Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDF5D97320ECF14A4C47ACAADEB912B933B38C6CF32DA99B6D04F13653E963/0/323830313a31343a643830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31343a643830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          HY8MvnypEgbx5PcLZ1n8HYPZkqlpNVFi/Z4ZAiwKl7c=
Subject key identifier:   6F:25:EC:98:6F:B3:5B:99:45:27:23:5F:37:11:AE:DE:23:B3:F1:25
Certificate issuer:       /CN=049BB2DE2E98AF780BDD0D24066D6E63308060CB
Certificate serial:       16B15031D72819C9C2DA6B549C1347472680B2F5
Authority key identifier: 04:9B:B2:DE:2E:98:AF:78:0B:DD:0D:24:06:6D:6E:63:30:80:60:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/049BB2DE2E98AF780BDD0D24066D6E63308060CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DEDF5D97320ECF14A4C47ACAADEB912B933B38C6CF32DA99B6D04F13653E963/0/323830313a31343a643830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:04:24 +0000
ROA not before:           Tue 04 Feb 2025 17:59:24 +0000
ROA not after:            Tue 03 Feb 2026 18:04:24 +0000
asID:                     19429
IP address blocks:        2801:14:d800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:50:31:d7:28:19:c9:c2:da:6b:54:9c:13:47:47:26:80:b2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049BB2DE2E98AF780BDD0D24066D6E63308060CB
        Validity
            Not Before: Feb  4 17:59:24 2025 GMT
            Not After : Feb  3 18:04:24 2026 GMT
        Subject: CN=6F25EC986FB35B994527235F3711AEDE23B3F125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:e4:2d:09:fc:50:2d:83:54:d4:eb:9c:ae:
                    47:a5:2e:5c:46:51:00:6e:0c:5a:5c:a3:2b:26:cc:
                    aa:b0:99:41:4c:1b:9a:d9:61:7e:6e:0c:26:d6:9f:
                    7b:e5:9a:cf:f3:47:ce:a3:18:ad:e3:df:07:60:b1:
                    a4:99:fd:fd:62:57:5b:2b:19:d6:3a:a8:39:1d:19:
                    1c:08:64:0f:eb:b9:b2:72:69:76:47:8b:b6:52:25:
                    ee:f6:11:e7:59:3d:24:42:ac:39:a9:46:a9:66:73:
                    90:c7:80:54:3a:99:c0:d8:fe:42:aa:2a:c4:ec:77:
                    a9:ed:d4:dc:6c:26:50:34:99:92:21:01:19:f1:2d:
                    8f:57:63:21:fb:70:25:58:86:5c:65:22:2a:c5:b7:
                    6c:92:45:88:cc:0e:89:80:d9:f1:53:11:78:be:9b:
                    1d:f5:e8:dd:68:87:28:33:cc:9a:3d:e9:b2:e2:20:
                    0d:12:98:ee:cc:f4:95:d7:ef:5a:bb:91:4b:e5:2c:
                    c1:3c:42:04:f0:f7:f1:df:01:2d:b5:a5:4f:5c:87:
                    81:ee:dd:95:a5:9b:d7:60:dd:80:97:42:c5:a0:38:
                    cb:76:3b:7d:8c:76:9f:7f:a1:f6:ac:26:a5:f1:73:
                    44:35:57:6f:28:94:53:dc:df:6f:89:a6:e3:4c:ce:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:EC:98:6F:B3:5B:99:45:27:23:5F:37:11:AE:DE:23:B3:F1:25
            X509v3 Authority Key Identifier:
                keyid:04:9B:B2:DE:2E:98:AF:78:0B:DD:0D:24:06:6D:6E:63:30:80:60:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDF5D97320ECF14A4C47ACAADEB912B933B38C6CF32DA99B6D04F13653E963/0/049BB2DE2E98AF780BDD0D24066D6E63308060CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/049BB2DE2E98AF780BDD0D24066D6E63308060CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDF5D97320ECF14A4C47ACAADEB912B933B38C6CF32DA99B6D04F13653E963/0/323830313a31343a643830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:60:0a:78:68:57:c3:b5:c3:bd:dc:99:b3:f7:22:7d:a5:71:
         01:7c:d5:f0:5d:64:6d:b4:4e:8d:2e:ec:3d:d2:eb:ab:32:0a:
         b8:1b:6f:5f:04:5d:b4:fc:21:67:4f:ff:16:d2:37:9e:c6:bd:
         be:ca:11:8f:ac:3e:ef:61:39:cd:97:7f:93:38:91:ea:82:59:
         69:9e:1f:13:37:9d:96:26:81:10:c8:bc:8f:c4:3b:99:e7:fc:
         67:67:c4:0b:39:6c:44:85:0a:56:37:98:2e:cf:73:c3:34:70:
         65:1b:81:08:11:6f:02:45:00:6e:75:14:c2:ea:57:b3:6e:1e:
         eb:63:be:6b:4f:73:ce:6c:c0:9b:96:af:95:d7:36:aa:bd:80:
         68:8a:b0:5b:3f:8d:d3:e4:f7:b9:96:9a:4b:79:be:c2:8d:a5:
         40:91:68:9d:10:e9:3b:d0:c3:8f:27:45:95:1e:03:4a:45:72:
         38:8b:11:fb:12:f8:b0:b9:57:1b:35:39:65:b9:91:cd:8e:fe:
         46:d7:ab:6b:de:cd:2b:f5:cc:2f:34:a0:dc:37:86:e1:08:27:
         2d:f9:4b:ea:bb:dd:29:2b:d8:1c:e7:91:40:a4:23:68:b1:98:
         84:5c:a3:18:b6:a8:94:a2:a6:e9:be:65:f2:f0:04:65:a3:9d:
         35:75:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:23:56 2025 by rpki-client