Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a643a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a643a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          lK2Jgtx6ZZsYo0veAXLEJVeC0chnl46M53BRHoFqh4w=
Subject key identifier:   55:A7:A2:87:15:1D:9F:7A:28:AD:62:F3:C3:CA:B4:F7:72:43:32:D2
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       2D4E54B0222084B663AEDCA221BA487F7C8CA48D
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a643a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:46 +0000
ROA not before:           Tue 04 Feb 2025 19:59:46 +0000
ROA not after:            Tue 03 Feb 2026 20:04:46 +0000
asID:                     262191
IP address blocks:        2800:b70:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4e:54:b0:22:20:84:b6:63:ae:dc:a2:21:ba:48:7f:7c:8c:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:46 2025 GMT
            Not After : Feb  3 20:04:46 2026 GMT
        Subject: CN=55A7A287151D9F7A28AD62F3C3CAB4F7724332D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:11:0a:cf:2a:d1:80:22:ee:ee:87:e3:24:
                    45:5f:aa:a2:15:30:69:ef:97:09:4d:0a:55:09:46:
                    55:dc:5f:0c:62:b6:90:d1:88:c8:15:9c:fc:cc:1d:
                    85:04:3d:94:b9:2a:63:ff:04:a7:31:05:59:e3:9c:
                    1d:a6:7f:42:5e:90:56:cb:37:d1:06:7c:cd:a7:ed:
                    75:be:8a:d4:ae:0a:19:28:24:6c:10:04:cd:98:99:
                    61:28:de:d4:f3:06:6c:22:7e:82:62:73:b4:a3:f7:
                    a3:79:6e:0e:ba:32:71:01:7c:0a:3f:fa:a6:6e:00:
                    b4:34:24:d6:e5:95:ae:9b:07:4d:fe:52:82:c7:63:
                    0d:a7:de:53:37:e3:af:29:be:59:d3:76:9d:e9:a3:
                    29:f9:2f:b3:eb:5c:9c:29:38:63:70:f2:9c:b2:65:
                    29:c6:c6:bf:63:2c:f8:22:a1:f4:47:bd:3c:29:78:
                    5b:c9:b3:99:72:c1:47:9a:f6:eb:89:16:39:fe:f1:
                    e2:bc:88:68:76:77:ca:6b:78:a6:47:16:5b:1a:a5:
                    07:d9:3e:d5:18:74:c1:a1:b8:5f:5a:fb:08:46:8b:
                    e5:ac:8d:7b:15:2d:cb:9a:9e:c3:6e:d2:bd:84:bb:
                    06:92:2c:64:b6:95:c3:20:8b:07:0f:d4:7e:97:a0:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:A2:87:15:1D:9F:7A:28:AD:62:F3:C3:CA:B4:F7:72:43:32:D2
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a643a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:d1:5d:6e:c9:91:6b:a1:ef:33:39:9f:7a:df:80:70:ee:a3:
         4f:93:a0:7e:d1:b3:5f:f3:07:a8:00:5f:0a:73:d7:6c:6f:27:
         97:65:ee:74:5c:4b:0e:8e:a2:d6:81:da:76:ac:03:88:63:3e:
         51:8f:18:41:a3:d9:f6:ae:d1:ff:e5:94:14:0b:cb:b3:92:58:
         1f:46:d2:ec:aa:b0:ef:b4:fb:07:b8:81:36:d4:5b:af:d3:1a:
         b9:b4:b7:e9:66:25:64:9d:8e:5f:90:5c:2c:76:68:2e:58:13:
         c4:30:06:94:7c:b8:7e:fa:78:5c:bd:a6:b4:ff:f9:10:03:c6:
         b8:f2:f7:ed:44:23:55:b2:0b:1c:13:5a:4b:61:95:d2:bf:33:
         aa:04:5c:0d:fa:60:37:04:44:63:89:b4:93:c9:a8:79:05:85:
         b7:0a:dc:9f:97:4a:e4:75:27:5a:83:86:d2:33:c1:99:d7:05:
         6d:6a:42:4b:06:3a:d5:86:da:c0:be:54:90:f8:ac:c5:b8:34:
         03:dc:1e:27:8e:1a:b0:91:e5:8b:21:80:03:ef:11:b8:85:99:
         32:c8:e8:e7:d4:80:93:f4:21:81:d7:30:03:87:0f:4d:a1:10:
         fa:f5:9b:a2:36:f4:41:4d:64:80:d1:5f:46:4c:db:79:b7:0e:
         b8:4a:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:17 2025 by rpki-client