Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa
File:                     323830363a3361613a3a2f33322d3438203d3e20323635363237.roa (raw, json)
Hash identifier:          NE+KCGt1/5ZyQLSud9MU/+6h+9AiXEWoLhdRbOlKPEU=
Subject key identifier:   EE:6C:25:FF:3D:D3:A5:DC:39:0A:F3:7F:1C:59:20:AB:63:17:A9:22
Certificate issuer:       /CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
Certificate serial:       0E4230C45129DB03D24055796DCAB3D12651F00C
Authority key identifier: 0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa
Signing time:             Tue 04 Feb 2025 18:10:36 +0000
ROA not before:           Tue 04 Feb 2025 18:05:36 +0000
ROA not after:            Tue 03 Feb 2026 18:10:36 +0000
asID:                     265627
IP address blocks:        2806:3aa::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:42:30:c4:51:29:db:03:d2:40:55:79:6d:ca:b3:d1:26:51:f0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
        Validity
            Not Before: Feb  4 18:05:36 2025 GMT
            Not After : Feb  3 18:10:36 2026 GMT
        Subject: CN=EE6C25FF3DD3A5DC390AF37F1C5920AB6317A922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:06:98:af:6a:42:00:dc:30:a2:dd:df:2f:
                    4c:17:ea:44:03:dc:8e:4f:bd:53:79:ea:94:40:da:
                    d3:48:34:34:2d:32:9c:b4:40:4f:68:cf:55:1b:bc:
                    82:d1:3e:7b:48:a2:0b:37:f5:0a:e3:59:12:90:73:
                    11:c1:03:82:58:0e:fb:91:ea:e4:0f:c0:91:1b:79:
                    a7:e3:db:4a:5a:66:a1:d7:e6:aa:06:28:e7:e0:7f:
                    8f:f6:95:f4:57:4a:9e:59:3e:4f:35:34:65:0e:1a:
                    71:4b:50:db:66:bc:9d:e1:cf:32:c8:6b:94:0a:75:
                    00:dd:ee:7d:fb:90:fa:10:1e:8f:9e:65:bf:02:69:
                    3c:bd:dc:d4:bb:dc:87:54:d7:e1:27:47:f2:7e:48:
                    bb:af:80:0d:b3:24:4a:6c:50:18:3c:f1:f6:50:44:
                    a0:2b:96:38:57:b2:43:bb:80:89:9d:50:de:a8:3d:
                    8a:50:a4:81:f8:68:3d:44:38:16:ce:09:38:eb:2f:
                    0c:b8:de:5b:2b:e0:c4:61:06:1f:da:a2:da:d6:9d:
                    6a:c9:d8:f9:0b:e3:8d:b3:17:da:b6:76:db:de:6e:
                    f4:22:d1:58:61:bf:e5:50:59:86:07:51:11:bd:bf:
                    9b:a9:a3:4d:c4:a1:bb:07:25:ab:de:d5:6f:fc:3b:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:25:FF:3D:D3:A5:DC:39:0A:F3:7F:1C:59:20:AB:63:17:A9:22
            X509v3 Authority Key Identifier:
                keyid:0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/323830363a3361613a3a2f33322d3438203d3e20323635363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3aa::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:60:4a:ec:80:d1:cf:d8:17:42:8d:7b:65:55:bf:54:44:
         b0:a3:8d:15:ec:96:ed:19:48:ce:3a:b4:d0:35:ea:47:55:e9:
         a7:23:24:23:b6:a3:0b:05:3f:03:58:54:e0:a2:65:73:10:91:
         70:14:07:5f:a0:01:81:26:9c:09:5d:bf:dd:63:f4:da:1d:93:
         ef:69:e7:33:dd:35:c0:d8:1a:0d:57:ba:6b:b3:41:7f:17:3f:
         59:7c:05:98:32:b6:a0:70:25:4a:09:ba:d0:b2:0d:2e:19:84:
         52:2b:c9:b7:cd:03:59:89:ba:a2:02:20:c4:ed:b4:09:bc:1b:
         7d:d4:85:a4:26:35:6e:e3:97:73:5a:cc:a0:97:63:46:53:82:
         f6:b6:d1:4c:92:0d:5f:65:37:34:66:b5:7b:27:5d:6c:63:65:
         96:a7:81:83:d6:ee:9e:7a:04:63:50:08:30:79:41:93:87:ce:
         cb:20:25:73:05:a6:ef:62:69:81:0b:8d:52:02:42:70:79:13:
         b7:c2:96:06:71:32:41:97:b1:d3:2e:14:c9:2b:b7:d5:0a:b2:
         73:2f:79:a6:56:00:8b:92:03:e8:4e:81:c3:cb:94:6d:f1:5d:
         71:d0:56:db:24:6d:2f:51:2f:2d:ca:e3:63:ad:9e:f1:22:04:
         53:41:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:45 2025 by rpki-client