Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0749FA3A7A3D2BD8B9B1F7526BC83EAA12B762696958C7AB9B40A04C53B2E894/0/323830313a303a3164303a3a2f34352d3438203d3e203532333738.roa
File:                     323830313a303a3164303a3a2f34352d3438203d3e203532333738.roa (raw, json)
Hash identifier:          rqJJk3gFmNdOcQY0oFuieCVmk5oKvFH9FxDglQF6oag=
Subject key identifier:   D6:45:60:53:23:A6:13:3E:E4:5D:CB:8A:57:F3:4B:F1:1C:6A:9E:10
Certificate issuer:       /CN=ED373736E415C736C723B7FD8F1548053909D188
Certificate serial:       4A30F290E57DD75C5AC03C89D14B122623F2C925
Authority key identifier: ED:37:37:36:E4:15:C7:36:C7:23:B7:FD:8F:15:48:05:39:09:D1:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED373736E415C736C723B7FD8F1548053909D188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0749FA3A7A3D2BD8B9B1F7526BC83EAA12B762696958C7AB9B40A04C53B2E894/0/323830313a303a3164303a3a2f34352d3438203d3e203532333738.roa
Signing time:             Tue 04 Feb 2025 18:02:16 +0000
ROA not before:           Tue 04 Feb 2025 17:57:16 +0000
ROA not after:            Tue 03 Feb 2026 18:02:16 +0000
asID:                     52378
IP address blocks:        2801:0:1d0::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:f2:90:e5:7d:d7:5c:5a:c0:3c:89:d1:4b:12:26:23:f2:c9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED373736E415C736C723B7FD8F1548053909D188
        Validity
            Not Before: Feb  4 17:57:16 2025 GMT
            Not After : Feb  3 18:02:16 2026 GMT
        Subject: CN=D645605323A6133EE45DCB8A57F34BF11C6A9E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:3c:3d:5f:63:71:d3:23:9f:d2:fd:c5:71:
                    27:35:64:23:7d:d1:7c:ec:70:cf:85:c7:b6:d1:db:
                    12:5d:00:97:37:e9:b1:30:e9:17:11:af:b1:ef:da:
                    76:53:1d:ae:80:ab:10:2d:d7:15:d7:08:50:72:a8:
                    b6:dc:b2:46:3c:5b:06:a0:be:0c:96:8c:74:71:6c:
                    f0:f1:54:e3:04:36:cc:87:b5:2b:15:e2:b4:dc:09:
                    c5:e0:c8:33:da:fb:ff:e2:74:28:71:63:73:57:05:
                    0a:e7:c6:53:73:9f:2d:60:d6:19:f8:5b:34:09:78:
                    b2:8f:b5:1c:92:c8:a0:d9:67:f2:85:84:3e:d5:70:
                    46:35:1d:65:a8:c9:3d:cf:a8:0f:e2:f5:df:d1:0f:
                    19:bc:d1:02:be:66:19:3b:a2:06:07:04:a9:5b:26:
                    4d:55:3b:b9:79:95:a8:34:4c:c7:63:af:11:6c:34:
                    64:a8:51:fc:cb:2d:cd:c5:a9:71:05:bf:f3:4b:b8:
                    b8:a3:bf:57:40:91:a2:f2:06:8c:26:84:db:02:c3:
                    aa:2d:65:11:f8:94:57:48:e8:22:84:e0:7b:41:b3:
                    29:1f:98:9d:08:39:09:e6:7f:60:8c:47:97:77:3c:
                    66:86:f7:01:f1:fc:bc:fe:39:55:88:93:5b:ba:43:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:60:53:23:A6:13:3E:E4:5D:CB:8A:57:F3:4B:F1:1C:6A:9E:10
            X509v3 Authority Key Identifier:
                keyid:ED:37:37:36:E4:15:C7:36:C7:23:B7:FD:8F:15:48:05:39:09:D1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0749FA3A7A3D2BD8B9B1F7526BC83EAA12B762696958C7AB9B40A04C53B2E894/0/ED373736E415C736C723B7FD8F1548053909D188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED373736E415C736C723B7FD8F1548053909D188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0749FA3A7A3D2BD8B9B1F7526BC83EAA12B762696958C7AB9B40A04C53B2E894/0/323830313a303a3164303a3a2f34352d3438203d3e203532333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:1d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:30:07:05:a7:bc:1e:34:8f:03:65:ca:de:c4:f3:84:bc:
         f0:04:b0:cb:42:e7:ce:f1:56:3a:d2:31:8c:ab:37:17:8b:f8:
         93:20:8c:a9:21:75:bd:bf:2a:64:62:75:c5:e2:cb:d3:c4:a3:
         99:47:0c:3a:82:8d:7b:5f:d5:0c:3e:26:0f:0e:dc:1e:56:ad:
         f6:97:ee:4f:95:5c:dc:b8:e3:04:36:8a:9b:46:58:47:5e:f7:
         6a:09:e1:1c:ef:88:f4:53:6d:c1:b5:a0:bf:78:79:b7:5a:da:
         4f:32:e6:32:aa:e1:59:2f:5f:80:d4:2b:65:77:7f:70:d7:0a:
         ed:c1:0e:43:83:a8:73:ad:41:2c:3d:08:3c:53:67:ae:da:b5:
         b2:33:a3:1d:e7:f1:3c:41:20:76:ce:4e:5e:7f:63:a0:5d:61:
         e1:27:25:c5:7c:40:a9:e0:4e:92:34:3e:bb:f7:2a:5e:57:95:
         da:b1:6c:4b:d1:9b:4d:b9:9e:08:f4:79:c4:9e:bf:7d:bd:bb:
         c5:33:a7:95:94:8c:a8:37:c5:ea:13:aa:f9:45:3a:54:17:24:
         60:43:d2:06:5e:c6:9c:4c:a0:8f:1f:5c:e0:90:4d:f1:c9:73:
         cc:fb:0e:7e:99:15:46:2d:8c:6e:be:f4:9b:b6:13:d7:e0:aa:
         25:0b:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----