Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/323830313a63343a33383a3a2f34382d3438203d3e203138373334.roa
File:                     323830313a63343a33383a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          DX4GAa7jwzEKkQ+EPLcB6XTtHbbDogDs1CO+Fa425y4=
Subject key identifier:   01:F3:20:3F:77:35:30:88:6D:4F:85:85:8E:34:96:4E:88:B6:49:8F
Certificate issuer:       /CN=81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1
Certificate serial:       4A26D6A8DA1521077273035E4E1207C9E3E73B02
Authority key identifier: 81:DE:98:10:99:4A:B4:E2:D0:AC:7C:40:2F:FE:DA:14:C6:FD:92:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/323830313a63343a33383a3a2f34382d3438203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 20:02:51 +0000
ROA not before:           Tue 04 Feb 2025 19:57:51 +0000
ROA not after:            Tue 03 Feb 2026 20:02:51 +0000
asID:                     18734
IP address blocks:        2801:c4:38::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:26:d6:a8:da:15:21:07:72:73:03:5e:4e:12:07:c9:e3:e7:3b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1
        Validity
            Not Before: Feb  4 19:57:51 2025 GMT
            Not After : Feb  3 20:02:51 2026 GMT
        Subject: CN=01F3203F773530886D4F85858E34964E88B6498F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:ff:5a:b2:61:eb:fa:c9:da:30:4a:0e:8e:
                    18:e2:5d:74:5a:38:2c:9f:c5:95:72:36:a2:e4:1c:
                    ca:ec:ea:ce:99:a7:07:0e:91:64:3c:d2:21:fc:cb:
                    f2:a7:78:13:67:9a:02:eb:fc:81:f4:d1:3e:4f:5e:
                    e1:0b:b0:a4:3f:a9:ae:a6:18:08:f6:70:9f:b6:55:
                    4b:75:54:9c:35:69:45:05:d8:7b:1d:37:ee:b7:f2:
                    97:28:55:1a:a3:55:e6:08:9d:ef:93:4d:6a:bb:18:
                    f6:6c:bb:6e:7e:5b:5c:42:74:0e:8e:78:df:f5:5a:
                    c1:f7:f4:a1:f5:20:46:44:ed:b4:82:77:05:4b:88:
                    d1:6f:9d:7f:82:aa:67:d6:d2:3b:4f:85:85:71:58:
                    24:27:37:b6:e6:cd:77:6b:4f:f7:dd:bd:ed:21:b8:
                    b5:06:8f:13:1a:ee:56:1f:57:a6:f2:f7:ad:22:5f:
                    b8:e4:28:13:da:e6:11:0b:b6:8f:ae:0d:4f:95:5e:
                    2b:e3:5e:76:fe:9a:8e:31:04:b2:ba:ec:fd:f1:fb:
                    b8:e2:c0:cc:f7:c5:ca:13:29:e7:b4:a7:0e:d7:f8:
                    5c:89:ad:d9:72:bc:82:3c:d3:08:e5:e1:c5:51:7e:
                    27:9c:ba:78:34:3a:62:5b:ae:4b:71:54:bc:9a:a9:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F3:20:3F:77:35:30:88:6D:4F:85:85:8E:34:96:4E:88:B6:49:8F
            X509v3 Authority Key Identifier:
                keyid:81:DE:98:10:99:4A:B4:E2:D0:AC:7C:40:2F:FE:DA:14:C6:FD:92:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/323830313a63343a33383a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:38::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:5e:6a:2c:70:4e:5d:79:e2:f0:d1:dd:2b:63:ca:6c:03:
         e8:12:d6:e5:33:97:1d:3c:7b:3b:73:b3:03:52:6d:4e:8e:cd:
         28:a1:d6:de:53:b7:f6:5b:e5:7b:d1:22:14:68:10:22:94:3d:
         8f:d1:89:93:7e:03:d4:2f:76:ad:65:4c:e9:5d:f7:af:2f:13:
         7b:66:70:11:11:3f:bb:da:75:28:91:b9:6e:c4:87:fe:10:37:
         73:92:d3:58:94:4b:2c:15:87:d1:3a:d1:23:57:47:47:13:47:
         3e:e2:1c:8d:c9:c2:43:f0:70:b4:aa:53:32:d5:5b:f6:15:89:
         82:d7:cc:d6:17:d4:86:85:85:b6:f6:0b:c5:21:d5:fe:7f:6b:
         c0:a6:b0:8c:14:6a:ca:a9:89:e2:6c:9f:36:b9:b3:b4:ce:4a:
         f8:42:62:e2:2a:8a:8b:63:46:25:ad:70:aa:a1:da:d2:70:d0:
         a4:71:87:b1:6c:a8:7d:91:af:c9:15:6a:71:87:1f:d6:b8:b7:
         aa:ca:4a:62:ac:a8:e0:da:86:9c:f2:ec:6b:df:33:d7:65:d4:
         c2:41:85:ba:66:71:66:9c:9f:02:21:63:08:f6:bc:61:7b:16:
         92:04:1d:61:55:62:0c:13:8d:10:83:d3:ff:f8:80:cb:71:0c:
         97:b2:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:01 2025 by rpki-client