Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030343a3a2f34362d3436203d3e20323633363930.roa
File:                     323830313a31303a363030343a3a2f34362d3436203d3e20323633363930.roa (raw, json)
Hash identifier:          /F9x60jeSumSYUTmwXLj62/GvMfxPwgZGwOT488L7Fs=
Subject key identifier:   61:E1:77:CD:49:27:83:D6:6B:4D:3F:B3:73:D9:77:B3:78:D8:7E:AA
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       12F836FCE6BBE15DABE21BBB471F9A842D4D63CD
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030343a3a2f34362d3436203d3e20323633363930.roa
Signing time:             Tue 04 Feb 2025 18:19:53 +0000
ROA not before:           Tue 04 Feb 2025 18:14:53 +0000
ROA not after:            Tue 03 Feb 2026 18:19:53 +0000
asID:                     263690
IP address blocks:        2801:10:6004::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f8:36:fc:e6:bb:e1:5d:ab:e2:1b:bb:47:1f:9a:84:2d:4d:63:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Feb  4 18:14:53 2025 GMT
            Not After : Feb  3 18:19:53 2026 GMT
        Subject: CN=61E177CD492783D66B4D3FB373D977B378D87EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:fa:b4:96:6a:05:86:88:70:91:e0:19:59:
                    6d:7f:2a:cb:96:4e:a3:a1:f4:2b:7a:0b:32:44:3f:
                    7f:b6:45:5c:f7:d8:59:ba:4f:b3:1c:3c:59:12:ee:
                    c1:2f:3c:14:c7:39:99:74:cb:54:e5:e7:bd:61:99:
                    55:2e:15:6c:b2:e1:9c:18:7a:99:50:17:08:3c:c9:
                    63:a8:32:a1:f2:15:1b:bc:c4:f6:bc:c9:94:b9:d0:
                    de:ff:92:8e:cf:c2:55:5f:31:6d:3f:99:6a:0b:91:
                    d3:6a:e8:e3:f3:33:c7:15:c9:b5:44:b7:c5:42:93:
                    d4:6b:e4:9c:46:ed:de:ad:d4:d3:a8:5c:26:c6:86:
                    a2:13:da:20:79:fa:76:6e:03:26:01:04:01:81:42:
                    64:a4:be:99:f7:e7:33:c4:19:18:4d:73:31:9a:b6:
                    49:aa:86:95:16:8a:b0:7b:af:4f:16:74:16:d7:cc:
                    3c:36:1c:ca:de:81:4d:8f:23:06:63:5f:e4:18:81:
                    6d:2b:40:30:4b:e2:57:d9:32:26:2d:df:2c:6c:38:
                    3b:57:65:ec:a0:67:61:76:ce:9a:4c:2c:cb:cd:9d:
                    cf:c4:a1:41:6c:24:e8:77:b0:d9:03:c7:29:00:71:
                    30:57:d3:7e:0b:1d:2b:87:0c:e2:69:7b:01:9b:71:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:77:CD:49:27:83:D6:6B:4D:3F:B3:73:D9:77:B3:78:D8:7E:AA
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030343a3a2f34362d3436203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6004::/46

    Signature Algorithm: sha256WithRSAEncryption
         89:af:75:5c:c6:0e:32:a4:35:be:8a:23:4c:84:d5:80:6e:88:
         e3:17:f4:d5:e5:9d:73:13:9b:9b:d2:93:20:a0:49:2a:7c:fa:
