         87:38:3f:9b:b2:85:8a:e5:23:55:07:8f:5c:f0:3f:34:96:45:
         39:56:34:2d:d0:a4:cf:c3:cd:5d:79:e1:de:db:ba:f1:53:84:
         9a:d6:8e:2c:b2:3f:f3:f8:c5:d2:19:f1:bb:7e:e0:ff:0a:49:
         95:ff:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:19 2025 by rpki-client