Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203138373334.roa
File:                     323830363a3261303a373a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          mDG2hX6XZFQpN3YJqOTf/64HTO2zuqgBQ1kIx0jesrM=
Subject key identifier:   03:44:61:1C:05:52:D3:54:6C:0A:50:02:86:81:E0:84:BF:C6:D4:75
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       2D115F3B69DC42D56CF85A876F46BF69665D0486
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203138373334.roa
Signing time:             Thu 12 Sep 2024 11:45:00 +0000
ROA not before:           Thu 12 Sep 2024 11:40:00 +0000
ROA not after:            Thu 11 Sep 2025 11:45:00 +0000
asID:                     18734
IP address blocks:        2806:2a0:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:11:5f:3b:69:dc:42:d5:6c:f8:5a:87:6f:46:bf:69:66:5d:04:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:00 2024 GMT
            Not After : Sep 11 11:45:00 2025 GMT
        Subject: CN=0344611C0552D3546C0A50028681E084BFC6D475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:0e:d9:58:8a:8f:1e:b1:49:c7:a3:7b:7b:
                    20:b3:99:41:34:8e:a5:45:e9:c4:84:4b:72:79:10:
                    b5:88:66:95:ae:d7:bd:e6:a7:72:fc:c5:0f:b5:42:
                    58:c1:08:ab:94:5b:1b:ce:fc:65:dd:4f:9d:ab:9c:
                    33:c8:ff:3e:7b:f9:b6:70:5a:36:59:74:bc:00:af:
                    17:8e:1f:e9:a5:39:85:70:27:bf:f5:56:6a:ac:a9:
                    18:8c:c3:e3:94:a3:b1:e4:ce:3b:22:a2:bf:78:27:
                    c0:19:ed:b5:de:bb:1d:01:9a:50:ed:ab:b3:0a:60:
                    bf:46:5c:f9:25:37:a2:a9:c9:71:99:77:16:12:61:
                    63:d4:65:a8:23:a0:e6:75:74:df:40:2c:0b:6b:06:
                    07:ff:e2:5a:a7:95:05:1c:10:18:87:83:fb:8b:87:
                    ec:a0:c7:27:67:9a:c4:7f:af:19:39:60:28:97:3a:
                    02:f2:dc:22:aa:e2:c3:38:9c:a5:6a:0e:51:62:5b:
                    7a:74:04:ea:47:e8:75:a5:d1:32:34:8a:43:d7:0e:
                    ea:a6:0d:5e:c8:6b:6a:c6:cb:72:df:73:58:f3:46:
                    f4:92:cf:56:27:2b:dd:56:74:14:d6:e5:2e:2a:71:
                    ac:f5:2a:ef:a3:8d:c2:f8:7b:76:ad:c4:30:d0:78:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:44:61:1C:05:52:D3:54:6C:0A:50:02:86:81:E0:84:BF:C6:D4:75
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:06:88:2b:4d:4d:36:e5:29:42:ad:11:dc:b1:01:2c:3e:
         4d:8a:54:1f:75:e0:1b:4f:20:46:b5:8c:e0:a3:c3:56:87:4b:
         c0:bd:d8:73:f5:83:67:ed:d4:ea:81:5d:45:e8:e9:43:f3:6e:
         b6:82:03:ef:51:04:8d:85:1a:09:c6:f4:4c:7c:d9:80:ff:95:
         4f:4a:e5:c8:2e:d1:26:73:9a:67:bc:c8:c7:30:95:5a:8f:92:
         e8:b9:13:74:3f:7e:c4:89:9a:79:10:3b:e7:ea:39:87:b1:89:
         3e:6b:fb:38:10:9b:0e:a1:f6:64:2f:53:c0:90:3f:bb:af:13:
         ef:5d:4c:cd:e4:91:0c:1f:cc:f7:d7:1b:83:1a:ca:ca:26:77:
         64:95:34:5d:a0:63:65:b5:49:84:b6:0b:99:bd:ab:21:9b:58:
         57:d4:d4:44:af:27:59:32:8b:5d:3b:4e:d2:0b:63:06:9d:12:
         68:bf:88:12:91:7f:3a:0e:9c:38:1a:61:1c:97:2e:b0:bc:85:
         89:c6:9e:34:37:e8:e5:f6:5e:88:47:43:6d:5b:9c:6b:58:3b:
         55:0d:31:c1:f3:8b:8c:b2:0d:70:22:f3:ab:e5:9e:52:70:80:
         3a:d7:a9:a2:17:ba:31:76:a3:b5:d6:4e:09:42:09:fa:ce:80:
         62:91:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:53:50 2025 by rpki-client