Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa (raw, json)
Hash identifier:          AgJwGyxLSGUGcn3ikbDlbEBZk5jb6NhF25Y8Rs/JLVc=
Subject key identifier:   D6:DB:7E:BE:68:EE:95:1B:EE:57:88:D4:3B:AF:A7:21:8F:A9:92:A7
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       04FB3D8D6C841B4195F9E686E208CDE9263AEF49
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa
Signing time:             Tue 04 Feb 2025 18:37:07 +0000
ROA not before:           Tue 04 Feb 2025 18:32:07 +0000
ROA not after:            Tue 03 Feb 2026 18:37:07 +0000
asID:                     11058
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fb:3d:8d:6c:84:1b:41:95:f9:e6:86:e2:08:cd:e9:26:3a:ef:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:07 2025 GMT
            Not After : Feb  3 18:37:07 2026 GMT
        Subject: CN=D6DB7EBE68EE951BEE5788D43BAFA7218FA992A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:a4:f2:b4:37:5b:ab:99:28:a2:8a:8c:57:
                    11:81:cc:2c:7f:d0:b4:98:7b:4b:33:25:da:43:a1:
                    00:b8:f7:1d:20:c6:7b:d4:15:30:28:71:7f:71:a1:
                    68:1c:32:47:94:9a:c8:6c:ec:53:d9:58:d0:65:53:
                    2b:66:4f:77:7e:1c:fc:3e:81:2a:dd:fe:83:8d:72:
                    14:41:e2:65:d0:04:47:27:d5:48:31:3f:8c:16:08:
                    ee:e1:cd:55:f3:8f:f6:64:4c:4d:55:c1:8b:f6:9b:
                    b8:84:62:23:fd:eb:fd:f8:c2:17:cb:2c:52:8c:1a:
                    6f:d7:b4:a3:35:46:b7:37:0d:99:25:fb:6c:01:03:
                    9f:fb:a5:af:fa:47:c2:85:bd:37:22:a0:88:98:90:
                    37:e5:9c:22:c3:fe:d9:6e:cf:20:69:99:da:72:aa:
                    21:01:e0:35:6b:24:64:aa:ca:11:24:ed:2b:38:11:
                    b7:f8:06:d6:fe:0a:a4:bd:e0:93:a4:67:36:a8:6e:
                    8e:bc:50:18:42:d6:71:ef:2e:e7:b4:87:02:66:a1:
                    20:88:d4:be:f2:b5:0d:bb:26:1f:4e:5b:d4:55:4e:
                    6d:19:a7:fa:12:a1:34:f6:61:d3:f2:8c:bb:22:dc:
                    f0:4f:f9:da:f3:16:f8:25:b2:98:96:14:88:d5:48:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DB:7E:BE:68:EE:95:1B:EE:57:88:D4:3B:AF:A7:21:8F:A9:92:A7
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:7c:c4:77:6d:7e:25:f0:47:89:fc:f6:aa:a7:f5:5c:0c:
         03:9f:79:85:d7:e8:3e:d0:7e:07:f6:a1:f0:ea:8c:c8:71:d5:
         d2:89:90:3b:0c:5d:d2:8d:77:cd:7e:f0:dd:d4:87:c5:5b:4d:
         ef:5f:04:4d:20:f6:9f:50:cb:28:2c:ea:79:ad:fa:b4:fc:26:
         bc:70:f4:2b:e4:13:a5:74:b0:bc:39:b3:cc:65:69:8f:d4:7d:
         83:aa:f4:92:34:ca:49:aa:65:53:90:13:38:09:59:ae:19:f0:
         a8:f2:44:51:c6:7c:24:c6:7d:82:58:11:cb:23:36:5b:09:ff:
         25:6a:a4:74:e7:f6:9f:9c:d2:7b:a2:03:69:e2:83:07:52:c7:
         d8:88:c8:78:14:7e:c4:aa:4c:20:2c:35:d7:2e:8f:d6:9c:87:
         75:f8:4a:05:a1:58:71:b2:d8:78:c3:58:7d:a5:c6:a9:9f:5d:
         2f:eb:5c:83:c3:a2:02:53:98:45:7d:16:f5:70:a1:98:88:19:
         0f:67:e9:bf:2e:c5:bf:02:f7:30:b0:83:3e:97:d4:e0:12:dc:
         3c:ab:11:3b:0b:19:bf:72:21:2f:bd:a4:93:67:38:3e:95:bb:
         f6:6f:dd:06:8f:4e:b0:33:31:8c:10:aa:5d:ff:fc:8c:75:9f:
         25:e7:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:16 2025 by rpki-client