Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31343a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a31343a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          aH7ENM4PZ23hLAF6T2tfxQ17kQ3qEr8JchZDnjSM65A=
Subject key identifier:   F1:66:03:9B:AA:E6:D8:62:DA:AC:71:95:4D:13:1D:33:B9:84:6C:B9
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       48C53ADDCEC23FF3688DF321CAA6CFA4ED30424A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31343a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 27 Feb 2025 16:15:00 +0000
ROA not before:           Thu 27 Feb 2025 16:10:00 +0000
ROA not after:            Thu 26 Feb 2026 16:15:00 +0000
asID:                     18678
IP address blocks:        2800:310:14::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c5:3a:dd:ce:c2:3f:f3:68:8d:f3:21:ca:a6:cf:a4:ed:30:42:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 27 16:10:00 2025 GMT
            Not After : Feb 26 16:15:00 2026 GMT
        Subject: CN=F166039BAAE6D862DAAC71954D131D33B9846CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:35:29:22:50:a5:d7:28:6b:0c:3a:d2:55:
                    74:c4:0b:3e:e2:c2:fd:50:cd:54:f5:05:96:14:b8:
                    79:18:11:90:6a:1e:c0:a6:7e:f0:96:db:09:92:43:
                    1d:30:eb:71:4f:ee:a2:4b:90:0a:dc:b9:6c:0b:9d:
                    be:d8:36:9e:2b:20:f2:0f:a1:3d:21:c5:ee:2c:b0:
                    63:a5:52:43:a1:36:ec:ab:ed:db:8e:80:fe:d5:4a:
                    37:24:24:54:96:df:0d:91:12:64:ca:6c:70:27:0a:
                    83:e7:f6:22:13:0e:6d:72:d7:8f:2b:4f:07:8d:f4:
                    7f:2d:9c:8a:f7:24:57:07:6b:86:65:4e:20:57:8b:
                    0a:ae:7a:77:48:f5:d2:2b:07:ce:16:5c:46:c0:8a:
                    5c:fb:52:e2:89:45:42:93:a8:60:d9:fa:c3:00:76:
                    66:0b:79:6e:3d:3e:e1:42:3b:f5:fa:ac:73:b4:f8:
                    a3:0d:78:66:5f:05:19:11:3a:4e:9a:fd:cd:77:3c:
                    5c:19:64:f1:0c:03:76:55:5d:b6:c9:3a:63:25:3b:
                    c2:7f:63:da:2d:bf:55:62:a2:8f:b8:03:54:93:f6:
                    a5:0e:e4:81:5f:0b:7e:8f:e8:99:39:35:9c:dc:40:
                    b9:9e:0d:c1:38:76:80:41:1a:63:85:e2:11:ef:2b:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:03:9B:AA:E6:D8:62:DA:AC:71:95:4D:13:1D:33:B9:84:6C:B9
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31343a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:99:db:35:c3:70:bc:7a:17:88:57:da:43:4e:00:51:8c:
         00:61:cb:53:5c:94:da:4e:70:e5:c9:28:cc:08:5e:83:9f:44:
         a4:d9:a2:c2:31:ad:f2:ae:c6:3f:1c:0f:cc:4e:a0:62:f3:06:
         45:5b:7c:93:c9:f3:72:27:06:92:29:d8:92:d4:7f:ee:98:07:
         18:d7:f8:06:42:13:0a:44:1e:04:52:b7:13:9e:9f:4f:cd:a9:
         7c:5f:91:53:03:20:30:44:cf:d1:e2:71:66:2b:de:23:7c:6d:
         5b:53:98:cb:3a:ad:54:ee:95:b0:85:7c:78:24:e6:6f:2c:e0:
         e7:0d:e8:ee:bc:3e:89:20:0d:a6:68:95:c1:f7:82:73:25:46:
         eb:a3:cf:07:6f:ab:11:35:7d:7a:c3:75:8e:c5:63:6c:f3:b8:
         4d:4d:c6:ff:43:c2:71:4d:c7:18:52:30:d7:a5:38:19:89:16:
         1c:0e:91:ac:c6:fb:99:2b:45:8d:41:74:b2:13:1c:d1:bd:68:
         d2:e9:43:f5:74:c1:40:86:47:0e:71:7d:29:fb:02:97:33:f6:
         fb:1d:b8:6f:76:c7:cb:9c:c2:17:3c:fa:99:4f:ae:fc:98:cd:
         a7:ac:9e:ad:f0:2f:f0:4a:db:98:16:ab:49:fd:02:7a:20:f5:
         a3:6e:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:30 2025 by rpki-client