Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa
File:                     323830313a3131323a3a2f34302d3430203d3e203134303830.roa (raw, json)
Hash identifier:          7w+YaYKs9LpHjqmhnB5Fv4xOQaqMJbWl78fuX1EcMlw=
Subject key identifier:   8C:32:80:2B:D0:41:90:FC:38:D9:97:65:64:B6:80:CA:E0:CE:00:76
Certificate issuer:       /CN=6C02502E27FB7D2BA9B87DA566CB4D16F25D893E
Certificate serial:       3B6210292C2FAC17C46C09A036567AC0552EF048
Authority key identifier: 6C:02:50:2E:27:FB:7D:2B:A9:B8:7D:A5:66:CB:4D:16:F2:5D:89:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 20:01:11 +0000
ROA not before:           Tue 04 Feb 2025 19:56:11 +0000
ROA not after:            Tue 03 Feb 2026 20:01:11 +0000
asID:                     14080
IP address blocks:        2801:112::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:62:10:29:2c:2f:ac:17:c4:6c:09:a0:36:56:7a:c0:55:2e:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02502E27FB7D2BA9B87DA566CB4D16F25D893E
        Validity
            Not Before: Feb  4 19:56:11 2025 GMT
            Not After : Feb  3 20:01:11 2026 GMT
        Subject: CN=8C32802BD04190FC38D9976564B680CAE0CE0076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:22:08:a7:94:8e:bc:66:0d:a2:a9:70:ce:
                    91:09:3b:64:02:1a:0c:94:62:01:c0:47:db:57:b1:
                    aa:ca:0f:8d:4f:32:c3:67:55:21:9c:2f:6b:d3:bb:
                    a9:b8:90:19:6f:6a:20:9a:6d:2d:80:93:13:f3:e9:
                    32:fe:bb:ad:70:d1:f2:02:a4:e2:fd:34:f5:0d:74:
                    f1:59:3a:06:2e:68:a0:a2:17:6b:46:e3:7f:9a:2e:
                    f1:45:a5:eb:18:e6:a7:42:83:bd:37:bb:9b:4c:86:
                    87:61:9a:ad:a0:1b:41:11:9d:b6:c6:fe:45:94:56:
                    75:9d:22:bc:6a:5b:14:8c:40:39:72:5f:fb:8c:eb:
                    d4:90:ee:b1:4c:a3:67:38:27:65:0d:ae:84:49:ee:
                    97:6e:c3:43:69:4a:a5:1a:8b:9e:49:89:f1:4e:35:
                    e1:84:41:0f:25:62:4c:3f:85:fc:3b:eb:e5:c2:da:
                    89:c9:02:19:98:d0:61:b4:db:79:8b:58:1c:1d:90:
                    dd:ab:a3:26:e3:f2:74:fb:6a:18:77:22:24:6b:9a:
                    a1:de:f5:d7:9a:25:94:72:b9:9b:9e:0b:c5:61:fb:
                    02:9c:d7:85:31:70:10:d7:cc:00:56:c6:db:0e:4b:
                    5e:2e:eb:1d:66:1e:fb:ba:ad:a4:8a:61:91:ec:4d:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:80:2B:D0:41:90:FC:38:D9:97:65:64:B6:80:CA:E0:CE:00:76
            X509v3 Authority Key Identifier:
                keyid:6C:02:50:2E:27:FB:7D:2B:A9:B8:7D:A5:66:CB:4D:16:F2:5D:89:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:112::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:6b:03:43:a2:0b:46:81:40:85:3a:b4:07:5a:ca:ae:a6:
         ff:d5:e4:72:1d:9b:08:cb:e3:3e:04:be:0a:c5:9b:6d:68:99:
         cc:48:0d:ec:af:ab:f8:2a:4b:1c:15:fb:0f:b7:ae:17:65:75:
         86:01:13:43:35:07:cf:95:6c:70:67:85:6f:2a:fd:8f:f9:d0:
         7b:7b:22:da:97:1c:ec:5b:cb:67:fe:56:5a:45:23:3c:ff:14:
         f9:5e:d6:41:2b:e5:d5:93:72:93:f5:a6:f1:56:40:ed:73:28:
         ce:dd:a7:2e:16:b9:e0:1b:4f:7a:c8:bc:ab:7a:8e:53:5f:f0:
         d2:eb:8b:41:49:9c:62:cf:c2:fa:4f:e1:70:1a:08:76:51:c0:
         99:e0:8d:4f:69:dd:6d:a6:e8:30:66:e3:26:de:16:57:79:6a:
         7e:ee:da:51:9e:c8:2d:84:be:37:81:ec:05:4e:f3:81:61:a4:
         1b:9c:88:70:09:58:d0:88:5f:e2:b5:da:3a:65:2a:c1:2a:73:
         bc:fa:2e:e9:e2:e6:4f:92:9d:a2:3e:0c:64:fd:16:62:3a:76:
         da:a5:87:c8:e1:fe:ae:4a:e8:e5:75:1d:e6:b8:68:cc:21:c0:
         33:f4:a1:17:b9:8e:a7:71:a7:ed:2e:7f:ad:8b:bf:06:46:34:
         b1:4e:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:02 2025 by rpki-client