Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/6d996ba5ae4d67a3b2912ff5c78801b35dbbfe42.roa
File:                     6d996ba5ae4d67a3b2912ff5c78801b35dbbfe42.roa (raw, json)
Hash identifier:          zTe65gOpZnmj6ArC4PrTRgWjpsRlnu2R12rVYMAiOqk=
Subject key identifier:   66:B5:35:A8:45:35:65:8A:96:01:C1:73:5E:17:33:4D:AF:95:56:87
Certificate issuer:       /CN=0cbb85e42b2f4026a791ab4ac115547607eff761
Certificate serial:       0C2F5D
Authority key identifier: 5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/6d996ba5ae4d67a3b2912ff5c78801b35dbbfe42.roa
Signing time:             Fri 31 Mar 2023 01:25:28 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Thu 30 Nov 2023 03:00:00 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798557 (0xc2f5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb85e42b2f4026a791ab4ac115547607eff761
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2023 GMT
        Subject: CN=6d996ba5ae4d67a3b2912ff5c78801b35dbbfe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:01:c8:ce:7f:e6:c3:cf:c7:a4:6a:a1:91:
                    93:d9:22:73:a2:f5:ac:f0:0c:ab:6a:d1:79:e6:3c:
                    87:1c:f4:6a:c5:54:e5:b2:96:25:10:a5:2b:8e:ae:
                    03:97:c5:34:ad:b2:a5:f7:66:b6:a1:2b:03:e3:b7:
                    ac:fd:4e:19:f2:d9:8e:d1:18:e8:6c:20:65:76:99:
                    02:b4:78:7f:5c:70:5e:9d:3a:8c:c5:b5:60:b8:a2:
                    b4:56:64:38:55:1f:ca:bc:14:b7:61:ca:af:e4:e0:
                    f9:53:94:d6:83:43:c5:dd:d8:67:47:4d:2d:5d:bc:
                    81:c6:a9:e6:17:13:f3:c9:21:6f:99:6e:90:01:3a:
                    1c:de:88:1b:db:b8:95:07:30:c0:02:71:2b:7f:a2:
                    1d:c2:d0:4d:1d:59:63:b5:94:0f:42:73:1d:1d:83:
                    a8:9e:72:60:17:43:56:12:86:da:9a:e2:cb:25:85:
                    94:a8:20:b6:a8:d2:45:bd:3c:eb:06:97:3d:7d:59:
                    99:90:d2:86:b8:6b:f8:66:6d:d3:83:60:21:45:6e:
                    bf:48:1a:54:a7:8d:df:0a:23:a7:2f:a9:dd:5d:d6:
                    9f:ce:a3:0d:1f:09:d1:5c:9a:d4:98:4a:78:c4:28:
                    9b:0e:2b:2b:54:5f:dc:79:b3:a5:74:53:c6:2f:9d:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B5:35:A8:45:35:65:8A:96:01:C1:73:5E:17:33:4D:AF:95:56:87
            X509v3 Authority Key Identifier:
                keyid:5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/6d996ba5ae4d67a3b2912ff5c78801b35dbbfe42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:63:cc:79:bc:4e:1f:99:92:6f:82:5b:0c:68:21:da:9f:cd:
         56:96:f9:28:aa:3f:1e:77:ff:9c:a8:df:33:13:a1:f5:a3:cb:
         fa:96:2c:b3:2d:21:c5:fe:8e:ae:b9:d3:00:a1:73:61:00:f7:
         0b:20:73:bd:1f:3b:53:bf:f5:7e:2d:a6:06:61:82:8e:ad:32:
         ea:bb:a4:e6:ea:49:c0:dd:55:b1:1a:e5:a0:eb:e5:23:f2:c8:
         b3:73:8d:51:f3:06:0e:1c:21:50:3b:ba:58:6b:29:81:73:c3:
         bd:19:10:74:be:b0:f1:38:c2:ab:5a:af:b5:9f:9b:4a:5f:4f:
         32:68:60:4d:ef:97:6b:c9:14:eb:19:ce:60:cf:33:9d:c3:6f:
         34:4b:73:57:40:13:89:42:40:ff:50:4c:75:71:44:29:52:3b:
         cf:bb:75:36:f1:39:87:5c:43:ed:12:4c:69:6f:e8:d2:ae:45:
         35:aa:18:0a:e5:4d:da:71:15:e2:c2:c9:8c:3b:01:9d:0c:15:
         ba:00:e7:bf:cc:ce:c3:7f:c9:23:19:73:09:5c:7e:5d:b4:3c:
         9e:65:4f:58:bd:1e:f6:6e:df:7c:b9:42:23:02:96:86:90:fa:
         ed:4e:0b:29:5f:e4:b2:b4:17:21:d2:c0:f9:1c:9f:2b:78:40:
         0d:10:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:08:37 2025 by rpki-client