Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          3tMjG2Q5S7+akaK9QSwRXO+0zyp6mY9cGFcPvs8RQ5Y=
Subject key identifier:   5E:B5:BA:0D:AC:20:A2:95:ED:CF:D5:BC:15:64:D7:8A:06:F9:47:A1
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       31B71441C6A194F00D29BBF7D836C9CEA0F74F84
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:57 +0000
ROA not before:           Tue 04 Feb 2025 19:58:57 +0000
ROA not after:            Tue 03 Feb 2026 20:03:57 +0000
asID:                     22927
IP address blocks:        2800:a00:de80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b7:14:41:c6:a1:94:f0:0d:29:bb:f7:d8:36:c9:ce:a0:f7:4f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:57 2025 GMT
            Not After : Feb  3 20:03:57 2026 GMT
        Subject: CN=5EB5BA0DAC20A295EDCFD5BC1564D78A06F947A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:ab:2b:e7:17:6a:ec:5f:75:64:6d:80:48:
                    97:e1:34:94:48:cc:45:31:91:60:86:70:6a:02:7b:
                    28:be:f4:3a:b3:44:2d:51:14:86:a6:40:a7:ac:1a:
                    16:69:2a:ed:d9:c2:be:3d:a6:a3:b4:20:65:0a:97:
                    c0:36:99:66:e9:bf:86:96:73:4b:41:c1:74:bb:e8:
                    1a:21:d0:b6:91:be:3e:03:06:28:cc:fd:2e:a2:c7:
                    04:2e:dd:c0:a3:1f:ff:ed:21:fe:86:c9:36:d5:f4:
                    0b:96:73:f5:ed:ea:54:9f:9c:86:66:26:49:cf:d2:
                    b5:9f:90:e8:2c:7f:59:3d:3f:96:e6:c0:0e:47:b7:
                    29:52:82:75:9c:db:0a:c8:fd:9a:d0:70:7f:22:4d:
                    07:76:e7:60:62:34:0b:7a:97:3e:13:b3:62:13:b4:
                    16:8f:bd:c1:58:5e:4e:9d:2c:9b:a6:7e:98:5f:85:
                    f1:25:e4:9c:1e:94:65:e3:16:90:95:b4:80:98:bd:
                    a8:12:49:d9:f9:6f:06:3d:d2:d1:12:17:45:66:b6:
                    4d:da:ed:45:d2:51:08:5a:6c:70:54:19:21:21:f0:
                    33:f1:06:ed:a5:fe:c8:b9:96:dd:49:04:99:31:de:
                    40:85:17:e8:4d:1b:56:1f:3e:41:3d:9d:0e:cf:13:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:BA:0D:AC:20:A2:95:ED:CF:D5:BC:15:64:D7:8A:06:F9:47:A1
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:de80::/41

    Signature Algorithm: sha256WithRSAEncryption
         92:f1:32:9d:98:7d:ba:73:16:35:33:7c:0f:af:90:84:7b:e4:
         88:36:59:4c:b3:5e:79:91:e8:7a:fa:0f:c2:2e:5d:be:64:99:
         7c:57:ca:f0:11:89:4a:b0:3a:76:ea:ea:98:7e:26:ff:37:08:
         e1:15:5a:78:0a:7f:d1:3b:b7:d6:6f:0c:50:fa:7a:6d:a9:2c:
         44:58:d5:af:96:f7:4a:41:40:28:31:da:4d:7d:8c:aa:be:ef:
         d0:7d:1f:b7:ba:eb:3b:43:33:b2:9f:05:52:4a:bb:1f:9d:47:
         84:a3:54:bc:dd:e2:cd:e4:b8:ae:aa:25:09:1d:44:4e:29:45:
         7f:d2:af:da:98:d3:3f:89:f0:fd:25:96:3e:b6:4d:76:22:4a:
         9e:04:a0:c2:2f:7d:c6:10:60:09:04:c5:11:b3:70:45:9d:f2:
         dc:a2:0e:89:48:55:25:cd:07:59:3c:f3:eb:25:de:94:7d:e3:
         83:1c:37:3a:26:c7:48:67:ec:5d:63:53:11:c6:ad:7d:a3:aa:
         7a:60:1c:84:5f:ab:bc:fb:71:3f:58:f9:08:52:24:7c:77:ac:
         2f:12:e8:5d:ec:23:d2:7d:09:6e:0e:67:28:ca:33:21:dc:c5:
         3e:92:3e:9d:ff:61:a5:ca:3c:f2:d5:36:16:aa:d8:10:bf:57:
         f7:f0:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:18 2025 by rpki-client