Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a303a3231303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          sK1kvM5peTGVXUY1SLILFNxIx31Wx5dq40Qh3n5T+5Y=
Subject key identifier:   00:95:37:BD:55:A5:D3:1E:2C:EB:4E:E4:86:9B:FA:81:27:87:D8:77
Certificate issuer:       /CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
Certificate serial:       17F701B916EB7C47D4A0ECCF5FB50E3B56C44DA0
Authority key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 20:07:10 +0000
ROA not before:           Tue 04 Feb 2025 20:02:10 +0000
ROA not after:            Tue 03 Feb 2026 20:07:10 +0000
asID:                     19429
IP address blocks:        2801:0:210::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f7:01:b9:16:eb:7c:47:d4:a0:ec:cf:5f:b5:0e:3b:56:c4:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
        Validity
            Not Before: Feb  4 20:02:10 2025 GMT
            Not After : Feb  3 20:07:10 2026 GMT
        Subject: CN=009537BD55A5D31E2CEB4EE4869BFA812787D877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:e3:3f:df:2f:21:ef:95:98:96:f9:03:21:
                    af:26:41:1f:e2:c5:d5:7d:0b:b3:c8:c6:db:e7:30:
                    06:e4:0b:7b:be:35:6b:70:c0:d6:91:16:0f:d0:b8:
                    40:c7:7a:bf:e4:cb:fb:fa:6b:7f:a2:19:dc:98:ff:
                    8e:c7:8b:df:4a:4c:53:c7:05:29:75:1e:6e:0f:24:
                    a1:62:52:9f:26:d9:8e:63:f2:d0:36:a8:d8:28:bb:
                    a4:0b:b8:e7:66:e5:c8:7e:e1:1b:e9:14:ee:f2:f9:
                    cb:68:10:8c:30:bf:fd:3a:83:32:3f:2f:c3:d8:70:
                    65:2a:b8:5f:d6:89:22:50:a4:e2:a3:1c:e4:02:28:
                    78:38:0b:97:a7:a6:c2:5f:93:68:40:09:a1:22:b6:
                    19:74:46:e2:9b:87:74:9b:31:10:d3:e6:70:8f:3b:
                    6c:b2:24:52:a3:b4:fe:0b:81:26:c4:f9:38:46:80:
                    9b:0d:63:19:dd:62:81:75:8e:9b:7d:d7:92:ba:be:
                    89:5f:71:ca:f2:99:03:f0:76:0c:2e:26:c3:ef:d9:
                    a5:cf:35:3e:67:e2:be:d2:aa:be:1f:87:e6:c7:83:
                    23:5b:e6:1d:11:9c:ac:39:70:4f:42:54:2f:0c:ee:
                    91:e3:da:92:17:be:48:98:f3:7e:8f:9d:1d:79:05:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:37:BD:55:A5:D3:1E:2C:EB:4E:E4:86:9B:FA:81:27:87:D8:77
            X509v3 Authority Key Identifier:
                keyid:18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:b8:ac:5e:25:1e:a5:7a:36:47:24:2a:c3:5d:49:07:8c:
         93:d3:54:4a:bd:cf:0c:23:87:a0:c2:0f:e1:7e:7d:06:fa:b8:
         45:8f:08:63:11:1d:8a:61:3f:fc:83:b1:f2:65:e5:6d:6c:80:
         3c:9d:9e:47:bd:36:b8:52:15:31:6b:d7:57:ae:0a:14:76:a0:
         60:80:33:e6:c2:7b:70:15:90:62:aa:a2:9b:78:1e:93:06:6c:
         d2:7e:b1:4d:14:06:54:57:e5:38:6d:a0:94:53:e8:b3:6a:de:
         63:3c:06:c4:46:5b:6d:99:79:b0:de:35:08:ba:d0:50:c3:fc:
         e5:bc:bb:91:d8:a1:f9:cd:9a:05:d8:18:f6:e3:ee:65:42:1f:
         72:ff:34:87:e7:f2:2f:2d:42:29:51:0f:50:92:f3:08:85:84:
         e5:15:b2:55:51:de:7a:aa:f6:93:9b:22:cf:ca:c7:2c:51:1d:
         94:e7:3f:13:14:12:f7:06:49:ca:e4:b3:9f:5a:f9:78:06:2e:
         ff:db:da:fe:e3:71:9b:b9:01:78:8c:22:99:88:a4:d2:d2:17:
         ff:15:55:c1:69:0c:97:40:5f:99:ad:31:67:b3:86:47:04:75:
         d0:05:7e:99:3f:68:cc:08:47:ec:dd:6d:f0:32:cf:2b:14:1e:
         7b:86:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:14 2025 by rpki-client