Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a333a3a2f34382d3438203d3e20323632313836.roa
File:                     323830313a3135393a333a3a2f34382d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          RJ09HTMJ1eISlt/er5HF0en/hDqZIpfKf39s5iylnvQ=
Subject key identifier:   30:3F:9F:49:93:A5:40:29:45:AA:8E:C0:C7:A7:85:82:4D:9B:30:59
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       51D3C300833A6EB96F01AA3B15248DA0F19C1970
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a333a3a2f34382d3438203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:32:32 +0000
ROA not before:           Tue 04 Feb 2025 18:27:32 +0000
ROA not after:            Tue 03 Feb 2026 18:32:32 +0000
asID:                     262186
IP address blocks:        2801:159:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d3:c3:00:83:3a:6e:b9:6f:01:aa:3b:15:24:8d:a0:f1:9c:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Feb  4 18:27:32 2025 GMT
            Not After : Feb  3 18:32:32 2026 GMT
        Subject: CN=303F9F4993A5402945AA8EC0C7A785824D9B3059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:88:c0:d8:ce:cd:df:b1:11:11:1c:b4:d0:
                    4d:85:fc:99:85:12:ff:93:90:9a:6f:d4:bb:a0:3d:
                    dc:34:b7:96:01:47:73:6a:e7:b8:d1:06:4f:9b:2e:
                    c0:d5:e9:a3:d1:fc:ea:28:90:34:8c:09:1b:35:d5:
                    f0:1c:b8:78:11:bb:6e:5d:2c:99:97:f2:1d:d1:f6:
                    59:6f:2b:4b:d9:87:1e:40:49:2c:5c:14:b1:0e:72:
                    4a:30:22:03:00:63:3b:d4:b9:57:25:2d:dd:d8:20:
                    94:31:05:ec:3c:2b:44:8d:f6:fd:99:6d:e5:63:22:
                    1b:da:92:4f:53:8c:b4:30:46:30:b6:3d:e1:e7:8e:
                    39:88:14:e8:6a:04:67:a2:1b:5a:b0:9c:16:dd:c3:
                    26:ee:cd:35:da:d8:2d:ce:e3:89:99:f1:ed:f0:ad:
                    f9:7f:0d:4c:db:f9:33:76:50:6d:1e:0c:6c:d4:20:
                    ee:97:d5:0e:80:35:a1:22:db:6c:40:49:54:11:02:
                    37:93:8c:91:0e:a6:41:87:29:24:c7:53:77:6d:b9:
                    9b:25:de:b0:d3:92:61:f4:05:96:37:0f:51:4f:fe:
                    00:8b:b1:b3:d8:13:19:a2:46:02:76:35:d8:d7:88:
                    5f:1d:50:9b:3f:61:7e:5b:c5:8d:52:e4:b4:9a:3a:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3F:9F:49:93:A5:40:29:45:AA:8E:C0:C7:A7:85:82:4D:9B:30:59
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a333a3a2f34382d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:ab:5d:df:7d:9b:55:4e:25:ba:1a:73:be:78:86:38:e5:a4:
         cc:97:37:f1:98:56:7f:89:ed:a0:ae:ad:cf:06:88:91:77:81:
         ab:35:dd:6a:f2:1a:7d:1e:c7:ab:a5:84:19:74:35:6d:16:b6:
         54:60:a5:27:f6:5b:af:9c:c0:39:d1:bd:e9:9d:a1:de:cc:4c:
         d7:56:90:20:31:33:7d:c4:01:67:aa:b1:48:a1:e7:fb:d2:25:
         26:ad:7a:a1:c8:64:6b:f5:ba:b9:09:9a:46:e3:94:70:e8:59:
         f9:22:57:20:89:01:8f:bf:a1:6c:52:bc:2d:f8:9d:36:c2:66:
         26:73:ca:b6:71:27:8b:e8:d7:06:33:5f:4a:f3:7d:05:8b:b7:
         6f:ad:dd:70:cb:40:e4:5a:82:63:7a:a7:7a:56:45:d1:c2:57:
         a3:5d:dc:81:ed:ec:b7:16:05:fd:00:74:5f:b7:64:f3:9b:c3:
         2a:0b:48:0c:5d:e6:21:97:da:d0:37:70:ee:d2:01:8c:b0:57:
         98:d7:c9:d4:fa:c0:e8:36:9e:9f:f3:07:4e:0d:f6:85:84:c3:
         77:fb:42:e0:82:6e:5e:92:db:f1:47:3e:9b:bc:96:86:3b:10:
         6f:52:d9:4e:3b:28:6d:f5:84:02:64:f5:0b:bd:e6:6a:bd:32:
         2b:e3:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:15 2025 by rpki-client