Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/323830313a303a3430303a3a2f34382d3438203d3e203532343131.roa
File:                     323830313a303a3430303a3a2f34382d3438203d3e203532343131.roa (raw, json)
Hash identifier:          ohoWB4bBDn1RMByGGy13oiRoxhccQTfhhSkUbAQL5XA=
Subject key identifier:   B6:A3:CC:51:DF:81:64:A8:9E:12:54:DE:0C:69:96:10:7B:38:73:B8
Certificate issuer:       /CN=2E16CB690081446A4FC8F68087C82B93D3803526
Certificate serial:       0CFAFB43C94AF3BBEC3774924F017BC739869C06
Authority key identifier: 2E:16:CB:69:00:81:44:6A:4F:C8:F6:80:87:C8:2B:93:D3:80:35:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E16CB690081446A4FC8F68087C82B93D3803526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/323830313a303a3430303a3a2f34382d3438203d3e203532343131.roa
Signing time:             Tue 04 Feb 2025 18:46:28 +0000
ROA not before:           Tue 04 Feb 2025 18:41:28 +0000
ROA not after:            Tue 03 Feb 2026 18:46:28 +0000
asID:                     52411
IP address blocks:        2801:0:400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:fb:43:c9:4a:f3:bb:ec:37:74:92:4f:01:7b:c7:39:86:9c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E16CB690081446A4FC8F68087C82B93D3803526
        Validity
            Not Before: Feb  4 18:41:28 2025 GMT
            Not After : Feb  3 18:46:28 2026 GMT
        Subject: CN=B6A3CC51DF8164A89E1254DE0C6996107B3873B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:4c:7f:d2:5b:ec:24:6d:1b:66:a9:07:68:
                    ae:b8:57:aa:b8:74:61:20:69:5a:e5:fe:49:69:45:
                    af:0f:a0:08:1e:51:ed:f4:90:69:b7:bc:bf:2c:e3:
                    3d:ee:fe:aa:e9:92:ea:82:99:96:32:bd:5b:b9:37:
                    07:cb:7f:82:05:e8:79:54:e2:27:11:7c:91:24:2b:
                    7a:76:8d:d5:a5:55:12:e3:65:33:9f:aa:3a:cc:5e:
                    ec:45:5d:9b:e8:74:da:d9:51:ab:04:93:57:92:c6:
                    8d:5d:d5:3c:bd:79:a7:2c:3b:a9:77:93:b8:2b:24:
                    74:71:3a:84:47:2e:d8:fa:c5:db:de:2e:16:d1:6e:
                    b2:86:29:cd:d7:c0:8a:0a:89:8b:8a:93:00:11:ca:
                    17:05:5c:30:da:15:22:2c:6e:7a:cf:fb:b5:de:f3:
                    80:ca:73:6d:fc:58:61:2e:19:8d:86:92:34:07:9d:
                    81:c2:7a:33:5c:fd:61:54:70:87:15:45:0d:e1:19:
                    ca:81:83:83:83:29:38:cf:bb:f2:74:b2:96:1c:2d:
                    d1:e4:fc:04:89:de:3e:c9:0a:3d:72:1b:13:02:13:
                    f7:6a:37:88:5b:c4:11:72:6a:3c:c6:ab:56:dd:23:
                    d4:bf:db:f0:b5:e6:42:8b:6e:72:6a:4c:87:5b:fc:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:CC:51:DF:81:64:A8:9E:12:54:DE:0C:69:96:10:7B:38:73:B8
            X509v3 Authority Key Identifier:
                keyid:2E:16:CB:69:00:81:44:6A:4F:C8:F6:80:87:C8:2B:93:D3:80:35:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/2E16CB690081446A4FC8F68087C82B93D3803526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E16CB690081446A4FC8F68087C82B93D3803526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/323830313a303a3430303a3a2f34382d3438203d3e203532343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:f1:65:68:66:5d:bf:d5:31:63:10:6f:52:38:ca:bc:47:
         07:a7:0a:d1:4c:c1:b5:f4:54:f0:fc:51:93:6a:3b:cf:d3:29:
         2c:b6:59:b3:82:35:e1:82:d4:84:2a:7a:d9:fa:b7:d5:d3:b2:
         9f:57:be:41:ff:68:a5:cf:23:2e:12:44:ae:d5:7d:7a:3c:d1:
         e9:3e:dc:fc:9e:f6:fc:b6:89:88:81:2c:3e:93:4b:aa:3c:b6:
         81:5e:7f:2b:b1:8b:0a:d2:5c:59:0a:43:ae:4a:62:9d:43:47:
         5b:58:b4:71:25:5f:7e:06:d7:d1:14:04:f7:18:7f:69:91:f5:
         33:46:07:88:2f:0f:18:26:b7:d0:8c:8e:d0:f7:48:4f:ab:8f:
         d7:97:ab:45:de:9d:f3:83:76:2f:34:97:01:90:27:24:96:eb:
         85:7f:b3:8f:f5:41:a6:69:32:cf:fd:01:ff:4a:8b:0f:eb:21:
         df:a9:82:ec:1a:5f:0d:3c:87:0a:b3:ec:b9:f0:08:60:cd:6c:
         61:38:9e:8d:a6:25:82:e8:d6:46:51:8c:ed:64:51:aa:44:95:
         d5:72:e3:81:e4:bc:a9:62:77:2f:aa:45:07:92:d9:8b:f4:c5:
         06:d3:45:db:a6:97:07:96:b8:81:6b:06:75:15:4b:9d:1f:4c:
         e2:80:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:42 2025 by rpki-client