Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa
File:                     323830303a6333303a3a2f33322d3430203d3e203532333631.roa (raw, json)
Hash identifier:          1O8zHAedbDLgDuLTtMTzdWWFpwwrbTMoQMbmQ3AEqQI=
Subject key identifier:   11:C9:8E:65:3D:32:71:97:99:6E:BC:B9:64:65:FD:2F:10:DA:E6:C4
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       16638CB8AB9EC9BB4DBDA190CDA511EAAA56D739
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa
Signing time:             Tue 04 Feb 2025 20:01:35 +0000
ROA not before:           Tue 04 Feb 2025 19:56:35 +0000
ROA not after:            Tue 03 Feb 2026 20:01:35 +0000
asID:                     52361
IP address blocks:        2800:c30::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:63:8c:b8:ab:9e:c9:bb:4d:bd:a1:90:cd:a5:11:ea:aa:56:d7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:35 2025 GMT
            Not After : Feb  3 20:01:35 2026 GMT
        Subject: CN=11C98E653D327197996EBCB96465FD2F10DAE6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:b9:95:db:10:89:37:c9:86:19:dc:2c:7e:
                    17:1c:12:3c:a2:2a:75:3f:01:c0:57:e1:d4:5d:0f:
                    20:8f:05:19:ec:14:f0:80:26:e3:be:91:e8:b3:c6:
                    64:0a:24:04:e0:c2:4d:de:27:f7:69:52:50:fe:2d:
                    fa:d6:10:de:b3:d2:ad:35:2c:ec:17:23:e3:8a:0a:
                    33:ce:8b:fa:34:94:07:f9:9b:81:54:cb:8d:5b:6a:
                    1e:53:0d:50:0e:16:ab:d2:0c:a6:d7:aa:6c:6f:7b:
                    47:47:b8:74:97:f2:c2:18:b5:7b:cc:6d:83:a2:b8:
                    aa:87:17:46:84:c1:35:74:ab:07:88:0b:67:b8:34:
                    04:40:66:b0:48:46:e6:80:51:0c:10:c1:88:f8:f6:
                    f6:33:e3:10:17:18:df:6e:3d:79:6f:3c:31:0a:9f:
                    9a:d2:5a:32:a6:6b:bf:2e:a4:11:82:1d:e4:1c:dd:
                    2b:97:26:60:db:1a:7b:77:a1:88:7f:54:09:73:d8:
                    41:e8:1d:a0:39:8f:91:cb:b2:6b:e1:e1:86:61:dc:
                    1d:91:31:b9:cf:9a:59:5f:99:12:a0:74:e5:ad:1e:
                    ec:dc:f8:6b:bc:38:b9:cd:4a:4a:6b:38:04:0c:14:
                    95:2e:d8:9f:f1:71:f8:cf:0f:f2:05:74:59:1a:81:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:8E:65:3D:32:71:97:99:6E:BC:B9:64:65:FD:2F:10:DA:E6:C4
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:45:5d:05:5b:b9:1f:7e:0f:00:70:87:68:77:d6:16:bb:
         bd:81:20:86:9b:88:a6:f6:c1:ef:83:1a:2a:fd:3b:d3:55:8e:
         5a:46:44:79:b8:d9:40:ed:8e:77:c1:cc:bd:b3:24:bc:d1:89:
         ba:0d:38:39:7a:11:30:9e:0b:3c:6b:2c:92:2b:0e:8c:3c:f2:
         84:ff:b2:2f:ed:a3:b9:48:be:8d:d4:23:17:23:9a:ab:b5:04:
         50:15:20:eb:ee:75:6c:61:ab:48:9a:e9:db:47:47:c3:a5:c8:
         ca:50:76:5f:30:ff:a7:d9:db:e6:d7:a5:d1:6b:96:f5:69:5b:
         03:bb:dc:b0:b7:5f:53:b6:ff:c9:8c:91:96:1f:6c:b3:35:a9:
         a3:ff:a5:87:bc:8a:38:99:45:0b:f6:8e:d8:fb:d3:8d:e2:8a:
         a1:0d:ad:04:0a:b2:81:00:93:45:74:f5:82:44:cb:43:b0:67:
         98:20:aa:1d:80:0e:77:22:bd:64:49:e2:41:b3:a4:4e:71:77:
         33:0f:52:a5:e0:6d:98:e0:8c:49:d0:85:cd:74:77:b0:1b:99:
         12:65:59:5b:72:6f:58:71:e9:0e:c5:11:11:cd:a3:2d:c4:8b:
         6c:73:de:47:8b:b0:02:e5:4f:7c:18:4f:6d:c0:ce:e3:4c:04:
         65:ac:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:31 2025 by rpki-client