Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266313a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a3266313a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          FKE9qdWapvukHimUmb098u6LdTo9zGIZm+psLPUnsPQ=
Subject key identifier:   FB:C0:25:D9:F7:E4:58:A6:4A:B3:E6:B3:B6:C5:2E:B5:34:4E:F0:8D
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       3F15B5CD94C3037265044B440FC465024C30D6FE
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266313a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:00 +0000
ROA not before:           Thu 12 Sep 2024 11:40:00 +0000
ROA not after:            Thu 11 Sep 2025 11:45:00 +0000
asID:                     28548
IP address blocks:        2806:2a0:2f1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:b5:cd:94:c3:03:72:65:04:4b:44:0f:c4:65:02:4c:30:d6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:00 2024 GMT
            Not After : Sep 11 11:45:00 2025 GMT
        Subject: CN=FBC025D9F7E458A64AB3E6B3B6C52EB5344EF08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:f0:98:86:8d:c4:7f:18:62:07:3f:f1:4d:
                    47:89:9c:f8:8d:9f:17:34:08:f6:d2:7f:e0:51:f4:
                    b9:f4:6b:15:fa:8a:9f:f9:be:9d:78:d2:e6:fe:da:
                    5c:f9:64:f4:2e:79:db:ea:7a:40:36:bc:c0:17:4a:
                    a1:6e:5c:7a:6c:34:0e:a0:78:b5:1b:9d:3e:a3:a1:
                    4a:e4:6f:02:e5:b7:1d:6d:38:37:c9:3e:03:ca:c3:
                    3c:a3:17:27:d2:66:5b:36:a2:67:1c:2e:d4:60:19:
                    07:8f:ac:50:30:18:f4:4a:72:cc:8c:d3:57:60:92:
                    87:5d:03:6a:27:15:68:af:1b:ff:08:b4:10:43:14:
                    78:9a:45:9c:8b:5f:97:62:80:4b:a6:e6:25:74:31:
                    b0:51:2f:02:22:5b:0e:96:09:e5:ac:45:7b:dd:c3:
                    75:df:c8:d7:0d:b4:ec:75:99:61:95:7b:01:ea:bd:
                    a8:98:cd:d5:1b:24:97:e6:66:3e:0a:30:c9:52:3d:
                    28:dd:96:ed:10:dd:a0:fc:2c:b2:a0:d0:b3:66:3b:
                    6b:66:9d:77:3c:cb:55:4a:96:6c:ab:1c:4b:d7:b7:
                    7a:14:8d:f4:bb:28:02:a8:bf:6b:11:cf:16:2d:a1:
                    98:3e:5c:7d:88:3e:ea:08:92:83:68:17:3c:15:12:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:25:D9:F7:E4:58:A6:4A:B3:E6:B3:B6:C5:2E:B5:34:4E:F0:8D
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266313a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:2f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:73:08:33:a1:ca:59:76:d4:46:e8:ed:99:3a:47:c4:df:
         34:49:9c:aa:41:dc:62:95:11:2c:da:de:d6:9b:e9:a4:94:f8:
         7a:71:78:eb:53:1a:01:a6:d5:b5:54:ae:1c:4e:85:9c:3a:b9:
         f0:71:6f:e4:f1:3e:ba:8e:f8:fb:d0:52:78:0f:ee:e5:d9:12:
         97:78:83:1c:5e:ff:2e:a1:c1:38:78:6b:69:05:3e:2d:cc:4d:
         7e:7c:b6:64:82:54:c8:fb:bb:1a:e8:60:db:a4:15:4c:77:9f:
         05:e9:43:d5:aa:70:0b:32:e5:53:52:09:7b:c3:7b:58:31:b3:
         b6:25:c5:30:73:b6:e9:18:ef:a5:c1:78:de:34:d2:d6:20:a0:
         bc:18:ff:2a:4d:0c:cc:5d:f7:b7:e4:9b:1b:55:fb:f4:3f:ae:
         d0:de:50:82:99:de:76:40:51:08:1c:60:bb:08:d2:e4:9e:f3:
         e2:d3:5c:12:04:58:80:10:ef:d8:4b:7c:d0:05:c1:6e:ca:bc:
         49:a6:31:eb:ee:74:bc:48:e3:94:1d:fb:bd:b5:aa:e0:0c:cb:
         3b:b9:a2:58:87:a2:f0:bc:87:44:ac:7b:ef:84:71:5f:4f:46:
         7c:a2:37:ca:48:ce:c0:f7:22:11:2d:fa:12:a4:17:18:d0:af:
         28:ae:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:54:55 2025 by rpki-client