Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          35F+ZdhV2+xbBW09Nn5fY74EekiTBp/KSSHi6pkRxlI=
Subject key identifier:   50:06:B2:7F:24:36:75:5E:D0:76:F7:A8:8F:C2:3A:AA:2D:BF:FA:F7
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       5F4DFF11D2296A659FC316B13AD56BA814480358
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:28 +0000
ROA not before:           Tue 04 Feb 2025 17:59:28 +0000
ROA not after:            Tue 03 Feb 2026 18:04:28 +0000
asID:                     264824
IP address blocks:        2803:e360:c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4d:ff:11:d2:29:6a:65:9f:c3:16:b1:3a:d5:6b:a8:14:48:03:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:28 2025 GMT
            Not After : Feb  3 18:04:28 2026 GMT
        Subject: CN=5006B27F2436755ED076F7A88FC23AAA2DBFFAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:58:78:61:72:ac:10:cf:bb:c4:94:3d:6a:da:
                    6d:a0:6b:8f:0d:96:37:11:29:aa:70:52:30:01:16:
                    5d:6b:90:77:e5:66:c0:46:5a:cc:30:9d:cd:34:7f:
                    d9:b4:ce:b9:87:1a:0e:e4:17:58:78:e7:03:52:ad:
                    3b:9d:c5:4f:42:18:84:e5:1c:2d:65:65:76:cd:78:
                    c6:dd:b0:4b:09:fb:c9:79:69:29:8b:2b:7a:da:06:
                    2f:b2:59:c9:c7:76:28:5c:8b:0e:d7:a1:7b:c4:0f:
                    aa:66:5e:38:a8:0f:31:31:a4:83:ad:c5:bf:dc:66:
                    5f:23:11:0e:3f:84:b3:19:b3:81:50:4c:be:5c:b4:
                    4c:a5:e8:7a:f4:68:da:66:a0:63:92:53:0d:eb:c8:
                    e6:c2:fa:a9:97:8d:27:12:4d:eb:ba:eb:03:5a:8e:
                    bd:c6:d5:a8:23:a7:88:47:ae:5a:6e:2d:c1:a5:1b:
                    79:fc:7b:7a:eb:86:b4:af:54:ba:eb:5f:d9:63:79:
                    08:cb:28:49:6d:40:d9:aa:1f:1f:12:40:f0:1a:ca:
                    5b:f2:c0:b4:cd:9b:5f:80:a2:3d:70:93:86:d7:70:
                    58:91:e8:e2:76:24:15:dc:78:c9:04:d2:97:ee:1b:
                    09:51:2c:19:a0:6a:7f:5d:57:a7:92:a0:ce:a1:6a:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:B2:7F:24:36:75:5E:D0:76:F7:A8:8F:C2:3A:AA:2D:BF:FA:F7
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:00:30:1b:8d:e3:21:6c:45:a2:0d:20:71:ac:2a:89:0b:
         ca:95:c8:2b:b8:c7:11:2d:35:e9:80:8b:bb:c5:21:af:b5:88:
         6b:3b:a2:d8:2e:bf:6d:30:bc:53:db:15:14:0e:44:d7:8a:92:
         3e:6d:e2:8e:aa:30:d8:e0:d2:39:bd:f3:94:7e:43:85:3e:9b:
         f9:08:27:3a:32:e0:59:72:b4:fb:f0:d8:96:a6:6b:ae:2f:f8:
         20:48:24:22:10:f6:0b:74:b3:86:69:aa:4b:86:24:b5:50:9c:
         e4:40:3f:ff:92:4c:e2:c8:d7:92:41:cf:30:31:38:7c:ee:d1:
         a8:1a:e1:4b:14:54:ea:5a:c0:ff:4a:58:42:72:5e:3d:b5:70:
         21:2f:98:74:de:15:15:ec:40:cf:62:c5:18:82:66:dd:56:93:
         dc:66:00:1a:39:7b:dd:b4:e9:f6:98:be:df:6a:2b:d9:50:40:
         e0:97:1c:84:96:05:45:40:48:77:a3:5e:b3:c6:64:2c:86:91:
         26:3f:7e:12:ad:37:9e:86:a2:80:63:13:f5:56:60:7a:85:ba:
         57:31:82:c8:58:d7:d1:13:07:05:a3:9c:f9:d1:cb:c0:b4:59:
         10:b8:b2:fe:db:81:9b:27:f6:61:a4:8c:66:ca:36:42:0e:97:
         92:e3:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:51 2025 by rpki-client