Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          QhdKZyVSzxHdNa5W8RkmICvZN7Un7Hf3LS/8h7DoSJ4=
Subject key identifier:   6E:7E:E6:BC:10:33:AB:81:C1:49:44:B9:9A:07:A3:7E:38:2C:5B:21
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       0E55742E2578143339F2A5460F1E7E7957DD693A
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:53:35 +0000
ROA not before:           Tue 04 Feb 2025 18:48:35 +0000
ROA not after:            Tue 03 Feb 2026 18:53:35 +0000
asID:                     61468
IP address blocks:        2801:16:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:55:74:2e:25:78:14:33:39:f2:a5:46:0f:1e:7e:79:57:dd:69:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Feb  4 18:48:35 2025 GMT
            Not After : Feb  3 18:53:35 2026 GMT
        Subject: CN=6E7EE6BC1033AB81C14944B99A07A37E382C5B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:26:87:cd:0f:d3:e9:1a:1e:80:1a:39:2b:
                    47:2e:49:df:0a:d4:c8:74:15:45:75:fe:3c:56:85:
                    42:ff:b6:de:87:f8:97:d6:12:a4:65:90:18:7a:fa:
                    63:be:b0:a2:6b:d8:b4:cf:36:63:27:43:fb:49:95:
                    b2:d9:ee:a2:93:16:9d:97:00:83:10:02:d4:db:64:
                    30:da:7b:f0:74:17:ef:b5:c5:21:92:b8:ae:ac:df:
                    40:1f:9f:95:f2:61:61:57:a5:28:b5:83:97:27:ef:
                    b8:8c:dd:e7:82:7c:82:59:57:7b:80:fd:e0:5d:46:
                    1b:7d:00:60:b1:47:1f:8f:51:e4:dc:f2:e9:af:33:
                    da:a2:d7:16:f9:75:1b:56:d8:98:a4:ab:f9:e2:6e:
                    9a:73:59:41:7a:8c:98:63:6b:d6:57:94:d9:60:8d:
                    3b:53:79:14:b0:49:c7:32:69:c0:85:23:ed:b8:b1:
                    6c:87:e8:fe:d8:cd:7b:aa:90:ba:e1:a9:9a:04:f0:
                    4f:18:0f:d4:08:6b:40:6d:d2:bc:e7:e9:e6:e4:9b:
                    35:97:cb:b9:87:1b:f3:c8:09:0f:3b:1b:77:95:a9:
                    c5:2b:fd:23:c1:ee:17:79:99:75:c5:7b:86:f2:2d:
                    09:a7:37:3e:05:f2:a0:6c:81:46:0e:45:75:ea:42:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:E6:BC:10:33:AB:81:C1:49:44:B9:9A:07:A3:7E:38:2C:5B:21
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:b5:90:6c:d2:0a:70:02:f5:09:6b:77:e9:10:a2:a2:a0:
         63:f1:03:38:97:e7:7e:c0:0b:08:43:ce:f2:69:6a:1e:41:c4:
         d2:ad:57:da:57:63:ca:d3:ad:15:54:71:04:6d:c2:35:b5:a8:
         94:bd:8a:57:d0:6c:c8:18:03:ed:6d:f1:ce:7d:8f:5f:d6:0f:
         cc:f0:1e:c9:35:1e:f9:e9:36:a2:2f:26:70:5d:3b:fa:2d:a6:
         dd:25:b3:e5:78:c8:0b:f7:82:1c:7e:fa:b7:c5:be:a3:82:3f:
         b8:44:43:62:fd:3b:c7:26:c3:e0:4c:21:b4:62:62:15:9d:33:
         35:2c:9f:29:ce:38:32:aa:ac:c4:7b:c0:29:72:c9:93:8a:30:
         51:96:f2:9a:43:ce:ac:97:60:cd:63:d5:36:c7:7e:07:8a:d0:
         22:ce:5c:5a:e7:96:43:a1:aa:b8:3c:93:1e:2e:e1:87:b5:03:
         db:a3:39:3d:eb:c4:d1:d6:56:15:3f:98:52:ba:f3:76:d5:8b:
         ca:91:64:81:d9:de:70:35:21:17:03:df:a6:28:10:a9:8e:37:
         8d:97:5a:c6:06:77:0e:fb:29:24:33:8e:dc:ce:89:e2:cc:ed:
         fd:a3:70:3c:2a:0f:29:5a:0c:10:34:ea:19:02:f6:00:1b:90:
         bb:a9:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:54 2025 by rpki-client