Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa
File:                     AS263719.roa (raw, json)
Hash identifier:          FMFxsH4WiqIBUZxYT1epF23IRDaEmaXcFqiFXB0TQbA=
Subject key identifier:   95:CE:74:12:35:11:5D:3D:2E:E7:7F:11:AA:B8:20:97:D2:48:73:39
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       16FBB05E4ED40068BBC28E289EDA59A586135D01
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa
Signing time:             Tue 04 Feb 2025 18:19:59 +0000
ROA not before:           Tue 04 Feb 2025 18:14:59 +0000
ROA not after:            Tue 03 Feb 2026 18:19:59 +0000
asID:                     263719
IP address blocks:        2800:680:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:b0:5e:4e:d4:00:68:bb:c2:8e:28:9e:da:59:a5:86:13:5d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Feb  4 18:14:59 2025 GMT
            Not After : Feb  3 18:19:59 2026 GMT
        Subject: CN=95CE741235115D3D2EE77F11AAB82097D2487339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:45:c7:92:f6:e2:06:8c:d5:5a:36:2e:6b:
                    84:c5:78:da:c8:ba:78:25:9e:03:e2:9e:d1:85:b4:
                    20:6a:f3:d8:cf:fe:e1:0e:c8:6a:0f:2c:56:49:dc:
                    11:94:00:56:0d:77:56:dc:e0:fc:40:c0:60:3a:5c:
                    53:cd:5a:53:04:d0:e6:90:05:99:44:6a:32:56:9f:
                    3e:9e:9f:19:78:5d:cb:10:e5:ab:92:f1:27:61:bf:
                    0a:75:6f:ec:b3:70:1d:73:45:20:79:11:de:b0:f5:
                    cc:f1:83:74:39:d2:fe:ec:31:42:06:1e:dd:c1:c5:
                    c3:fd:f9:ab:04:c3:f0:ca:b9:0f:58:82:61:51:2f:
                    a8:27:a4:76:df:95:2c:ea:1f:7b:6f:be:9b:ad:85:
                    e0:f5:d2:92:05:e4:7a:b5:93:3e:98:55:62:0a:9f:
                    b0:57:89:04:34:93:f4:4b:03:6d:3b:f2:f0:d3:83:
                    9b:f7:20:c9:59:92:e0:e7:6e:7d:7a:86:9a:79:b9:
                    fb:9b:5d:a7:1f:2d:f4:a2:7c:98:d3:5d:eb:fe:ad:
                    29:d6:da:c2:00:00:90:b3:f9:9c:db:a2:b6:e9:8b:
                    4f:6c:24:18:54:6d:ea:ef:88:e0:77:0c:36:cd:cc:
                    9a:50:c5:55:0f:d2:b7:1f:b4:ba:a4:f7:f0:c0:6d:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:74:12:35:11:5D:3D:2E:E7:7F:11:AA:B8:20:97:D2:48:73:39
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:680:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:b1:a1:42:4e:6c:78:35:9f:2c:35:f7:58:a1:64:10:85:
         c4:74:1e:92:ca:ff:4e:bb:7d:6b:73:1a:56:ee:9b:6c:f4:83:
         2e:60:08:6a:65:d0:c9:93:15:39:9e:1c:af:8d:d4:50:94:48:
         6a:a0:4f:c0:5d:ec:41:5d:c0:71:6d:59:25:60:8c:0b:58:40:
         ed:07:13:7f:4b:8b:52:d3:61:e1:73:9f:3f:21:ab:78:c7:d7:
         16:10:7a:de:cb:e4:f5:32:c0:fa:d7:0b:df:7d:7a:79:c0:a4:
         b0:97:97:54:45:80:09:c9:0e:be:5b:38:9a:b3:68:41:ee:b8:
         45:d5:a8:ef:b5:5b:9c:cd:d0:13:26:79:55:63:98:a0:68:6f:
         4e:9f:c6:6b:82:d8:4d:1f:15:07:c8:fa:44:00:c1:ad:62:bc:
         2f:36:39:fa:0c:3c:8f:26:c9:e9:96:c3:c2:97:d5:07:96:77:
         7e:49:65:96:54:c4:c2:51:95:7a:24:d2:4d:b9:d0:dc:f9:62:
         52:b1:f7:a5:5b:03:7d:59:3f:31:2d:4a:61:d4:e1:db:de:d5:
         f3:d8:12:55:2c:e9:d8:20:2a:b0:6b:62:30:18:51:1c:83:fe:
         d0:47:28:a2:37:fa:fa:f9:89:68:2c:5d:32:bf:c9:f1:0a:44:
         d3:e7:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:35 2025 by rpki-client