Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          5GbeUh6UkcOslxY27uSMz2L2g40U0xqsPdwBvYQW8gM=
Subject key identifier:   21:CD:7F:6C:61:61:A6:CC:FC:A2:42:8C:ED:60:E5:67:75:45:29:31
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       7CBC6C5574F3CB0503164563E937B705EF1CA9A3
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:49 +0000
ROA not before:           Tue 04 Feb 2025 18:50:49 +0000
ROA not after:            Tue 03 Feb 2026 18:55:49 +0000
asID:                     273041
IP address blocks:        2801:1a5:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bc:6c:55:74:f3:cb:05:03:16:45:63:e9:37:b7:05:ef:1c:a9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:49 2025 GMT
            Not After : Feb  3 18:55:49 2026 GMT
        Subject: CN=21CD7F6C6161A6CCFCA2428CED60E56775452931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:5d:56:03:ea:91:3f:3f:db:04:93:b7:33:
                    3c:d3:83:b4:8f:5b:da:3a:f8:4b:51:1a:fe:0d:80:
                    aa:36:f3:9c:39:bc:32:a4:e8:19:c3:78:45:9f:64:
                    92:a1:ad:50:e1:e8:f1:6a:c0:a4:5a:14:f7:0d:09:
                    74:92:11:7f:59:a1:a8:6b:31:88:5a:37:38:90:66:
                    2c:3a:b5:78:18:f1:64:9b:7f:4d:69:e8:92:18:ab:
                    25:d7:92:6a:e9:63:3d:1f:ed:94:6c:f2:89:fd:d4:
                    0b:b8:1c:6f:e3:5f:8d:d3:b4:0d:dd:36:34:08:3a:
                    16:f6:6e:4a:a8:42:4e:c8:b5:e3:11:2d:43:75:47:
                    81:ca:de:41:66:16:3c:32:ff:64:e1:bd:08:8b:ce:
                    16:37:33:34:4d:41:3b:21:e3:12:d7:9f:ae:fa:14:
                    4e:40:eb:5c:be:9d:67:f9:b9:85:54:57:9a:4e:5c:
                    10:90:66:b3:5a:94:2e:b1:21:72:e2:4e:ad:36:3c:
                    13:12:17:79:4f:14:b7:11:6e:00:3f:32:bc:bb:1d:
                    0a:80:71:2a:d6:06:58:f9:56:01:e5:ff:4b:4f:86:
                    70:a0:ea:e0:74:7e:77:4e:dc:6b:07:a0:b8:89:08:
                    8e:ee:ed:30:5b:ee:35:3a:b5:8f:7c:35:65:8e:54:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:7F:6C:61:61:A6:CC:FC:A2:42:8C:ED:60:E5:67:75:45:29:31
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:44:e5:af:92:71:bf:a0:7b:08:5a:e8:c9:89:4f:c5:f7:5d:
         8c:ff:d4:f6:f0:07:b5:16:16:a2:f5:11:aa:3f:c4:2f:b9:1a:
         0f:d6:d4:77:d2:9b:a9:8b:b3:99:91:1a:7c:ad:5a:29:85:cb:
         57:94:e6:fe:d2:17:98:ac:90:3e:4b:06:ff:2b:8c:ab:bf:15:
         69:8f:f4:bf:92:c9:63:f3:9c:23:1e:bc:08:d3:d2:2b:f7:ed:
         7d:cd:fd:67:2b:d9:fd:c1:85:d2:a1:92:b5:e5:91:90:73:d9:
         05:d7:a1:0d:95:d7:30:ee:86:17:5e:75:85:9a:2a:fe:b5:63:
         52:fa:b4:1b:6a:2b:78:39:0a:55:b6:a0:15:7d:9f:69:56:68:
         fe:b7:c3:1c:44:b8:40:c0:4f:03:27:40:40:63:a8:f0:b9:54:
         1e:a5:ea:8f:00:e5:ba:1c:57:f1:55:6d:42:3f:23:d6:60:bb:
         af:22:8a:18:f7:16:92:32:f3:78:c1:4e:99:76:0e:d6:45:a8:
         12:1a:bf:93:1b:77:d7:0b:10:0a:cc:0b:7d:7b:f6:b5:57:e3:
         0f:37:b3:be:85:a3:21:b3:e3:f7:9e:10:f5:b1:03:7d:3b:2b:
         b1:29:16:32:48:5b:e1:c5:ae:47:8b:3f:6d:10:d2:ab:f6:ea:
         31:47:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:46 2025 by rpki-client