Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          xa8aDpPV0kIXyRmJz9AJ6KIMtWodYMJpUSypfvGYpzI=
Subject key identifier:   0C:EC:0C:5E:3D:CD:02:2B:BA:BD:6C:B5:07:33:36:9F:67:2E:28:7A
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       2DEC2974B315004BBEFD7EED163107D1C063E8E9
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:49 +0000
ROA not before:           Tue 04 Feb 2025 19:58:49 +0000
ROA not after:            Tue 03 Feb 2026 20:03:49 +0000
asID:                     22927
IP address blocks:        2800:a00:de00::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ec:29:74:b3:15:00:4b:be:fd:7e:ed:16:31:07:d1:c0:63:e8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:49 2025 GMT
            Not After : Feb  3 20:03:49 2026 GMT
        Subject: CN=0CEC0C5E3DCD022BBABD6CB50733369F672E287A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:20:95:9d:c0:a3:8d:09:34:cd:da:92:ff:
                    4e:88:49:58:9b:9d:59:93:20:f8:79:c2:f1:a0:b0:
                    75:fa:61:d6:71:74:d0:c4:5a:0e:22:cb:0f:ed:f1:
                    cd:ac:55:85:66:a0:bd:ab:35:8b:dc:1a:f7:31:25:
                    e8:19:19:64:ae:c3:4c:77:21:db:39:e2:e3:27:ae:
                    e6:d7:92:e0:90:51:dc:62:9f:01:17:46:59:b9:16:
                    c8:57:6f:1a:63:56:c0:2a:78:06:d6:b2:98:b9:a9:
                    69:1c:7f:55:dc:32:94:3a:0b:30:b2:2a:b9:ec:c9:
                    fe:64:2c:e1:f8:d2:ee:95:fe:b1:f4:c3:b0:6d:72:
                    f4:7d:2c:39:11:cb:c1:7a:66:45:e8:37:e2:25:99:
                    01:2e:d5:f2:f9:12:13:3d:15:39:73:0f:04:8e:0f:
                    8d:81:89:33:3d:1d:ba:3f:b2:53:46:0d:c7:c6:a4:
                    0e:cd:ec:43:f6:6c:8d:5a:16:3a:4a:43:b6:6b:50:
                    d5:58:92:a3:12:0a:3a:3b:69:10:a5:c6:d0:81:bd:
                    b1:fe:7c:60:b5:44:4a:2a:6d:5f:56:57:a5:1d:90:
                    92:77:8b:ba:9e:6b:1c:59:19:75:c9:27:5c:d1:a4:
                    9b:8e:62:97:c9:ab:4c:24:00:a9:e6:5a:fc:0d:a6:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EC:0C:5E:3D:CD:02:2B:BA:BD:6C:B5:07:33:36:9F:67:2E:28:7A
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:de00::/41

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:7c:30:8f:3b:de:fb:67:04:1f:89:20:a6:a4:4f:1c:ca:
         a7:51:64:79:3f:95:ee:c0:cb:b9:43:39:e6:f6:e3:b7:bd:77:
         6e:af:f9:cd:06:f3:e4:0c:97:da:67:64:a7:bf:a7:ad:6e:17:
         7c:d2:62:9b:a1:d8:01:35:d4:0c:a5:dd:2f:66:ef:ef:48:3b:
         dc:6f:b3:25:bd:f4:4a:e0:e3:1d:d0:f1:2a:ff:23:6c:3d:ee:
         fc:5c:00:6f:c8:37:d0:8d:58:3d:be:d1:52:f4:6c:12:91:ef:
         e2:3c:de:95:4d:cf:78:27:5d:28:96:f7:39:dd:ad:a7:d1:fb:
         a0:c3:31:b1:59:d0:5c:c7:6a:ff:fe:36:9d:b6:a4:3a:a9:64:
         f0:ff:bd:6a:9b:16:a8:dd:89:4a:9a:db:5c:b4:77:bc:2b:72:
         d5:f0:4b:93:7a:f0:6e:4a:4c:29:b5:d8:ce:88:6a:1a:ce:c0:
         f8:42:fb:ee:a9:28:83:2f:6a:5b:d1:71:f7:e6:74:e2:85:4b:
         22:a2:37:d2:38:e8:04:d8:1f:f2:78:75:7a:64:45:a4:bb:87:
         8e:5b:96:bb:03:32:3b:f5:9b:1c:93:9b:79:77:13:02:64:bb:
         12:79:52:45:28:59:f3:8e:b5:13:02:9f:73:e1:c8:c3:18:40:
         d3:8b:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:16 2025 by rpki-client