Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          2U87UMyMr9gyWCK6jHbYfcBRXQ/3gRv3AuQ0oVKKxkY=
Subject key identifier:   F9:40:00:8C:E1:AD:AC:55:B5:A5:9D:DB:13:CA:75:DA:6A:31:6A:D2
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       3227FE069CF5DECB4C907555B24C88B620DBE669
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:05:38 +0000
ROA not before:           Tue 04 Feb 2025 18:00:38 +0000
ROA not after:            Tue 03 Feb 2026 18:05:38 +0000
asID:                     61468
IP address blocks:        2801:13:7000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:27:fe:06:9c:f5:de:cb:4c:90:75:55:b2:4c:88:b6:20:db:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Feb  4 18:00:38 2025 GMT
            Not After : Feb  3 18:05:38 2026 GMT
        Subject: CN=F940008CE1ADAC55B5A59DDB13CA75DA6A316AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:b5:c7:d3:b9:47:3b:99:22:55:a5:9a:9f:
                    36:c6:22:ac:94:12:95:14:ab:09:bd:1e:64:da:32:
                    10:ba:a3:e4:ca:e9:3a:59:82:cc:7e:c4:83:eb:aa:
                    0a:ca:e6:5e:1d:0c:1c:b4:3f:e6:4d:f2:9a:4c:1f:
                    87:ae:f3:ae:bd:dd:24:77:d8:93:1d:6f:e3:0a:52:
                    c4:51:9f:d0:f5:87:e9:60:b2:95:61:38:ef:cf:82:
                    d9:26:25:27:a1:85:d2:9e:4e:ba:94:fa:66:d7:db:
                    fc:04:65:8b:45:d1:3c:e2:25:b5:d5:6e:00:1a:ff:
                    0a:c1:ac:f1:3b:22:35:f5:7d:41:bf:b6:48:b7:98:
                    2f:e0:a0:0e:15:82:6e:c4:16:da:05:8f:4e:2d:82:
                    a7:1c:6c:f0:15:c1:5f:38:ab:f0:9e:e4:c5:83:7b:
                    01:1c:9c:70:3f:7c:81:d4:d9:75:cc:8b:e0:f6:9a:
                    ce:d2:5d:f3:fd:de:2c:f9:23:ba:39:e7:e6:e9:6f:
                    77:25:49:c5:65:30:0e:4f:50:9e:0d:82:0f:fa:93:
                    05:92:e4:fb:4c:af:aa:3e:54:68:51:93:5a:14:87:
                    09:cf:56:5d:fd:34:75:1f:53:28:27:99:83:be:4d:
                    53:f8:56:e7:3f:fe:1a:8f:4b:33:a4:31:05:96:42:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:00:8C:E1:AD:AC:55:B5:A5:9D:DB:13:CA:75:DA:6A:31:6A:D2
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:6e:dd:dd:b3:4a:a2:88:42:6d:2f:b5:32:a1:05:d1:05:
         7f:a2:28:97:2a:de:db:75:e4:fe:44:24:8d:df:8b:4e:72:4e:
         00:20:b0:65:b7:7c:81:22:96:05:a6:bd:f1:de:9d:c8:e6:1f:
         fc:08:21:b4:42:63:f0:45:75:db:ec:1a:16:3a:30:32:73:df:
         67:4c:10:8f:68:70:e5:49:10:c6:48:05:b1:2d:e2:c7:f6:b6:
         d0:c2:65:8d:49:ed:7b:b7:7e:85:0a:f8:df:0e:0e:9e:2f:d1:
         0c:f9:44:74:2f:94:f3:fc:c8:ed:3a:7e:72:8b:00:3e:77:8f:
         4e:9c:48:b1:11:27:ca:d2:25:5b:7e:d2:03:da:ac:fd:b3:e6:
         29:49:f9:5d:eb:d6:72:04:0f:94:a8:01:19:7e:74:90:0c:29:
         31:ac:6e:d8:6e:6a:83:37:cb:f4:96:bb:13:68:96:2b:55:17:
         c2:06:6f:4c:89:65:00:50:b6:06:85:3f:8e:00:ee:1f:01:a4:
         69:a5:73:50:f4:56:97:f5:81:4c:ae:45:48:fd:4d:e9:fe:ae:
         dd:cb:63:59:c7:71:b6:e2:1b:93:4f:71:ab:4a:d2:c0:33:92:
         03:97:51:32:30:8c:5f:ca:8f:4b:7d:5d:a2:62:92:57:80:57:
         5b:19:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:20 2025 by rpki-client