Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          rDiWn0EemnMBcMLRaBd6OrDNcpCryt5od67u5CxlVHY=
Subject key identifier:   06:CB:64:37:2E:57:10:04:CD:DB:31:1E:91:9E:AF:81:26:54:F6:75
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       468B640661DE66CA83694BAFDAAA849FE4A99089
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:31 +0000
ROA not before:           Tue 04 Feb 2025 17:59:31 +0000
ROA not after:            Tue 03 Feb 2026 18:04:31 +0000
asID:                     264824
IP address blocks:        2803:e360:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8b:64:06:61:de:66:ca:83:69:4b:af:da:aa:84:9f:e4:a9:90:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:31 2025 GMT
            Not After : Feb  3 18:04:31 2026 GMT
        Subject: CN=06CB64372E571004CDDB311E919EAF812654F675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:e7:5b:ab:d5:1c:c4:b6:01:ce:0f:a1:0c:
                    58:6e:fd:29:e6:cd:a9:44:ad:df:f5:e0:ca:f2:db:
                    13:9a:0f:b3:94:47:20:50:0b:9a:ea:e8:f9:ee:c2:
                    c2:9a:a5:7e:41:fd:8a:5c:10:a1:bd:6e:32:88:da:
                    a5:57:ae:a4:69:66:44:9b:9d:f7:ea:48:7a:3a:b7:
                    db:f6:64:fa:1d:a0:bd:a8:3b:97:13:89:e6:58:44:
                    ad:ca:bd:7c:6a:3e:ad:44:dc:03:d1:6d:dc:bf:64:
                    2a:db:e6:a7:dd:60:33:b3:22:87:38:ff:96:5f:0b:
                    e0:00:b3:09:3a:6d:a1:cb:ed:c8:8f:8d:34:ae:2e:
                    b7:aa:cb:dc:3d:20:a5:ea:5f:6a:61:a3:c6:9d:07:
                    c0:fb:73:91:7a:db:b1:b2:f9:91:b2:10:46:c3:77:
                    1a:ce:b0:b0:6e:50:6e:58:68:d6:05:07:87:b6:75:
                    53:7c:4c:ab:f9:e2:9b:21:a9:18:85:9c:1f:4b:7f:
                    6a:40:9e:f5:af:b5:72:c4:f7:76:a8:0c:25:1e:bf:
                    6f:98:e7:bd:ad:a4:69:6c:9e:4b:e2:c1:f5:d9:9c:
                    e7:38:9f:db:48:07:74:51:1c:91:a3:19:27:95:e9:
                    f0:0d:2c:8d:76:cd:ee:6d:b2:40:d7:c9:b3:2c:35:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:64:37:2E:57:10:04:CD:DB:31:1E:91:9E:AF:81:26:54:F6:75
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:f1:53:5b:e6:bd:48:9c:84:fb:e0:7f:ef:22:7b:1b:ab:
         b0:3e:38:74:bd:ca:57:b8:a2:2e:00:80:70:8c:fa:27:f4:3d:
         79:64:60:8c:8e:53:76:60:9e:4c:de:22:1d:42:fe:88:15:78:
         fb:48:2e:e8:05:1a:f0:17:7c:fe:c4:b3:f0:b7:26:db:36:c9:
         cc:54:36:e1:79:bd:0f:db:b2:4f:a4:48:53:0c:b2:b3:5e:62:
         a2:67:7a:ce:b6:4c:0d:b1:d0:c9:e9:10:2e:38:37:37:3d:d9:
         d2:20:ae:52:77:d5:d9:35:1e:d6:7b:b9:e5:35:81:05:0e:63:
         af:b9:ae:d8:27:13:ce:e0:de:80:03:e6:bc:11:a4:b6:2a:56:
         d9:2d:48:01:3c:16:9a:ab:44:96:bd:70:43:df:f1:d1:13:9e:
         4e:ea:7d:b6:10:a7:a1:55:5f:9a:3b:f8:51:ad:8e:c7:ff:24:
         9b:4f:bb:2c:9a:c0:6a:09:9d:5f:3d:d2:7a:87:63:66:db:0c:
         5f:5f:36:78:14:5e:75:66:b7:87:31:c0:32:13:12:43:83:bd:
         85:79:8d:9d:b3:fc:fe:f0:e7:4f:8b:55:03:6f:c2:41:22:22:
         b1:a6:a0:85:e1:71:dc:93:e1:07:6c:55:dc:b1:84:67:b5:7b:
         6d:24:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:53:09 2025 by rpki-client