Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          ArxU4DxhrkqFaqsm+mZ95MqZKQBS3PudKWAVFW0fP+Q=
Subject key identifier:   D1:32:01:2D:1B:E7:90:1E:80:50:1D:41:BA:B4:55:DE:03:43:7E:DE
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       063E27BA2652F757BE161FC264933F376EEBBEAD
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:47 +0000
ROA not before:           Tue 04 Feb 2025 19:56:47 +0000
ROA not after:            Tue 03 Feb 2026 20:01:47 +0000
asID:                     267848
IP address blocks:        2800:be0:3e4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:27:ba:26:52:f7:57:be:16:1f:c2:64:93:3f:37:6e:eb:be:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:47 2025 GMT
            Not After : Feb  3 20:01:47 2026 GMT
        Subject: CN=D132012D1BE7901E80501D41BAB455DE03437EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:a1:a7:92:0d:98:16:4d:bd:f5:c3:23:19:
                    bd:67:5c:8a:8b:c7:45:de:bb:33:c9:dc:0b:13:28:
                    d5:89:4f:52:fd:cf:82:f6:25:26:90:c1:7d:c4:bb:
                    58:2d:d6:a8:70:b4:10:5c:f1:a8:37:7f:71:3d:21:
                    69:4c:ab:0b:6d:2b:c0:a0:ee:ef:92:7a:51:e3:5b:
                    2e:ca:2a:0e:1f:e2:e8:59:e2:4a:ce:bf:c4:e2:e9:
                    36:99:21:40:8a:7b:10:08:21:6c:fc:83:64:41:b9:
                    df:0f:0b:c0:97:e5:ca:1c:c9:a5:f9:74:5f:a1:5c:
                    db:7d:12:c7:98:c9:bd:3b:4d:bf:d4:92:5c:1d:22:
                    12:92:9d:32:ce:4d:7c:31:82:67:1d:6c:0c:ce:16:
                    cf:87:fb:4b:16:42:7f:34:f8:e9:f9:c7:cd:2b:0d:
                    79:34:54:1f:7f:0d:08:4d:92:51:08:91:0e:88:21:
                    1c:e3:98:05:c6:84:8e:33:52:eb:a5:8a:2c:1d:bd:
                    3c:04:4f:ab:12:8c:39:37:b6:a2:45:b7:b3:65:c2:
                    60:27:8f:60:a8:40:62:e0:05:b1:4b:fa:fa:44:8e:
                    2a:cb:6a:84:a0:0b:22:a4:d8:89:4d:b9:7c:49:a8:
                    4b:cd:a7:bb:81:fe:5f:89:dd:ab:48:9c:f1:5a:16:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:01:2D:1B:E7:90:1E:80:50:1D:41:BA:B4:55:DE:03:43:7E:DE
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:e1:92:cb:1f:62:c6:a5:1d:c6:83:29:c7:bf:fc:4d:cf:55:
         0f:4e:2f:c3:98:17:54:03:86:d4:ac:7e:3a:59:19:a2:5b:79:
         79:62:9d:ab:f4:df:63:c4:9c:a3:6f:58:94:7a:f6:72:5d:e9:
         e0:e6:92:48:09:86:f1:6c:d7:70:6a:79:16:01:97:f9:41:41:
         3d:7a:03:f3:f1:26:b3:54:8e:3e:44:53:14:a9:3a:e1:8e:28:
         8b:62:2a:c7:0e:37:6a:a6:38:24:46:36:09:bb:60:6b:ba:d0:
         29:19:4a:36:ba:5b:fd:e3:58:e5:cf:9d:53:97:8c:2f:26:3c:
         58:0c:e4:a0:52:aa:3e:4e:93:a1:00:6b:3e:8c:32:0f:a5:a7:
         e0:1b:fa:38:13:9d:3c:9d:9c:4e:3a:8b:2f:a7:06:84:62:52:
         cf:a5:54:ce:83:6d:cf:55:61:ed:6b:ad:45:ca:c9:8d:49:8b:
         18:80:67:17:0f:ec:a2:e6:de:f5:ef:fc:94:28:6a:06:d9:fd:
         cd:5d:31:ae:b7:dd:5a:b9:4b:35:53:6b:a9:e4:ec:af:1e:d1:
         df:51:f5:4f:4a:50:73:a3:8b:2c:32:e6:fc:47:7d:17:f2:9d:
         1e:bf:4e:52:6a:4d:68:12:25:19:3d:cb:ab:15:ba:37:a8:e1:
         d9:92:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:26 2025 by rpki-client