Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
File:                     323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa (raw, json)
Hash identifier:          XwnRxcSBMrQRnTQqGFS5fevIS9VbiGLjPvMETTF8Bvk=
Subject key identifier:   DC:A8:52:70:A8:D8:2A:A9:18:8D:92:03:8E:C1:BB:E8:97:A0:F4:68
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       49E85B90C14784E1E2E1684034C4C253BBC4986C
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:45 +0000
ROA not before:           Tue 04 Feb 2025 18:01:45 +0000
ROA not after:            Tue 03 Feb 2026 18:06:45 +0000
asID:                     18734
IP address blocks:        2001:1278:e::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:5b:90:c1:47:84:e1:e2:e1:68:40:34:c4:c2:53:bb:c4:98:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:45 2025 GMT
            Not After : Feb  3 18:06:45 2026 GMT
        Subject: CN=DCA85270A8D82AA9188D92038EC1BBE897A0F468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:22:48:a2:4b:5c:30:47:71:fa:7b:84:5a:
                    bd:2a:f1:30:fd:73:42:12:97:ed:99:f6:a5:27:66:
                    7e:d7:bb:ba:95:35:9e:3f:67:ca:dc:c5:57:ec:e5:
                    9f:00:f8:97:5c:b9:b1:73:5d:3f:50:92:e8:5c:ba:
                    36:cb:02:1d:7f:75:55:5b:95:2a:38:97:76:10:6b:
                    1d:fe:0e:c0:bf:2d:a8:f9:56:e6:8e:36:2d:45:a6:
                    5f:f4:dd:a6:9d:f0:1e:53:32:6e:92:fc:ee:21:9c:
                    18:1d:c9:a4:00:c7:2f:31:a8:87:fa:d8:61:eb:15:
                    57:1a:ac:c1:b9:72:d5:24:ba:61:e1:7c:a8:e7:2c:
                    b1:63:17:37:18:17:d5:4f:95:32:dc:17:86:f4:fa:
                    ce:ee:44:83:aa:bb:83:05:f3:27:d5:3b:40:be:3b:
                    a5:8a:b9:7a:77:eb:15:d2:d6:3d:19:66:46:68:06:
                    aa:c5:8c:06:84:77:ac:2e:c7:f9:b6:22:22:58:f4:
                    4e:c3:39:bd:15:db:4a:fb:b1:b6:20:97:43:9d:d2:
                    3b:48:27:0a:b6:90:e1:5e:c2:a3:e1:d9:74:0e:46:
                    11:a1:85:84:af:76:e8:51:41:83:c4:3b:f1:28:1b:
                    72:f9:a2:9c:4d:cc:ae:54:77:b3:a4:a3:09:87:48:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A8:52:70:A8:D8:2A:A9:18:8D:92:03:8E:C1:BB:E8:97:A0:F4:68
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:7e:2d:73:29:12:47:61:9e:44:29:57:3a:2c:20:2e:50:
         4f:cb:91:dd:7f:a9:ff:e9:51:5f:fe:0a:8e:4c:61:97:01:f7:
         a4:7e:08:b8:99:39:d0:ea:4d:04:9b:fb:43:8d:5b:c1:50:73:
         9d:50:ed:f1:b2:8e:b1:3a:09:f8:96:a6:10:5b:5c:ca:33:89:
         9f:05:5f:49:e9:86:1a:0a:6a:f3:01:96:f1:dd:ee:c8:f5:94:
         22:44:e4:34:0c:ea:36:74:b8:91:1a:81:ae:c6:02:5c:ed:4f:
         a8:e9:4b:54:00:9a:7a:df:02:86:9d:b3:b7:7b:69:ab:4f:ae:
         d4:02:65:fa:79:7b:8c:24:34:24:01:9f:6c:b8:7f:c0:a5:78:
         dc:22:60:e6:65:db:02:13:8d:01:80:ee:3a:fb:5c:7e:f8:29:
         6f:11:78:25:5b:84:a0:f0:06:3f:66:d0:a1:04:7b:c3:3b:df:
         0d:87:9f:db:a6:a3:96:84:82:cd:b8:a1:5d:fe:50:11:3a:58:
         9f:26:b6:aa:62:96:1a:a7:c7:29:3c:5e:06:44:30:17:af:61:
         a0:e5:9a:25:7c:9b:37:ba:2f:38:f9:de:82:b0:de:32:22:0d:
         e7:10:ff:4a:37:df:26:e1:13:97:bb:c8:3b:82:68:01:2d:04:
         80:15:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:35 2025 by rpki-client