Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa
File:                     323830313a3165363a3a2f34382d3438203d3e20323731383236.roa (raw, json)
Hash identifier:          VKz7RLfYWfMqTOS75gGToIy1b26Xl0XgU7Z77xKzGLs=
Subject key identifier:   E1:A0:24:C6:4E:56:61:E9:68:17:3F:4A:37:3D:0E:D3:A3:DD:8D:28
Certificate issuer:       /CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Certificate serial:       66E0F8BCF297D70A62CE3F4F3C4240DCA68EA68A
Authority key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa
Signing time:             Tue 11 Feb 2025 14:20:00 +0000
ROA not before:           Tue 11 Feb 2025 14:15:00 +0000
ROA not after:            Tue 10 Feb 2026 14:20:00 +0000
asID:                     271826
IP address blocks:        2801:1e6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:f8:bc:f2:97:d7:0a:62:ce:3f:4f:3c:42:40:dc:a6:8e:a6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
        Validity
            Not Before: Feb 11 14:15:00 2025 GMT
            Not After : Feb 10 14:20:00 2026 GMT
        Subject: CN=E1A024C64E5661E968173F4A373D0ED3A3DD8D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:f9:3c:f2:99:3f:af:8c:74:12:b7:73:a9:
                    55:fb:c2:8c:f2:c2:5f:fe:0a:53:2c:09:9d:43:67:
                    6b:be:db:91:6f:79:5b:b7:24:d3:c4:99:2c:00:c3:
                    a2:23:ae:f9:4b:bd:c1:63:a5:c2:08:4c:ed:21:0d:
                    7e:36:f1:35:9c:45:25:a9:3b:9c:4f:3f:9c:30:1c:
                    cc:42:26:e9:a7:fb:1a:7a:a6:79:11:c1:d4:64:e2:
                    52:70:53:d1:56:8c:73:fb:30:ff:53:36:fe:74:ac:
                    d2:06:1b:47:43:9d:43:a1:e7:83:6f:3c:f6:9b:08:
                    3a:fe:28:73:21:75:5e:6c:03:7a:d9:d9:1a:61:9b:
                    e1:11:85:4e:ec:9b:35:f6:83:a6:45:28:b1:58:4e:
                    53:9c:27:00:6b:9d:66:f3:96:0e:a4:f2:77:b4:48:
                    20:85:59:ea:52:ec:3b:8d:60:0a:89:02:63:28:fc:
                    92:4a:4a:b1:13:39:7c:a3:1f:33:2e:8f:5b:af:c1:
                    16:cd:54:2f:af:86:00:50:75:3e:d5:ef:87:d6:f4:
                    c8:f6:7f:8b:17:1b:ae:24:95:19:2d:0d:b2:af:83:
                    c2:a0:01:2c:c2:cb:6e:65:64:cb:29:95:78:c0:a8:
                    c0:2c:08:4e:26:08:2a:0f:d4:ed:1f:fb:04:79:40:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:24:C6:4E:56:61:E9:68:17:3F:4A:37:3D:0E:D3:A3:DD:8D:28
            X509v3 Authority Key Identifier:
                keyid:A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:2a:53:74:9b:65:90:90:c6:fb:ff:14:e2:82:78:00:da:
         7c:89:b3:bf:9d:23:4b:a6:d3:f6:b9:60:22:20:01:55:1a:3b:
         ce:c0:ae:e0:36:9c:62:b8:1e:42:66:d4:29:5e:7c:60:2a:36:
         41:a9:f8:4e:df:2f:5f:bb:d3:4f:0d:bf:7a:d7:dc:6d:2e:3d:
         b5:df:31:bc:5f:3c:af:e1:d0:de:c9:45:93:d7:00:a4:57:b0:
         bb:00:54:50:18:02:97:08:ad:78:73:19:c5:e1:8e:c1:c3:d3:
         19:65:e7:12:0b:25:26:d4:dd:6e:94:a7:7e:61:c5:2d:22:51:
         6f:3e:09:46:95:a6:f6:32:d5:0f:59:44:74:fa:cb:71:c2:32:
         c5:70:88:b2:42:0e:f6:a9:66:cd:ad:75:df:f3:28:bd:bc:be:
         de:44:ad:17:26:51:5a:ce:18:6c:43:62:93:db:b8:98:64:21:
         66:69:8b:32:bf:01:48:f4:51:04:cf:f3:bf:c7:d0:54:dd:f5:
         10:45:84:88:e2:db:6d:a5:47:8e:a2:03:f1:a4:59:06:82:29:
         f3:fd:b6:58:34:4e:72:95:94:75:6f:02:f6:c2:94:73:df:b2:
         a3:1a:50:94:46:b6:9a:21:2c:57:74:5e:4d:3e:a8:05:25:98:
         e7:83:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:24 2025 by rpki-client