         6c:b9:d1:15:36:8d:20:f7:52:3c:00:d2:d9:13:35:e2:fd:ed:
         47:c5:60:a3:67:71:c6:ab:5d:01:74:e5:8c:97:f4:22:32:65:
         b9:2a:e6:60:57:ab:03:a8:c7:b4:8d:f1:7e:fa:ec:1f:54:fe:
         9a:a8:22:fe:94:bd:d0:9c:e0:3e:4b:54:ec:e4:92:34:c2:50:
         8a:60:5b:4d:b3:01:b0:5a:4c:5a:09:5b:fa:d8:bd:98:5a:53:
         b0:6e:a6:bc:14:a1:fb:8d:51:9f:b4:8a:b1:f3:90:c7:da:18:
         7a:27:0b:ea:41:e3:e0:4c:f3:1a:ee:80:f4:2a:9e:40:57:f0:
         8d:4f:16:36:5b:d8:d4:aa:b1:ff:f7:93:00:a9:71:04:b3:8b:
         ab:fd:50:58:4f:2f:70:04:a2:ec:70:f0:04:f5:bc:f1:f3:4e:
         72:18:07:53:f3:1e:ea:d3:49:4e:5f:76:76:6f:b0:ee:0a:21:
         09:56:14:0a:fd:d8:1c:99:d7:23:07:7e:34:c4:2d:ce:84:e7:
         ca:2c:b2:7b:8a:c8:e8:96:c0:97:2a:99:cb:e7:e2:48:7c:04:
         04:a5:a1:f0
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUEvg2/Oa74V2r4hu7Rx+ahC1NY80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFQzhGQzAzN0ZFNDZBMzBGRDUzMkE4M0ZDREVDNzJC
NzI5Q0MwNDAeFw0yNTAyMDQxODE0NTNaFw0yNjAyMDMxODE5NTNaMDMxMTAvBgNV
BAMTKDYxRTE3N0NENDkyNzgzRDY2QjREM0ZCMzczRDk3N0IzNzhEODdFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcvq0lmoFhohwkeAZWW1/KsuW
TqOh9Ct6CzJEP3+2RVz32Fm6T7McPFkS7sEvPBTHOZl0y1Tl571hmVUuFWyy4ZwY
eplQFwg8yWOoMqHyFRu8xPa8yZS50N7/ko7PwlVfMW0/mWoLkdNq6OPzM8cVybVE
t8VCk9Rr5JxG7d6t1NOoXCbGhqIT2iB5+nZuAyYBBAGBQmSkvpn35zPEGRhNczGa
tkmqhpUWirB7r08WdBbXzDw2HMregU2PIwZjX+QYgW0rQDBL4lfZMiYt3yxsODtX
ZeygZ2F2zppMLMvNnc/EoUFsJOh3sNkDxykAcTBX034LHSuHDOJpewGbcQ79AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUYeF3zUkng9ZrTT+zc9l3s3jYfqowHwYDVR0j
BBgwFoAUfeyPwDf+RqMP1TKoP83scrcpzAQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODM1RTA1NzlDNjhFNEI3MDYwMzBBOUQyQjdERUVFQTlF
QkI2OUU5N0Y1QTIxRTNCOUZBQkU3MzYyQjkyMDMwLzAvN0RFQzhGQzAzN0ZFNDZB
MzBGRDUzMkE4M0ZDREVDNzJCNzI5Q0MwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REVDOEZDMDM3RkU0NkEzMEZE
NTMyQTgzRkNERUM3MkI3MjlDQzA0LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjgzNUUwNTc5QzY4RTRCNzA2MDMwQTlEMkI3REVFRUE5RUJCNjlFOTdG
NUEyMUUzQjlGQUJFNzM2MkI5MjAzMC8wLzMyMzgzMDMxM2EzMTMwM2EzNjMwMzAz
NDNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzYzMzM2MzkzMC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
AigBABBgBDANBgkqhkiG9w0BAQsFAAOCAQEAia91XMYOMqQ1voojTITVgG6I4xf0
1eWdcxObm9KTIKBJKnz6bLnRFTaNIPdSPADS2RM14v3tR8Vgo2dxxqtdAXTljJf0
IjJluSrmYFerA6jHtI3xfvrsH1T+mqgi/pS90JzgPktU7OSSNMJQimBbTbMBsFpM
Wglb+ti9mFpTsG6mvBSh+41Rn7SKsfOQx9oYeicL6kHj4EzzGu6A9CqeQFfwjU8W
NlvY1Kqx//eTAKlxBLOLq/1QWE8vcASi7HDwBPW88fNOchgHU/Me6tNJTl92dm+w
7gohCVYUCv3YHJnXIwd+NMQtzoTnyiyye4rI6JbAlyqZy+fiSHwEBKWh8A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:15 2025 by rpki-client