Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa
File:                     323830313a3137633a3a2f34342d3438203d3e203134303830.roa (raw, json)
Hash identifier:          SSjroohb42lcb7JMQXcIS9oUPQ8soduTq6fXzIIQ+ps=
Subject key identifier:   3C:FE:81:4E:2E:27:42:C6:8E:8E:A1:A9:95:30:7E:71:E9:C7:1C:E1
Certificate issuer:       /CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
Certificate serial:       39CFF010E4C526414C55DD6123AD4EB50F22E366
Authority key identifier: 81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:04:00 +0000
ROA not before:           Tue 04 Feb 2025 17:59:00 +0000
ROA not after:            Tue 03 Feb 2026 18:04:00 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cf:f0:10:e4:c5:26:41:4c:55:dd:61:23:ad:4e:b5:0f:22:e3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
        Validity
            Not Before: Feb  4 17:59:00 2025 GMT
            Not After : Feb  3 18:04:00 2026 GMT
        Subject: CN=3CFE814E2E2742C68E8EA1A995307E71E9C71CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:1b:ee:34:29:cd:95:24:de:d9:28:82:d4:
                    27:77:52:6c:6f:36:c8:82:b2:1f:89:a3:35:f4:11:
                    12:14:97:51:a1:13:92:60:a9:d6:a0:37:43:bf:f9:
                    1a:0d:80:8c:bc:d9:6e:8d:9c:ef:8b:cb:74:a9:ea:
                    fb:49:c0:fd:d9:fa:48:b1:74:f8:ff:a8:4b:55:1d:
                    85:50:03:76:14:60:f6:3a:d2:74:f2:8e:65:6d:af:
                    08:e2:74:88:92:ea:84:45:96:3d:90:5d:60:4b:06:
                    e1:c3:39:7f:ec:2b:08:3a:d2:29:c2:7a:87:60:58:
                    94:59:9b:f4:74:65:9e:8f:a1:44:90:30:e4:f1:cb:
                    7f:ba:b8:66:e7:cf:e4:1f:38:cc:67:b5:68:09:12:
                    42:7b:f1:4d:b4:68:8f:d9:27:ac:a5:ed:bd:ad:97:
                    dd:c0:bc:7b:ff:6f:bb:27:17:c9:cd:fb:ba:98:ad:
                    f9:d4:15:b6:8f:c8:5b:9c:d8:ae:e4:88:83:e5:8a:
                    53:54:1e:64:25:6c:82:18:45:71:76:57:ac:90:27:
                    c5:8f:f5:f9:ab:c7:4d:36:9d:1b:1c:91:4a:87:65:
                    cf:d1:ef:80:f0:3e:f4:89:b2:23:8a:53:5f:c0:a6:
                    32:f3:d8:a4:44:20:36:a5:c2:c3:ef:15:58:c2:1e:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:81:4E:2E:27:42:C6:8E:8E:A1:A9:95:30:7E:71:E9:C7:1C:E1
            X509v3 Authority Key Identifier:
                keyid:81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:2f:4a:59:7e:27:1b:42:4e:97:37:c4:fd:85:88:5f:17:
         db:71:3b:66:05:20:59:67:0e:45:f9:65:4b:db:2d:48:75:67:
         62:f7:f9:2f:0b:2e:8d:4e:bf:dd:9f:96:71:94:70:d6:30:c5:
         7c:11:d7:82:5b:00:27:ef:99:b7:cc:9b:f2:0b:35:2c:d2:b5:
         66:cb:64:2c:d3:82:3f:3e:a4:5a:bc:1f:bd:86:a0:36:e3:bf:
         7d:d1:9e:a3:ba:88:02:9e:ff:f5:ce:7a:48:46:b2:9c:ed:94:
         4f:f9:f5:17:d0:64:28:8d:a5:bf:7e:97:c7:26:e1:53:6e:e6:
         3f:f1:fa:6c:ae:f8:b7:35:d8:a3:ae:96:29:ec:c1:64:da:12:
         5d:d0:64:db:2b:b8:49:3f:97:23:52:7b:d8:1d:2c:3a:e5:de:
         b3:54:50:3a:1e:62:17:eb:23:0a:fc:a5:00:91:50:1c:fb:1c:
         f3:59:eb:fd:c6:9f:30:3e:52:7b:bb:a0:e1:0a:b6:1c:b5:9e:
         c8:8d:c7:41:80:75:ef:01:64:f6:77:ce:49:4c:2e:4b:d7:6c:
         4f:50:fb:af:fb:0e:ed:0e:04:fb:56:66:68:e6:35:08:17:32:
         eb:c8:0d:ab:d3:07:be:90:d1:7b:0f:9c:6a:ae:b3:62:7c:8e:
         f0:d9:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:47 2025 by rpki-client