Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a333a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a333a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          jKBQsFckr5+zWKp14F18lYPgyU8jheWRJCet7Fufztc=
Subject key identifier:   6A:42:7A:C0:B1:31:A5:B4:1B:C4:C7:AA:71:2F:0E:49:3C:43:E8:1F
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       022C55E080A3A6721F97B3C4033CC149E3E81B16
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a333a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:03 +0000
ROA not before:           Thu 12 Sep 2024 11:40:03 +0000
ROA not after:            Thu 11 Sep 2025 11:45:03 +0000
asID:                     28548
IP address blocks:        2806:2a0:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2c:55:e0:80:a3:a6:72:1f:97:b3:c4:03:3c:c1:49:e3:e8:1b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:03 2024 GMT
            Not After : Sep 11 11:45:03 2025 GMT
        Subject: CN=6A427AC0B131A5B41BC4C7AA712F0E493C43E81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:a1:59:40:c6:3b:36:85:3c:c5:48:48:17:
                    b5:6b:b7:84:bd:39:04:5e:46:5c:1c:f4:2b:c4:5c:
                    e7:d8:23:1c:27:60:77:4d:5c:94:65:99:09:4b:18:
                    e4:1d:47:1e:e2:21:d5:78:e3:44:69:11:f5:b3:07:
                    8d:2d:c4:f7:15:53:af:ce:9b:b4:40:ca:a3:34:de:
                    62:c7:d3:de:a8:2e:bf:d5:db:d6:01:56:f6:a0:9e:
                    07:40:20:a7:6a:2f:fe:6a:46:8a:c3:ea:37:75:1c:
                    42:7c:2a:55:11:6a:42:c9:d3:d7:a0:8c:4e:49:26:
                    2c:bd:47:ef:a0:2d:9c:b7:fd:37:93:9d:53:15:36:
                    ca:e1:0b:ed:a3:ae:6d:42:e1:b6:d9:7d:4f:7e:36:
                    b8:51:24:7e:24:56:00:78:3e:fe:c6:a4:c8:a6:a8:
                    7b:c4:c1:88:7d:76:f3:e9:1b:a2:f4:65:89:ed:6a:
                    e1:f9:dd:1f:4b:24:5a:52:6d:60:9f:ea:39:d6:de:
                    8a:96:bd:56:c8:a1:85:bf:59:b0:57:c2:e9:e2:c5:
                    b3:80:8d:96:99:f3:45:e8:6c:79:f2:e3:6f:38:fb:
                    0e:02:46:66:80:9b:9f:95:c1:cf:47:73:99:7e:19:
                    a5:e8:22:93:6b:ba:b5:32:7d:3b:8f:97:0c:6b:ea:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:7A:C0:B1:31:A5:B4:1B:C4:C7:AA:71:2F:0E:49:3C:43:E8:1F
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a333a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:d0:a6:c8:d8:32:a1:e9:08:cb:b5:16:e7:bf:e1:34:ad:
         30:8e:c2:3c:c6:e2:cd:67:92:a0:60:9b:f8:18:8d:b9:a3:ef:
         fa:2c:aa:dd:e8:de:2a:65:a5:50:bf:1d:e4:3c:e8:9b:f1:06:
         0b:55:44:c9:3a:47:ed:a2:c7:2c:7a:8f:ff:85:48:ae:1d:75:
         1f:ca:5a:80:ca:e0:95:cc:a5:88:b5:54:e7:38:ab:d1:14:8e:
         9e:cf:e2:e5:b7:33:9f:8c:05:a2:d5:39:61:25:10:b3:98:38:
         ce:9d:cb:20:38:aa:81:ba:a0:a9:05:56:2a:04:53:0a:02:7a:
         0b:62:ba:33:34:a4:65:d4:ed:0a:af:e7:4a:3b:f3:b1:cf:04:
         95:6a:f3:76:82:37:9e:91:6e:9c:8a:ce:6a:9b:c5:02:16:d2:
         ec:57:44:6d:f7:1b:f0:cb:7f:32:b2:a2:1d:95:e8:44:9b:c9:
         93:7f:23:01:d8:24:df:da:8a:3e:ef:32:9a:99:a7:95:74:09:
         13:a0:af:8f:16:db:75:94:e0:a8:c3:90:42:5a:fb:0e:a5:1d:
         98:10:a8:81:a9:fc:39:e5:5b:11:82:d6:5f:5a:7c:e3:e4:56:
         e1:0e:0b:f3:95:73:06:be:1c:61:cb:6c:da:c5:a0:0c:97:e2:
         d1:ec:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:52:43 2025 by rpki-client