Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa
File:                     323830363a3332613a3a2f33322d3438203d3e20323635353734.roa (raw, json)
Hash identifier:          db5o7hK7UIBhgyjrPgPd8rJHfTXitzzxlcTUdHsJxLQ=
Subject key identifier:   37:58:56:BA:AC:56:68:D9:BA:48:4C:85:73:A8:17:32:9F:F5:67:D2
Certificate issuer:       /CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
Certificate serial:       4699AE62C22B9FDE263BB6A5A3FA94C4E3959FC7
Authority key identifier: E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa
Signing time:             Tue 04 Feb 2025 18:10:16 +0000
ROA not before:           Tue 04 Feb 2025 18:05:16 +0000
ROA not after:            Tue 03 Feb 2026 18:10:16 +0000
asID:                     265574
IP address blocks:        2806:32a::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:99:ae:62:c2:2b:9f:de:26:3b:b6:a5:a3:fa:94:c4:e3:95:9f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
        Validity
            Not Before: Feb  4 18:05:16 2025 GMT
            Not After : Feb  3 18:10:16 2026 GMT
        Subject: CN=375856BAAC5668D9BA484C8573A817329FF567D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:b2:ce:5e:97:e0:ce:7c:24:42:ad:ef:64:
                    a8:9c:01:c8:ee:f4:e4:5f:d4:5e:7b:0b:f8:52:3d:
                    8b:6f:ce:9d:50:31:8f:cd:93:8d:be:95:aa:b8:10:
                    18:4f:b7:49:25:47:7b:bd:4c:6c:61:1d:b3:00:cc:
                    25:b9:7b:dd:b8:62:03:c2:b2:67:e1:fd:3d:88:ab:
                    66:7a:2a:9c:7d:10:5d:8b:5e:5f:a4:c9:ce:3b:0c:
                    46:55:b3:66:47:42:a9:43:2b:b3:6b:d2:f1:2a:da:
                    05:b9:63:74:1b:2f:cf:5a:bd:88:4b:9f:eb:85:cb:
                    dc:31:ba:0a:28:95:ad:d8:ce:bb:ff:e7:36:ab:26:
                    46:e2:7f:20:75:4e:e5:bc:e4:c9:9d:05:1b:df:58:
                    be:a8:7b:8c:90:5d:13:23:15:02:6f:36:1a:4b:86:
                    dd:77:c4:1c:c7:bf:ef:d8:0e:d3:75:c5:87:70:0a:
                    9f:b6:7a:79:4a:16:f3:40:1a:a5:40:8b:30:87:24:
                    f7:a5:43:1f:9b:de:8c:50:d8:f3:b0:52:ac:ba:f7:
                    e6:f1:9e:7b:73:60:98:54:33:d5:f2:9a:af:09:a1:
                    17:04:27:0e:79:70:b9:87:1e:d8:70:db:ab:2e:4e:
                    f0:49:9b:33:1e:0d:a5:a6:a9:e7:79:6d:83:09:2c:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:58:56:BA:AC:56:68:D9:BA:48:4C:85:73:A8:17:32:9F:F5:67:D2
            X509v3 Authority Key Identifier:
                keyid:E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/323830363a3332613a3a2f33322d3438203d3e20323635353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32a::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:9c:07:81:72:a8:dd:86:ab:2c:de:dc:43:67:ff:1a:35:
         53:de:1b:ef:3e:fb:76:ad:32:5d:3f:25:78:11:54:24:66:5a:
         5c:31:db:4a:54:3b:cc:da:8e:ff:a2:e7:87:91:7f:90:9d:b9:
         34:b1:1c:78:d4:1f:8e:7a:a8:8e:d9:2c:2a:f1:e8:ff:cb:70:
         de:69:97:ab:5f:91:6b:50:50:ed:19:03:4e:03:98:3b:d6:18:
         fe:d6:1a:8b:4d:84:e4:6a:1c:0b:28:89:37:5a:f6:26:6f:d0:
         51:22:b4:c3:bb:9d:39:12:dc:73:7a:8d:bd:ce:b9:f1:64:2c:
         53:1c:59:56:ba:1f:db:32:25:3b:22:3c:3e:50:20:fe:ea:d2:
         9d:59:56:b5:71:9b:92:67:43:25:10:95:19:a1:25:a9:4d:43:
         fe:a7:92:e3:24:96:db:a6:96:27:61:88:ba:51:9b:a0:b2:66:
         a3:02:7a:82:06:37:14:6b:4e:1a:7c:4b:65:5a:d2:97:ed:e9:
         cc:b8:ec:71:50:1f:ec:41:03:f6:fc:7d:f2:e0:8e:af:cb:57:
         75:73:1c:8a:62:eb:cb:a0:c0:34:d7:7b:be:a9:c2:51:ee:cb:
         d1:fa:0a:41:5b:21:44:54:df:76:d6:61:1b:24:a6:fe:4c:fe:
         db:b8:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:19 2025 by rpki-client