Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/323830313a31653a373030303a3a2f34382d3438203d3e20323636373733.roa
File:                     323830313a31653a373030303a3a2f34382d3438203d3e20323636373733.roa (raw, json)
Hash identifier:          FH71JcjEO2e9ELTWsNp7RQFoKfXbg09YOhknPyacnEs=
Subject key identifier:   6F:62:40:2F:0F:A3:D4:F4:DA:08:A1:D6:A6:B7:FF:6B:43:8A:C0:9A
Certificate issuer:       /CN=5925D79B29D86051E16C2D8734BC706F2511A76B
Certificate serial:       6C4039EC929576CE82C0D46B98123BAABEBAFD96
Authority key identifier: 59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/323830313a31653a373030303a3a2f34382d3438203d3e20323636373733.roa
Signing time:             Tue 04 Feb 2025 20:03:11 +0000
ROA not before:           Tue 04 Feb 2025 19:58:11 +0000
ROA not after:            Tue 03 Feb 2026 20:03:11 +0000
asID:                     266773
IP address blocks:        2801:1e:7000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:39:ec:92:95:76:ce:82:c0:d4:6b:98:12:3b:aa:be:ba:fd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5925D79B29D86051E16C2D8734BC706F2511A76B
        Validity
            Not Before: Feb  4 19:58:11 2025 GMT
            Not After : Feb  3 20:03:11 2026 GMT
        Subject: CN=6F62402F0FA3D4F4DA08A1D6A6B7FF6B438AC09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:68:05:49:ae:b4:0b:16:a7:36:7d:cb:1f:
                    c0:80:93:0a:a7:3b:d0:a9:fe:fb:9e:5e:af:8d:6b:
                    00:5b:bf:b5:55:12:a5:0d:69:14:8a:70:cf:44:3a:
                    57:e4:63:62:7d:31:b2:28:cf:c5:c8:dd:14:c8:57:
                    7a:45:f0:90:e4:93:3d:a3:7a:8c:9e:bf:65:a3:b1:
                    64:38:5f:32:21:6e:33:42:e3:6b:22:a2:a6:0c:0f:
                    f6:c2:ae:52:d3:52:03:1c:33:d0:05:81:31:d2:ee:
                    8f:d1:16:ea:f3:95:1e:75:85:ed:a0:e3:44:77:33:
                    98:27:bd:74:7d:fe:93:08:f9:e9:49:61:1a:9f:9f:
                    f5:c4:0a:2f:4d:f6:7d:3c:87:00:e1:cd:61:b3:ba:
                    df:66:9b:e7:38:77:17:bc:23:c8:8c:ad:23:49:83:
                    65:3d:e5:36:85:f2:4d:65:69:81:7f:12:d4:67:9e:
                    9c:a6:9a:57:db:4d:6b:df:a8:79:a3:1f:29:90:09:
                    17:e6:23:54:e5:f3:95:4b:b1:90:fc:b3:92:53:ea:
                    a9:1f:98:cd:d5:1c:53:3a:51:bf:10:7c:77:04:e4:
                    fb:88:e1:e4:7d:6a:76:39:0b:32:0d:9f:43:03:f6:
                    fd:7c:3e:22:73:43:4c:b4:91:53:09:02:58:66:8a:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:62:40:2F:0F:A3:D4:F4:DA:08:A1:D6:A6:B7:FF:6B:43:8A:C0:9A
            X509v3 Authority Key Identifier:
                keyid:59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/5925D79B29D86051E16C2D8734BC706F2511A76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/323830313a31653a373030303a3a2f34382d3438203d3e20323636373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:6a:64:c8:7f:92:2b:92:2b:be:56:ab:04:18:dc:a5:b8:
         1a:47:7b:67:83:f2:44:92:aa:c4:d3:7f:c6:05:1a:63:eb:2b:
         05:79:02:0b:c5:a3:fa:84:10:94:20:d8:b9:c9:77:bc:fa:9b:
         fb:f3:88:16:16:f8:38:a5:2d:b9:7f:ae:75:b2:4c:18:55:90:
         5a:23:01:8e:c5:fd:1c:ad:39:16:fe:0f:23:db:e9:39:2d:ee:
         74:53:14:43:ef:50:c7:08:1f:61:19:1a:5c:ca:13:f6:01:a0:
         28:05:c9:c0:e8:dc:ee:47:f8:f8:e3:9b:79:44:09:f7:66:93:
         65:38:87:38:03:03:1f:5e:23:71:c8:bb:a1:1f:96:62:3c:78:
         5e:a9:cb:f5:d0:ae:f6:10:ed:3f:0b:71:a7:ee:af:56:76:39:
         4f:36:b8:62:13:dd:06:aa:72:34:ab:3b:e8:be:a2:8f:fd:c5:
         1f:4a:d1:2b:4a:35:39:1f:a4:dd:ad:2e:a3:bc:46:76:44:ef:
         4f:19:a2:d5:71:3e:85:55:3b:75:bd:02:ad:ec:df:b2:0f:95:
         30:45:ee:f3:9d:10:94:64:c3:22:ef:8c:90:37:75:1a:1b:4e:
         4d:83:3b:52:f7:f7:19:5f:77:27:0b:62:11:76:c5:53:b6:80:
         bf:5f:04:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:13 2025 by rpki-client