Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313066313a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a313066313a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          6Sna0fQpN8YwXhMJSjQ5JDwWNolPA9ZnC4h/09xuzPs=
Subject key identifier:   1E:EA:CC:89:2A:2F:C6:0D:80:5B:C5:62:51:4C:FA:77:E4:E6:8E:C6
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       37BA168ABD7501E303C09AE5150B8B0EBED1EE0E
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313066313a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:03 +0000
ROA not before:           Thu 12 Sep 2024 11:40:03 +0000
ROA not after:            Thu 11 Sep 2025 11:45:03 +0000
asID:                     28548
IP address blocks:        2806:2a0:10f1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ba:16:8a:bd:75:01:e3:03:c0:9a:e5:15:0b:8b:0e:be:d1:ee:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:03 2024 GMT
            Not After : Sep 11 11:45:03 2025 GMT
        Subject: CN=1EEACC892A2FC60D805BC562514CFA77E4E68EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:cf:76:be:78:a7:32:0f:3f:01:c0:8e:74:
                    1c:fa:2f:4a:c8:b3:8a:c5:45:5e:2b:d4:37:7f:94:
                    53:c2:65:d3:fd:66:71:9d:31:f4:4e:89:07:0f:90:
                    e2:11:4c:fe:30:97:b4:4f:8b:7d:18:97:ae:27:37:
                    c4:9d:de:b6:72:a8:f0:83:1e:ab:0a:30:db:37:25:
                    50:7d:08:dc:50:83:d6:6e:6d:21:42:27:cc:2f:ba:
                    9b:db:cc:ff:21:bb:65:04:ae:20:57:2b:31:1b:5c:
                    bb:1c:92:86:0c:00:83:76:cd:6c:82:69:17:f9:43:
                    46:f4:39:b8:45:b6:7a:91:f4:06:a7:8d:f4:81:f3:
                    ce:0b:36:d4:31:4c:1b:3a:da:a2:63:5b:cb:0b:f4:
                    16:0b:74:ca:a9:3d:33:5d:62:99:9c:b8:5b:19:1a:
                    0f:22:c7:92:4f:5a:25:d8:d3:a8:73:dd:cf:c4:9e:
                    b5:97:1e:91:70:2f:d5:d5:1b:a4:46:a4:c6:84:f4:
                    fe:79:c1:1a:db:b2:03:1c:aa:20:94:04:e9:c3:8d:
                    aa:5b:af:e7:58:e8:41:d3:d5:98:2c:db:f6:7e:75:
                    3d:1b:3c:8c:53:4e:29:55:2f:7d:ba:73:3d:00:53:
                    3d:2e:ec:e4:b1:c7:b3:d0:47:45:be:5b:41:c5:27:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:CC:89:2A:2F:C6:0D:80:5B:C5:62:51:4C:FA:77:E4:E6:8E:C6
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313066313a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:10f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:d9:c4:9b:0f:0b:71:7a:fe:fa:ba:b0:61:ed:3a:a3:6d:
         6c:ea:20:45:24:f3:66:1a:25:5c:b0:fb:2c:8f:5f:bc:d9:c4:
         a5:f4:cb:76:00:04:55:43:be:0b:d6:2f:b2:6c:01:b4:09:7e:
         4d:3b:52:03:d9:ae:61:fb:c7:cb:1f:64:a7:f4:b1:17:e7:fd:
         14:98:ac:0b:48:b0:a9:db:2c:32:06:9c:d7:54:5a:5d:d9:31:
         e0:a0:11:d8:5d:d3:68:ad:73:3c:9a:73:6e:b2:f6:63:7d:21:
         01:7e:f1:8d:e0:f3:7a:b0:8c:5e:c3:77:06:47:2f:8f:7d:ee:
         ca:80:90:28:77:58:e9:1e:66:92:fc:d2:7f:0c:20:fe:87:4e:
         6d:94:57:68:6f:ea:9f:e2:e2:e8:cf:f4:99:6b:88:9a:af:e2:
         9e:ea:2f:f1:60:88:f5:37:5f:78:50:77:b5:b5:62:a6:b7:bb:
         be:ab:39:78:4e:51:d1:01:42:10:87:84:31:7a:25:8c:63:ed:
         d1:6b:b3:ec:70:a4:b5:46:70:21:ad:41:43:af:e6:f3:9f:7d:
         30:5b:05:76:ad:a1:21:33:e0:4a:9f:ca:59:96:88:5a:16:ed:
         ec:67:1c:fd:ab:2a:ad:33:ae:f3:74:2e:1d:52:f5:79:b2:9e:
         31:86:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:57:26 2025 by rpki-client