Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa
File:                     323830303a3933373a3a2f33322d313236203d3e20323634373331.roa (raw, json)
Hash identifier:          K1q0OXLoa3i+uzbZ0oXwSTjMWlJwk5L3FlSFLpOWi4U=
Subject key identifier:   62:D2:4C:44:AF:66:48:41:8B:5B:DB:2C:E0:DD:7D:35:77:73:F3:EC
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       1665A417985A46EA00C902B29F57A8E3C241341A
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa
Signing time:             Tue 04 Feb 2025 18:20:18 +0000
ROA not before:           Tue 04 Feb 2025 18:15:18 +0000
ROA not after:            Tue 03 Feb 2026 18:20:18 +0000
asID:                     264731
IP address blocks:        2800:937::/32 maxlen: 126
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:65:a4:17:98:5a:46:ea:00:c9:02:b2:9f:57:a8:e3:c2:41:34:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Feb  4 18:15:18 2025 GMT
            Not After : Feb  3 18:20:18 2026 GMT
        Subject: CN=62D24C44AF6648418B5BDB2CE0DD7D357773F3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:19:40:94:00:60:8f:ec:44:19:c7:7f:33:
                    c1:6f:98:2a:23:10:49:56:f0:1d:29:9f:f6:f3:36:
                    ba:09:e1:b8:e2:c2:11:93:50:f4:85:f3:b2:ff:ee:
                    e9:44:0a:ff:5e:e6:65:ff:60:bd:40:03:0f:b1:95:
                    e4:e2:95:c4:fe:af:51:6b:5c:9f:1b:58:e5:c3:08:
                    76:8b:ea:5f:1c:f8:66:f0:38:15:31:6c:42:cd:9d:
                    a2:9a:6f:e2:db:e4:a5:2b:6f:ea:f1:84:68:03:8d:
                    ab:36:1f:a1:d0:40:4c:8b:83:d0:79:5a:4a:20:18:
                    b5:0e:ac:2f:92:a9:08:c0:b5:d8:af:2a:aa:5e:23:
                    2f:eb:4c:6f:32:5c:aa:a3:87:a2:fc:e6:fc:f0:44:
                    8f:3f:ba:96:7f:07:02:97:52:5a:fe:54:83:2b:02:
                    71:6a:16:1e:95:7a:9d:e8:9e:6a:e6:dc:37:c4:7b:
                    06:8c:12:6b:5f:79:97:bd:45:45:cc:2a:19:ba:1c:
                    8f:3a:6a:3a:78:44:80:fc:36:e5:ea:46:7b:ca:8b:
                    50:b0:d5:93:0b:ca:8a:98:72:f0:76:6a:44:e2:52:
                    99:2f:e2:fb:4f:1f:87:66:e0:fc:9f:8e:32:23:bf:
                    90:37:62:15:81:55:fc:80:26:ed:a6:7b:57:32:c4:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:4C:44:AF:66:48:41:8B:5B:DB:2C:E0:DD:7D:35:77:73:F3:EC
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:937::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:83:8a:2a:ac:49:90:f9:8f:d2:b2:25:f3:b4:e0:b3:08:
         4a:73:43:23:39:29:f6:2b:3c:54:b7:9a:ce:14:98:6f:4b:4f:
         00:dd:be:e6:59:ae:78:b5:f3:24:06:05:a1:b7:bf:80:fb:2b:
         04:e5:26:29:20:1c:cd:57:38:0a:d8:fc:dd:ca:72:07:85:da:
         23:95:11:cd:8a:8d:25:36:10:f9:79:2d:ed:b1:58:fa:95:28:
         47:94:ab:d1:d2:2d:85:1e:9b:8e:f0:6d:1f:b1:83:f3:35:b4:
         5a:62:27:02:04:7d:2a:98:74:2a:14:3d:37:23:ba:26:4a:28:
         7b:f8:3d:b1:de:fd:42:db:1b:69:a5:3d:c0:c4:01:89:c4:61:
         d2:e0:cc:15:ce:63:27:81:4b:56:fb:73:13:c7:a1:78:4a:59:
         b2:d6:9d:41:b6:27:33:cd:a5:e8:a1:6b:0b:81:1f:5a:0b:55:
         f4:02:91:b2:a5:f7:b3:48:88:be:2b:35:e7:db:9b:69:e6:69:
         4e:12:c7:dd:e6:4c:0a:97:03:87:81:dc:77:79:36:a3:ab:fb:
         74:64:23:3e:37:ce:89:c3:78:5c:56:34:7c:3e:85:4e:00:e7:
         0b:fd:b7:05:f4:54:84:fe:c3:41:36:8b:73:46:64:e0:79:c9:
         49:2a:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:28 2025 by rpki-client