Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa
File:                     323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa (raw, json)
Hash identifier:          usB9yF3jty7cemk2DgoLPeZ35YAJDvbzeQA/2twBafM=
Subject key identifier:   C5:56:60:C9:ED:18:F9:3A:1B:46:EB:DD:C5:58:44:67:02:FE:1E:9A
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       732E1B5A2962DCF15BE41A54C87C6EAE69D9B742
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa
Signing time:             Tue 04 Feb 2025 18:16:09 +0000
ROA not before:           Tue 04 Feb 2025 18:11:09 +0000
ROA not after:            Tue 03 Feb 2026 18:16:09 +0000
asID:                     262212
IP address blocks:        2800:68:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2e:1b:5a:29:62:dc:f1:5b:e4:1a:54:c8:7c:6e:ae:69:d9:b7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Feb  4 18:11:09 2025 GMT
            Not After : Feb  3 18:16:09 2026 GMT
        Subject: CN=C55660C9ED18F93A1B46EBDDC558446702FE1E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:c0:00:f6:a2:d9:ed:e4:66:06:d5:23:12:
                    40:d7:b7:df:5e:91:2d:80:f5:07:20:9c:2b:75:75:
                    31:a0:54:fc:6a:6a:b8:c8:a7:9b:2e:d7:e6:08:6b:
                    6f:42:28:39:77:f9:1a:37:1a:fd:c2:18:d0:ca:37:
                    c3:a5:09:52:be:a2:44:89:ea:e1:f7:c5:b3:e7:dd:
                    b5:8f:bf:db:f8:15:47:86:cb:9b:ca:59:a7:ae:19:
                    4a:b4:de:6c:c9:48:d8:71:a2:d9:31:50:8f:3d:03:
                    c5:21:37:bc:f8:7c:51:55:bc:8f:fe:7e:91:d3:c4:
                    b9:2e:66:cc:60:35:ff:2e:4d:f1:c9:a8:ba:dc:4e:
                    d3:86:0e:b8:b0:90:14:45:5d:ae:45:ef:dd:09:4f:
                    7e:be:88:f0:65:e0:19:7e:ee:85:11:29:6d:74:73:
                    2d:24:cd:9d:1c:9f:a2:9f:d6:2b:b5:0d:08:63:37:
                    4f:34:e8:50:ea:35:38:9d:fd:f2:d7:3e:8e:af:10:
                    fb:df:4d:9b:f8:d9:1a:5a:c2:cb:93:ff:3c:4c:b5:
                    34:f3:01:d1:25:30:ea:d5:f4:b8:c7:f3:6b:4f:75:
                    51:1d:ac:3a:4a:80:e8:92:8c:ba:35:94:b7:6a:29:
                    de:7c:55:0f:32:80:06:12:66:44:65:17:f3:34:a9:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:60:C9:ED:18:F9:3A:1B:46:EB:DD:C5:58:44:67:02:FE:1E:9A
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:f7:19:89:ba:3c:f1:7a:f2:da:ff:a8:b0:56:00:d0:b6:22:
         49:c3:43:16:c4:eb:d2:99:ed:0a:0a:34:9a:ea:70:b7:a5:7c:
         7a:ab:44:f8:a6:54:93:97:3b:53:0f:1c:f9:5c:cc:fc:96:dc:
         e8:11:ee:aa:92:13:d8:da:ba:88:d1:c0:70:22:c9:b4:be:2f:
         94:ab:43:82:db:c8:fb:4c:24:c4:2b:f4:14:3f:e2:27:79:b7:
         ec:52:e4:e5:4e:73:14:3b:4e:c7:27:f9:85:44:82:70:90:d9:
         08:cf:8d:cc:a7:12:26:f2:c0:e6:85:74:33:b0:bb:6e:63:78:
         8d:00:77:a6:73:56:09:94:db:ed:ff:73:ae:a2:fa:25:97:d6:
         e8:5c:b9:9f:d9:1b:cb:53:82:80:77:81:26:a0:66:e1:63:c8:
         73:cc:f5:88:d0:3d:88:d4:a5:62:33:2b:37:db:b1:84:c4:02:
         84:97:9f:b6:da:c0:c6:82:03:03:84:82:f1:b9:5e:4f:0e:47:
         ae:0a:7c:ae:d8:4d:ff:c1:0d:0a:49:03:af:8b:9e:de:25:bb:
         e3:98:e7:c2:4a:0a:3c:91:67:e2:ea:95:02:b2:80:2a:e5:69:
         00:76:94:3c:5d:93:6b:da:cb:16:d5:ee:d3:fc:bb:2b:81:49:
         01:16:c9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:08 2025 by rpki-client