Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266333a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a3266333a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          wuRgyHtNqar/2/M5+i4OLUmK7Dnj8n2AJAMETGCzM+o=
Subject key identifier:   B0:F0:26:80:E5:F7:93:38:CE:0C:C5:9A:91:01:56:B0:5E:46:FB:0C
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       34D3CA974DC66D22C9F27372B5C46E10BDCB54F3
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266333a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:04 +0000
ROA not before:           Thu 12 Sep 2024 11:40:04 +0000
ROA not after:            Thu 11 Sep 2025 11:45:04 +0000
asID:                     28548
IP address blocks:        2806:2a0:2f3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d3:ca:97:4d:c6:6d:22:c9:f2:73:72:b5:c4:6e:10:bd:cb:54:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:04 2024 GMT
            Not After : Sep 11 11:45:04 2025 GMT
        Subject: CN=B0F02680E5F79338CE0CC59A910156B05E46FB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:c7:e6:fd:d0:27:52:32:15:48:e2:ea:01:
                    19:de:1b:2e:f9:ab:e0:f4:39:af:69:65:21:1d:4f:
                    dd:43:6d:a1:fe:30:52:33:f5:22:b7:d6:ec:57:96:
                    4a:f3:ec:44:ec:75:8e:7c:9c:61:a4:f8:db:7d:ef:
                    d1:7b:bd:8f:a5:3d:39:f8:04:b7:0a:fe:01:26:b8:
                    2c:a9:da:7a:c5:ce:82:7d:5f:13:e2:54:a5:cb:4b:
                    de:3f:d1:24:35:13:b1:6d:e1:32:98:ce:b9:55:ea:
                    db:df:08:c9:e2:b5:9c:78:b5:d6:c8:31:01:73:40:
                    ec:b2:df:8d:32:36:a2:37:c6:4b:0e:4c:68:58:e5:
                    d5:da:a6:eb:2c:7d:30:55:a3:0d:8e:bd:10:3f:6f:
                    29:d5:e2:51:c8:64:59:46:04:9a:ad:94:91:df:60:
                    21:c9:34:a6:6d:1a:7c:ff:2d:31:fa:ca:84:bd:f4:
                    b5:91:4f:94:03:ed:46:3b:a7:d2:b1:6c:d9:17:a4:
                    33:8a:1d:ed:0b:20:4d:64:1a:be:14:fb:4e:93:b0:
                    0c:f2:e9:3d:6f:db:d8:f7:87:3a:98:4f:52:11:dc:
                    c6:bb:fe:ab:48:ee:63:da:fd:9c:25:c5:74:ad:6a:
                    54:b6:85:04:84:06:a5:fb:7c:92:92:20:00:ac:fc:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:26:80:E5:F7:93:38:CE:0C:C5:9A:91:01:56:B0:5E:46:FB:0C
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3266333a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:2f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:7e:1b:6c:81:3c:9c:df:09:aa:8c:be:b3:af:f5:13:cf:
         87:26:66:7c:00:48:9b:0d:33:9c:69:83:b7:da:b3:63:ef:04:
         02:5b:5b:a3:fe:a9:19:7b:a5:bc:a6:4d:17:a2:c1:e0:8a:48:
         67:0c:71:5a:b5:f3:e5:94:8a:84:5f:6c:77:f4:36:41:26:aa:
         3e:a5:93:8d:17:cb:45:f9:40:96:b6:1d:94:15:a7:52:fd:4e:
         f8:52:25:b1:52:2b:03:b3:0b:67:dd:ca:52:31:57:89:b8:24:
         76:48:83:5a:45:aa:ae:95:05:6d:53:b2:4d:01:ec:c7:a7:58:
         f7:28:23:d8:5e:d8:fa:bb:cf:18:3b:ce:27:6e:fa:60:87:73:
         b0:e7:50:76:56:7d:7b:d1:d3:d3:64:67:71:20:ff:09:f9:d3:
         77:6a:af:a2:4a:37:af:0c:a1:bb:7c:b1:c2:9d:5a:ab:d9:28:
         27:5c:99:45:5d:2c:67:3e:51:d9:df:c0:38:61:8c:f3:aa:0d:
         9a:2d:8c:6c:33:0c:86:ea:ac:b8:d7:85:d7:33:7d:14:29:f9:
         3c:7b:d1:a0:ab:3a:b4:37:a5:04:be:0a:2c:d7:09:48:dc:11:
         16:df:e8:f2:b3:83:03:67:7e:ad:99:63:3e:6b:10:57:a6:aa:
         db:d8:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:59:49 2025 by rpki-client