Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a313a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          uKzP6GwuiYzrrNUHYFHnccpIX1/Dj/zOC5aTdRCwYUo=
Subject key identifier:   3D:6A:32:26:95:3C:92:21:1D:F6:EC:5F:7A:5D:2B:0A:A7:4D:81:C1
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       271FD07A82155BCC2055DD7DA3EF9BCB8D544AB0
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:01 +0000
ROA not before:           Thu 12 Sep 2024 11:40:01 +0000
ROA not after:            Thu 11 Sep 2025 11:45:01 +0000
asID:                     28548
IP address blocks:        2806:2a0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1f:d0:7a:82:15:5b:cc:20:55:dd:7d:a3:ef:9b:cb:8d:54:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:01 2024 GMT
            Not After : Sep 11 11:45:01 2025 GMT
        Subject: CN=3D6A3226953C92211DF6EC5F7A5D2B0AA74D81C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:7d:b0:7a:fd:fa:9b:ae:b7:4f:28:72:15:
                    9d:8b:b2:34:58:37:91:8e:08:81:79:3b:c3:81:a6:
                    a0:95:2e:dc:ee:7a:db:d4:6d:1f:74:3a:1f:8e:f1:
                    73:a1:ae:54:94:00:64:89:04:29:0c:11:e2:71:b1:
                    04:19:e3:64:5a:87:97:c2:4b:4a:63:c1:05:47:7f:
                    cc:a5:46:c3:bc:40:ba:f8:68:ff:3c:2d:d7:0e:2a:
                    1b:5c:35:9b:73:18:b5:5d:b5:89:25:8e:7f:86:fa:
                    9a:13:9f:9c:ca:15:94:b6:37:30:b5:f5:e0:0b:9d:
                    63:b3:8b:a6:22:79:be:43:f3:64:e9:5f:ee:a5:40:
                    b7:ed:3d:0f:6a:7f:53:a5:bb:ab:f9:5e:0e:99:b4:
                    31:57:1a:44:0b:54:e9:bd:43:f0:f0:52:e0:35:c5:
                    7c:ac:a2:1c:db:65:b2:eb:6e:f0:aa:ca:c8:ef:d9:
                    d7:77:6e:8b:35:0f:c0:c8:06:e1:f6:66:04:24:84:
                    8f:07:e3:6e:cb:fd:de:85:82:49:67:b2:a2:cf:d4:
                    1a:34:36:c0:c8:af:d4:2b:f0:f6:52:78:6c:48:29:
                    9f:74:fd:c2:02:35:0a:fe:20:3a:8c:15:30:81:40:
                    b9:72:28:af:10:1d:2a:83:3a:df:3c:80:1d:eb:bc:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:32:26:95:3C:92:21:1D:F6:EC:5F:7A:5D:2B:0A:A7:4D:81:C1
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a313a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:36:e7:12:7e:7f:36:87:b5:de:12:e3:ee:6c:4f:b2:b8:
         5d:0a:23:26:24:cb:b6:c9:e2:16:fb:42:f2:d3:2f:6b:6d:33:
         cd:b6:6f:bc:20:bb:fc:d6:5d:0c:90:17:a2:cf:1d:82:68:63:
         6c:98:38:6a:f9:dd:e3:f9:8c:19:ea:3c:9c:5f:84:ff:c1:6f:
         97:70:25:4e:36:ff:cc:7c:9e:37:02:24:3d:d2:c5:6c:95:59:
         51:87:de:18:2b:a4:50:7d:ae:ae:49:c8:bd:3f:22:69:2b:42:
         e2:3a:8a:8f:59:9c:58:30:5c:d9:06:38:c9:ac:57:91:bf:54:
         77:1e:9a:63:22:54:ab:5a:3b:67:f0:58:7d:47:4a:0a:68:65:
         b4:88:50:7b:60:75:3a:59:03:47:d6:30:74:91:69:a7:6d:f3:
         66:1c:dc:e1:62:26:9e:b8:97:98:2c:f1:33:54:4f:6d:51:da:
         ec:56:2e:fd:bf:ec:e6:a3:e3:b0:6d:43:c2:f1:e5:de:32:89:
         b0:22:bd:d1:c5:48:80:72:c7:d9:21:02:c3:fa:ba:d4:d5:28:
         57:50:e4:6b:7a:9d:fe:1d:e7:bd:35:2b:2b:9e:ec:a6:98:43:
         c8:14:bd:cb:4d:e6:73:0c:7c:fa:87:0d:74:4e:82:64:3b:56:
         1f:d0:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:51:44 2025 by rpki-client