Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532333a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532333a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          eop10ZWqjHvAB6p2kbTE+kKXb7rJG8ARPzJE41RBpHQ=
Subject key identifier:   CB:9D:D3:0E:21:36:90:DA:60:7B:96:A5:01:AD:49:61:69:51:E3:53
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       4E1D48D061220E710ADCA177A1A1ECF317C08E38
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532333a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:47 +0000
ROA not before:           Tue 04 Feb 2025 19:56:47 +0000
ROA not after:            Tue 03 Feb 2026 20:01:47 +0000
asID:                     267848
IP address blocks:        2800:be0:4e23::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:48:d0:61:22:0e:71:0a:dc:a1:77:a1:a1:ec:f3:17:c0:8e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:47 2025 GMT
            Not After : Feb  3 20:01:47 2026 GMT
        Subject: CN=CB9DD30E213690DA607B96A501AD49616951E353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:be:d4:77:a8:f8:63:bf:29:79:ac:e1:76:
                    1e:a2:e6:14:e9:ee:0e:50:ba:87:05:d0:34:bd:97:
                    b4:55:cc:97:35:94:a9:7e:6c:9c:30:e6:0d:d4:f1:
                    4b:55:1b:f5:34:3b:78:a1:97:29:41:c7:af:bd:47:
                    64:1a:fb:f4:2b:32:96:f3:09:3b:af:a1:2f:68:f8:
                    ab:97:17:12:96:37:20:fe:12:f4:20:e0:b2:af:57:
                    a2:68:6c:81:36:ed:d4:38:dc:7b:91:ec:e1:e9:1a:
                    fd:69:9b:0b:d0:4c:f0:ef:13:91:65:c5:b5:da:67:
                    17:60:47:b8:f9:50:51:98:77:a8:fa:2d:ac:73:ca:
                    36:81:c7:a5:43:3d:ce:2e:ad:f0:b3:23:80:ee:d6:
                    dc:75:4e:87:7c:01:be:2d:c3:1c:38:59:2b:e3:54:
                    15:7d:31:03:d2:2a:1c:19:d7:db:99:b8:0e:d0:28:
                    9d:9e:06:98:ec:2a:6c:2b:96:bf:cc:91:24:c5:58:
                    cf:13:40:4d:68:74:4a:10:4f:da:5d:2c:21:81:63:
                    8a:50:17:c0:ab:57:fe:b5:33:c9:d2:3c:bf:b5:e7:
                    79:8c:6a:d8:dd:32:43:b2:22:10:57:6c:e1:1d:50:
                    ee:67:bc:63:86:be:fe:d1:65:07:33:62:fb:af:f8:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:D3:0E:21:36:90:DA:60:7B:96:A5:01:AD:49:61:69:51:E3:53
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532333a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e23::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:26:df:31:76:43:c3:a3:e7:c7:bd:a8:d0:70:13:ef:7e:f7:
         ed:87:6a:f2:bc:e7:75:02:47:bf:66:ce:30:f9:89:4e:34:3d:
         c9:4e:43:85:cc:05:df:09:9c:37:06:1f:cf:ea:23:f7:ef:9b:
         6c:69:34:eb:cd:ff:2b:8b:a6:6a:d7:d0:79:63:b5:04:4e:d7:
         48:d8:5c:38:19:f8:c3:74:26:3f:c4:8a:a5:78:f3:c5:92:f6:
         6b:e7:25:0d:2c:6f:01:70:56:7d:db:41:3d:7e:ab:6a:99:91:
         72:43:f9:04:71:ec:3a:65:3a:51:75:f9:1b:2d:5c:00:38:d7:
         8f:cb:26:65:31:bf:e3:a1:cc:cb:e6:bc:19:62:63:8e:36:4e:
         db:71:00:46:a4:66:90:83:bc:21:2f:b8:e5:c2:06:94:d2:c8:
         b7:b0:c2:15:5e:f4:a5:78:1a:3e:50:53:fb:eb:a9:9c:2c:f5:
         47:ee:11:f6:0a:8f:50:13:63:0e:f0:f7:e9:db:1a:4f:9d:92:
         0a:89:6e:b5:a9:b2:5f:0e:fb:e5:86:38:e0:50:48:91:20:ef:
         c9:8c:6e:b7:5d:22:1a:6e:a7:b0:25:54:3b:89:7c:5c:7c:7e:
         31:eb:bf:f8:ae:28:a3:0d:5d:37:0f:44:bd:e3:1a:3d:a5:c8:
         83:77:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:21 2025 by rpki-client