Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa
File:                     323830313a3131393a3a2f34382d3438203d3e20323732393139.roa (raw, json)
Hash identifier:          lRDELpO3LdMpdiDbFBFI0tsB1vhL50unw3wbHgjyaQs=
Subject key identifier:   4A:33:EE:C1:F2:E4:F0:70:37:CF:10:80:26:77:11:02:20:9A:3B:85
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       51E18F128E8C5A766A21340ED69B9AB2AF6A17AA
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa
Signing time:             Tue 04 Feb 2025 18:38:23 +0000
ROA not before:           Tue 04 Feb 2025 18:33:23 +0000
ROA not after:            Tue 03 Feb 2026 18:38:23 +0000
asID:                     272919
IP address blocks:        2801:119::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:8f:12:8e:8c:5a:76:6a:21:34:0e:d6:9b:9a:b2:af:6a:17:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Feb  4 18:33:23 2025 GMT
            Not After : Feb  3 18:38:23 2026 GMT
        Subject: CN=4A33EEC1F2E4F07037CF108026771102209A3B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:3c:19:eb:aa:17:cb:88:14:2b:b0:77:63:
                    25:5f:ef:19:0d:cb:cf:03:f1:68:2c:f0:64:2f:fa:
                    62:90:74:46:15:16:75:d5:fa:79:07:fa:11:ce:bf:
                    1e:57:35:ba:89:16:a3:d7:06:46:45:06:59:f6:f8:
                    81:85:96:9d:36:69:a7:80:d7:58:6b:b7:33:ac:3d:
                    32:43:50:8b:b0:57:47:0f:4f:9e:8c:e1:13:b3:78:
                    72:5f:7e:2b:4c:5c:00:a2:af:5e:51:43:95:3e:d2:
                    30:83:5d:7d:27:f0:8e:33:7d:f7:3a:ae:7a:84:9c:
                    20:26:01:9f:dd:3d:4a:58:d4:da:a5:da:2e:4e:0c:
                    7c:50:85:7d:f9:f1:93:05:a3:d6:e4:3a:9d:c3:dd:
                    f2:0d:92:a0:21:5d:82:a3:61:11:84:86:34:83:94:
                    2d:a4:a7:cc:8d:40:92:aa:f4:ff:0b:d4:8d:c4:dc:
                    f6:33:66:a6:16:47:73:8c:f6:cc:24:a5:2f:78:ee:
                    c1:e2:89:08:dc:08:68:af:0a:85:45:78:04:e4:07:
                    92:c7:a0:cf:45:af:a4:4c:fe:7a:39:9d:74:59:42:
                    62:72:81:94:7d:94:fa:58:9f:8e:06:26:20:7f:92:
                    12:8c:51:06:0e:21:28:e0:d9:63:f0:3f:bc:1e:5c:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:EE:C1:F2:E4:F0:70:37:CF:10:80:26:77:11:02:20:9A:3B:85
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:df:95:c2:f5:d1:33:a9:ae:64:ea:a5:c7:c4:8b:fd:b4:
         90:37:06:db:72:f3:7d:40:4b:78:23:2e:10:42:ec:43:70:51:
         76:cf:a2:e8:c3:ab:f7:6a:a2:46:e8:36:9a:cc:98:70:a5:bc:
         68:f6:80:a0:16:fb:a8:5b:db:71:7b:32:60:c4:57:a2:63:70:
         ac:d8:fb:71:57:08:46:7a:2b:71:39:09:45:54:a1:37:f4:b0:
         0d:e5:8b:f7:bf:25:56:58:82:a0:bc:ae:ad:69:ec:96:20:ef:
         60:7d:f6:51:c5:2e:63:68:83:4c:27:e5:f8:0b:36:98:92:39:
         cb:f8:9e:6d:fa:31:32:e6:bd:82:bd:c8:a4:42:1c:99:8e:78:
         30:47:fe:d2:98:53:f0:e3:cc:ca:be:30:78:f2:40:db:a0:3e:
         8d:19:48:5d:7e:1b:3d:0a:66:c4:d2:24:26:e1:d5:f9:44:ad:
         b7:9c:40:4c:ed:e3:0a:30:87:1f:5f:09:71:28:45:c2:40:ff:
         da:af:46:d2:54:0d:45:73:93:71:02:79:64:b7:42:3b:b5:ad:
         62:9d:dc:f2:a7:8f:21:94:83:93:2e:c4:53:40:b4:d2:e1:f4:
         ba:d5:28:c9:b3:ff:10:54:a7:e5:73:dc:30:b5:d6:f1:ab:16:
         33:a6:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:44:56 2025 by rpki-client