Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          Glvu+NysaWF/EmWIT9PWX6R0WqAUM8IdGI2en8Kiswk=
Subject key identifier:   D6:B0:88:53:D1:11:0A:B9:B4:82:C8:8E:15:41:79:B2:B7:5A:66:66
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       23693B7D5E304958A02E344B6B4AA302CACD1A3F
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 20:02:39 +0000
ROA not before:           Tue 04 Feb 2025 19:57:39 +0000
ROA not after:            Tue 03 Feb 2026 20:02:39 +0000
asID:                     18747
IP address blocks:        2801:115:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:69:3b:7d:5e:30:49:58:a0:2e:34:4b:6b:4a:a3:02:ca:cd:1a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Feb  4 19:57:39 2025 GMT
            Not After : Feb  3 20:02:39 2026 GMT
        Subject: CN=D6B08853D1110AB9B482C88E154179B2B75A6666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:b3:b9:4d:b0:30:2c:54:9f:13:86:4f:7a:
                    d5:4c:b2:42:2a:02:c6:a9:e6:06:69:4a:4b:79:47:
                    4a:69:42:9c:5a:55:2b:3d:82:03:47:dd:e1:07:dd:
                    35:8d:5b:e2:7a:bd:2c:dd:03:14:07:0a:61:57:fc:
                    cb:bd:de:82:9d:dd:98:c0:73:2f:76:d1:1c:7f:be:
                    cd:67:f3:bc:31:d7:ea:6b:45:23:0d:3d:0f:20:6e:
                    0f:34:6f:fd:56:b4:58:ab:15:9e:28:7c:67:a9:55:
                    a3:06:cc:a6:76:19:fe:22:45:2f:0b:b5:9b:b8:63:
                    b0:78:b6:07:ac:0d:a9:94:5d:82:ca:37:f1:c1:75:
                    27:e4:05:69:41:b0:df:b9:be:a5:48:45:dc:5b:34:
                    f6:46:88:d2:4d:4c:15:fa:e2:22:58:fc:8f:96:df:
                    ca:97:b1:f4:74:61:9c:9c:fa:4a:2d:8f:28:ca:59:
                    43:f1:85:b0:3b:70:c5:12:15:c5:51:95:73:36:7a:
                    fb:6a:39:fb:13:41:d7:1d:b5:6d:1c:a9:fc:6a:7a:
                    bc:1d:f4:82:4c:20:0b:fb:ce:b6:0c:ad:42:db:73:
                    7d:d4:54:d1:ba:8e:ec:0b:2a:9a:e1:e2:03:5d:fd:
                    4d:37:93:ee:3b:9f:71:07:0f:15:aa:b8:9e:b4:d0:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:88:53:D1:11:0A:B9:B4:82:C8:8E:15:41:79:B2:B7:5A:66:66
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:e3:78:be:e2:b8:e6:29:db:dd:ea:48:fd:17:6a:d0:70:
         a5:03:09:73:08:96:cc:8c:84:ae:e8:91:d2:45:02:28:36:b0:
         0a:19:e8:f2:3d:42:91:1f:72:7a:56:60:fe:f2:1a:b8:09:63:
         30:f5:fb:eb:85:20:fa:2a:96:98:50:82:40:ac:c6:d2:df:fd:
         34:d5:f6:e3:d0:31:c7:17:40:f5:7d:df:a2:6f:81:e7:f9:0d:
         8a:81:bc:87:ef:aa:2b:8c:6e:ab:aa:c8:8d:6c:0e:e8:bf:c8:
         24:27:ca:46:ae:07:81:db:d8:0d:a2:9e:e6:e8:f7:da:d6:c6:
         da:58:63:13:0e:5b:1a:5c:df:50:20:8d:73:ba:16:3f:f5:49:
         48:ad:4b:31:c8:f9:8d:4c:e9:c4:cd:09:56:a5:6f:ec:11:82:
         04:ae:ab:0b:97:70:f5:36:a3:22:aa:3d:98:88:48:a9:f2:2b:
         62:64:2d:eb:9f:26:38:91:78:ad:19:55:84:b8:0b:ea:47:4e:
         b1:ed:15:1c:d5:24:ee:71:d3:e0:87:13:dd:99:e0:21:c1:b0:
         c2:6b:42:21:c0:4c:4f:1f:df:a0:25:24:3c:0a:33:7d:41:d7:
         c5:3c:c5:cc:3a:f1:c3:2c:55:2e:d7:10:8c:c1:63:41:b7:0d:
         70:6a:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:00:31 2025 by rpki-client