Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a3a2f34342d3434203d3e203138373437.roa
File:                     323830313a3131313a3a2f34342d3434203d3e203138373437.roa (raw, json)
Hash identifier:          DgLtTk5IjWIQ7kbnKlM5X6Gh5nfWqJ6YXwsB3IDj2IQ=
Subject key identifier:   84:A6:03:2E:8C:C5:0E:1F:F2:4A:8E:7E:BB:57:9C:FE:F1:7C:65:D2
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       29ECD2FB8D27B1B81A84F70555C2EA5FB12209BB
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a3a2f34342d3434203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:40:55 +0000
ROA not before:           Tue 04 Feb 2025 18:35:55 +0000
ROA not after:            Tue 03 Feb 2026 18:40:55 +0000
asID:                     18747
IP address blocks:        2801:111::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:d2:fb:8d:27:b1:b8:1a:84:f7:05:55:c2:ea:5f:b1:22:09:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Feb  4 18:35:55 2025 GMT
            Not After : Feb  3 18:40:55 2026 GMT
        Subject: CN=84A6032E8CC50E1FF24A8E7EBB579CFEF17C65D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:55:8b:f8:71:58:e0:ac:13:99:c2:e3:26:
                    e7:84:b0:fd:8e:fb:35:e5:03:e0:c7:60:fc:78:9c:
                    2f:9c:03:d4:7e:59:42:e1:1c:a1:ec:29:c8:cc:19:
                    27:8f:d7:64:72:63:bf:51:74:e9:b9:7f:88:66:e8:
                    c1:cc:ea:e9:2e:e0:5d:3b:9d:51:b6:9b:51:3f:8c:
                    6e:8e:2f:62:1f:55:5f:8d:3e:b7:12:9f:bb:f1:76:
                    10:3b:60:63:71:61:d3:90:53:52:42:b3:d0:c3:ca:
                    d4:de:c8:46:a6:fc:35:64:32:c8:74:25:c9:55:66:
                    4e:df:aa:d0:be:d1:f7:80:24:b0:0e:4a:3f:49:cf:
                    97:99:af:a8:4e:02:cd:f6:85:f3:71:af:47:14:38:
                    6f:a1:09:17:d2:8a:b4:43:97:69:36:3c:8d:ba:22:
                    25:ba:8a:11:e4:94:73:81:57:ab:f9:44:a1:02:10:
                    9a:33:60:5d:32:20:c8:18:f5:96:46:8a:52:96:ea:
                    70:9c:c3:76:60:ec:00:fa:ae:19:32:6c:db:85:54:
                    0d:42:0d:fa:7f:2f:d7:44:fb:2f:74:45:22:c8:f5:
                    33:eb:dc:75:b3:df:84:0f:05:39:10:50:74:41:ae:
                    c8:26:6e:6e:a4:c0:d0:a9:0f:58:ba:b7:ba:fe:78:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A6:03:2E:8C:C5:0E:1F:F2:4A:8E:7E:BB:57:9C:FE:F1:7C:65:D2
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a3a2f34342d3434203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:50:13:46:25:7a:6b:07:19:01:57:2a:6e:bf:fb:0f:7f:
         03:19:3b:44:1f:ba:a3:6e:5e:2a:b4:86:c9:68:f4:19:07:c5:
         22:75:ab:8c:20:48:fc:bc:b2:b7:84:5d:60:9f:39:3c:1d:25:
         07:29:84:d1:07:27:b0:cd:ff:ec:39:36:b8:c9:89:e9:51:3c:
         58:d0:f4:79:32:95:6f:f1:b9:08:bf:65:3c:4e:04:d8:3f:aa:
         9e:3b:c0:ec:d5:90:29:3e:0b:11:fc:c5:d2:9e:38:0e:f9:32:
         8b:e1:93:28:89:d9:f3:90:42:21:54:80:ef:be:d9:97:ca:9b:
         d4:90:3e:0e:4c:6e:ed:2a:38:1b:ce:67:0a:0a:a1:c2:b7:0a:
         fe:c1:96:ca:2a:ce:1a:99:7f:3c:0a:2a:c1:af:9c:be:ce:49:
         08:7d:bc:2f:1b:12:b4:2e:c8:e1:f0:2c:ca:c4:30:0d:58:d4:
         f6:b4:68:0c:b2:b6:02:fe:e8:71:9d:41:ab:2a:d6:28:58:4e:
         bb:e0:6d:c7:28:29:2c:87:91:2c:8a:6b:59:18:07:d7:bb:ae:
         1c:7a:5d:5e:c2:b9:74:f0:48:ae:aa:c2:a7:2a:4e:38:ac:85:
         01:6a:5d:39:11:51:c0:a2:72:d5:92:f8:db:93:1f:f6:27:66:
         c4:23:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:14 2025 by rpki-client