Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a363432303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          dIJnUN3fmauwFzQQLaZ0tIfkpsRioi6msxLUZdTeZ7o=
Subject key identifier:   6C:FB:03:8A:27:A2:48:42:31:02:3A:CF:70:D6:3C:D2:00:95:68:BB
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       6C1509B812637A428C0E0AE37216DCF428A42607
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:22:29 +0000
ROA not before:           Tue 04 Feb 2025 18:17:29 +0000
ROA not after:            Tue 03 Feb 2026 18:22:29 +0000
asID:                     52468
IP address blocks:        2803:6420::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:15:09:b8:12:63:7a:42:8c:0e:0a:e3:72:16:dc:f4:28:a4:26:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Feb  4 18:17:29 2025 GMT
            Not After : Feb  3 18:22:29 2026 GMT
        Subject: CN=6CFB038A27A2484231023ACF70D63CD2009568BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:99:0f:6f:16:0a:0c:a3:cc:46:ae:51:70:
                    c7:d2:94:5b:76:70:dc:c3:0f:d2:8e:02:77:b6:bc:
                    04:2e:a3:97:66:71:d1:09:c5:a5:5f:76:53:8c:27:
                    03:7b:67:42:12:fa:23:a2:6e:23:3a:88:0d:c5:14:
                    c9:89:48:4e:a1:41:d6:e2:fe:23:ea:c5:07:63:0d:
                    00:f4:97:54:34:01:4e:b6:43:58:4d:09:f0:3a:ed:
                    ca:05:c2:3e:c0:6b:83:1f:5d:1b:6e:5f:0a:99:2f:
                    8d:44:0a:df:ae:e7:04:7f:47:e5:33:22:3f:90:af:
                    33:dc:50:e2:14:11:b4:0c:49:e3:5b:7f:42:61:e2:
                    fb:75:a9:82:af:1d:73:2d:a4:6c:5a:7e:d7:37:c7:
                    8c:d0:01:22:30:fb:2b:c5:dc:bd:f8:f5:fd:74:99:
                    8a:fd:2f:53:b4:af:d4:3d:16:b8:97:7f:08:52:4f:
                    a6:f0:2c:b2:40:e9:0e:93:47:8f:b3:69:11:a3:c0:
                    4c:8d:61:99:17:d2:6d:a0:39:70:ce:73:ed:f0:d4:
                    46:04:e8:59:ce:0a:de:1c:7e:9d:1e:56:ec:aa:b6:
                    3a:bc:12:8e:b4:04:2c:01:43:dc:dc:65:21:9a:4f:
                    91:ed:ac:37:af:c0:66:61:fd:29:8b:9e:28:db:1e:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:03:8A:27:A2:48:42:31:02:3A:CF:70:D6:3C:D2:00:95:68:BB
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6420::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:6e:04:f3:45:ac:24:f3:96:4e:12:e0:97:ff:f9:28:11:
         52:ef:9b:92:5a:66:a6:37:fa:f0:89:97:5b:a4:cb:0b:fb:bf:
         5a:82:e0:36:47:a7:a7:00:6f:f1:f6:b6:0b:a1:b1:9d:17:8e:
         ca:3c:d3:c5:01:66:b8:19:1b:81:93:e6:ef:d2:aa:1d:e5:a4:
         4c:27:d2:3a:44:f8:69:aa:b0:d0:c9:13:45:5b:fc:f0:d8:59:
         3c:17:18:fe:85:f4:67:c2:8d:7a:d7:d6:f5:96:9c:a9:65:2b:
         e7:0b:ba:a1:1a:9d:78:69:5d:e7:03:d6:fc:05:b8:17:ac:61:
         70:7c:a4:5a:5e:2e:02:f4:d2:c6:f8:07:c4:1e:16:1f:35:76:
         69:ed:cd:8e:01:81:0f:bd:f5:a8:ec:96:36:8c:f3:5c:c8:17:
         bf:99:6d:37:73:54:d7:2b:64:76:af:cc:32:01:5b:8e:54:37:
         9e:c0:c8:7f:48:0d:80:dd:88:5d:8b:43:df:33:e3:3e:62:28:
         55:06:27:2d:72:a6:2d:8e:17:46:1d:4c:e9:db:2f:e3:b2:61:
         7d:6a:7d:6a:80:22:d2:01:f2:00:04:a8:a9:03:c3:08:98:db:
         e4:7a:4e:79:53:83:84:0b:df:3f:11:c6:e6:b3:1e:6f:1c:b8:
         c6:bd:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:47 2025 by rpki-client