Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365373a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365373a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          IERYrbhqJwEdj0UzqCgGFNZbkhQRiRVcjWiazm5nCnE=
Subject key identifier:   50:AD:CF:07:AF:FA:0E:F1:47:90:A4:9D:0C:A9:C1:A4:2B:3D:6C:E7
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       331B10A215DDB91A85507EF2CC67B9BB70AA99BA
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365373a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:41 +0000
ROA not before:           Tue 04 Feb 2025 19:56:41 +0000
ROA not after:            Tue 03 Feb 2026 20:01:41 +0000
asID:                     267848
IP address blocks:        2800:be0:3e7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:10:a2:15:dd:b9:1a:85:50:7e:f2:cc:67:b9:bb:70:aa:99:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:41 2025 GMT
            Not After : Feb  3 20:01:41 2026 GMT
        Subject: CN=50ADCF07AFFA0EF14790A49D0CA9C1A42B3D6CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:45:0c:44:7c:18:8a:03:64:e1:47:68:d5:
                    f5:09:b5:35:45:ad:25:c0:60:ed:56:be:bd:b4:2c:
                    69:51:85:d5:28:d5:bb:e7:ba:a6:d8:c3:40:d2:57:
                    36:01:08:20:7b:d6:1b:da:73:e5:c8:46:07:f8:06:
                    62:bf:f8:f4:c4:46:c4:12:9b:eb:45:a1:c3:28:b3:
                    2d:13:19:3d:f7:82:8a:93:68:69:81:d5:55:78:25:
                    16:e7:ce:82:7e:54:d5:9d:42:f0:42:be:a1:b7:59:
                    e0:5b:9e:c0:2c:a9:1f:0c:4e:01:05:bd:b2:75:ee:
                    a7:aa:60:7a:09:2c:da:13:9d:4a:12:e8:a6:d5:7a:
                    c0:de:7c:d1:34:f3:b3:46:3d:19:ee:74:73:2e:8d:
                    86:40:5d:c5:d4:c2:4a:22:b9:10:20:f4:8d:f8:ea:
                    89:3d:08:88:12:fc:19:10:f2:03:6e:c8:dc:9a:be:
                    d9:09:9b:fb:c2:63:0e:36:bf:51:86:00:94:cd:14:
                    3d:f7:56:26:2c:3c:5a:bc:8c:8c:35:d6:9b:45:03:
                    24:cc:cc:a0:84:a7:69:cc:55:06:c0:30:4f:7b:7c:
                    f0:28:f0:88:04:57:64:db:cf:2f:ee:09:41:e1:ed:
                    26:1a:b5:7b:54:74:0a:2a:74:a9:f8:b0:c8:61:5a:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:CF:07:AF:FA:0E:F1:47:90:A4:9D:0C:A9:C1:A4:2B:3D:6C:E7
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365373a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:a7:cf:6e:b3:4a:bb:af:30:68:21:8d:5a:71:a2:d9:a0:
         3b:b3:09:95:11:f7:58:45:a8:dc:52:d6:c6:82:3c:c2:9c:31:
         25:83:43:c7:e8:be:44:eb:b6:cb:e1:bf:de:c6:a8:86:cb:68:
         07:87:6e:26:99:29:97:7f:06:51:a3:e3:10:14:8f:50:68:cd:
         95:52:03:2c:5b:9c:70:b6:97:46:28:67:aa:b0:ed:47:69:2c:
         8b:05:8f:a5:a7:91:ec:e0:ff:ad:7c:61:92:18:b2:eb:38:67:
         b3:ff:54:14:3e:35:3f:91:d2:01:d4:62:c1:6c:8c:63:8d:c4:
         d6:c9:2c:29:6c:10:2f:fb:cb:f0:89:9c:0c:25:ee:4f:1f:44:
         a0:50:27:bf:64:26:4a:c7:cf:aa:a2:3c:29:73:9b:a5:84:10:
         f3:90:b5:5d:78:df:c2:12:9c:46:ab:9a:0d:72:f3:d1:02:89:
         43:2c:25:89:c3:8c:7d:d3:7d:3b:fb:07:50:b4:46:b2:3d:a3:
         68:a9:d1:c2:ca:9c:14:7c:8c:61:0e:fe:c2:82:c4:93:d8:a7:
         90:c7:a5:71:ca:42:c9:6d:0d:ce:79:07:ea:73:f3:74:84:b1:
         d1:b6:05:fe:bd:07:ec:b9:79:d6:9e:8c:d5:37:7b:a1:a9:96:
         78:aa:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:25 2025 by rpki-client