Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          4ERLSGPWl1170b7SnXvz7xOTM9fqn29fVT9Y76Fht3M=
Subject key identifier:   B5:CB:3A:C0:1E:AF:8C:87:FE:D0:68:54:15:74:1C:8D:3B:B9:5F:04
Certificate issuer:       /CN=506A072B535072F6E8F13CEF7E5B9B3E4E5891E6
Certificate serial:       16E7152E197D7B12C2509BE6BEB872D7EDF5520D
Authority key identifier: 50:6A:07:2B:53:50:72:F6:E8:F1:3C:EF:7E:5B:9B:3E:4E:58:91:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:22:36 +0000
ROA not before:           Tue 04 Feb 2025 18:17:36 +0000
ROA not after:            Tue 03 Feb 2026 18:22:36 +0000
asID:                     14080
IP address blocks:        2801:13:6800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e7:15:2e:19:7d:7b:12:c2:50:9b:e6:be:b8:72:d7:ed:f5:52:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506A072B535072F6E8F13CEF7E5B9B3E4E5891E6
        Validity
            Not Before: Feb  4 18:17:36 2025 GMT
            Not After : Feb  3 18:22:36 2026 GMT
        Subject: CN=B5CB3AC01EAF8C87FED0685415741C8D3BB95F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:9c:ee:a9:8e:c4:37:e7:4f:1d:96:23:80:
                    4f:29:43:23:8f:dc:d0:a2:33:aa:ed:c8:b5:8c:2a:
                    27:ea:21:09:51:5e:bb:3c:bb:81:13:81:d2:1e:0a:
                    04:4c:2e:62:e2:9e:ee:de:33:db:5f:da:00:12:57:
                    ba:95:8e:79:f1:96:c9:e3:54:2b:fa:54:63:0a:d5:
                    79:30:c7:28:d5:50:97:0c:e5:4a:5f:72:69:74:54:
                    0c:56:fe:0a:20:50:34:05:5d:ed:4f:bd:51:1f:e3:
                    ed:6d:19:a4:21:27:4a:7d:d0:78:07:d0:e0:ab:60:
                    af:40:7c:89:45:04:33:b6:f0:c5:1b:e6:a5:d5:76:
                    ea:f9:ad:82:0b:42:cd:fe:ad:c3:c7:4d:1c:1f:a2:
                    28:ef:6c:12:68:48:ac:c9:02:b8:ac:4d:3c:8e:dd:
                    6d:9a:c8:46:ef:98:72:9f:ef:2b:d4:62:76:b4:fd:
                    6b:80:0b:5b:70:71:c7:96:e3:b6:9a:22:eb:4e:16:
                    6c:ee:b5:44:b4:69:33:1b:e3:15:9f:59:cb:cf:16:
                    b1:73:0d:99:4d:a2:25:13:53:41:96:94:c6:76:57:
                    7d:0c:36:96:ca:7a:d3:ad:a7:87:df:a8:d1:45:83:
                    16:b2:27:86:e0:71:32:94:1d:ed:c5:71:dd:76:c2:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:3A:C0:1E:AF:8C:87:FE:D0:68:54:15:74:1C:8D:3B:B9:5F:04
            X509v3 Authority Key Identifier:
                keyid:50:6A:07:2B:53:50:72:F6:E8:F1:3C:EF:7E:5B:9B:3E:4E:58:91:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:6a:7d:55:d7:4e:96:e4:4d:db:77:67:46:a0:d1:94:ec:
         d9:24:b1:8b:d1:d7:60:d4:cc:b3:81:db:21:05:4c:e1:0f:9e:
         1f:31:7d:bf:94:2e:49:83:a7:17:2b:53:08:af:34:34:00:aa:
         a6:7e:76:22:b7:6f:33:53:f3:26:b0:71:65:50:72:ca:04:ce:
         90:2a:44:2d:ff:0d:6c:07:46:1a:31:c4:7d:ae:70:fb:7e:e5:
         f9:6c:21:1b:e9:fe:90:c4:8e:f7:0a:26:cd:ef:20:3c:f4:a4:
         3e:ab:2d:84:1a:db:dc:a8:10:b5:54:a6:35:11:ab:c6:9e:fa:
         d3:fb:24:03:5f:27:c4:8b:ae:16:44:48:08:60:5f:67:56:3f:
         c7:b9:ca:d1:30:de:9b:d9:43:9c:6a:71:b4:c3:1f:fe:ce:e3:
         70:9f:5c:6b:eb:58:e9:d5:eb:67:16:e0:81:8b:fd:b6:96:65:
         49:3f:f0:fb:5a:cd:cc:a8:2a:49:8f:f0:be:70:2e:fd:db:96:
         a7:99:6b:50:0b:ab:ab:0b:c6:e5:22:f9:12:2b:c8:71:0f:bc:
         db:ee:ed:55:e7:87:c5:7c:a4:b6:33:40:3e:41:70:0f:3b:c6:
         b3:81:1a:60:af:79:f8:52:47:58:84:bb:ba:10:6a:1f:df:fb:
         26:6a:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:35 2025 by rpki-client