Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a363a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a363a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          HZ/y/M7HrbJK5w2NZEUtkdUVVRA6xBm+kJKKouj2Hdo=
Subject key identifier:   B9:73:05:4C:48:C7:F9:2C:71:52:D1:2E:50:05:B8:1A:ED:6B:D9:13
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       58E8FA5B32538C7017020AA1E626E622F77D114A
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a363a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:48 +0000
ROA not before:           Tue 04 Feb 2025 18:50:48 +0000
ROA not after:            Tue 03 Feb 2026 18:55:48 +0000
asID:                     273041
IP address blocks:        2801:1a5:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:fa:5b:32:53:8c:70:17:02:0a:a1:e6:26:e6:22:f7:7d:11:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:48 2025 GMT
            Not After : Feb  3 18:55:48 2026 GMT
        Subject: CN=B973054C48C7F92C7152D12E5005B81AED6BD913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:3f:44:07:74:8d:2f:bc:e5:eb:ca:da:93:
                    36:80:56:8f:15:a9:97:93:81:f3:15:73:70:bc:e4:
                    4b:6d:72:5c:f9:85:33:c0:ef:a5:cd:2c:29:1a:be:
                    b6:fb:86:a0:ed:c0:80:95:25:ac:10:09:29:25:1a:
                    0f:fc:f7:d4:6d:44:2a:20:b2:1c:3d:6f:5f:ae:02:
                    7d:82:9a:ea:ad:45:b4:8d:aa:0b:b9:8e:8a:6e:3a:
                    0b:59:d5:df:1c:c2:7b:b8:0f:36:80:6f:2e:23:5d:
                    80:df:bd:6e:d7:fc:5c:a7:90:bf:5f:98:d7:29:71:
                    33:31:77:aa:4d:df:3f:5d:2d:76:b7:7f:59:2e:46:
                    01:0c:3d:3a:c1:76:46:b9:11:49:4c:15:88:e9:88:
                    be:04:68:50:24:d1:8b:39:45:17:3f:d8:15:9c:5b:
                    86:b5:e0:cf:e2:74:8d:77:c4:6f:58:7e:13:87:5a:
                    47:e4:49:a3:f3:94:50:4a:54:f6:da:c1:19:40:75:
                    84:c7:38:5b:65:62:67:2d:1f:07:c2:99:e8:af:43:
                    75:6e:4f:16:7a:cd:d2:95:4d:c9:97:f8:7c:26:94:
                    8e:ea:13:9c:8b:0f:24:7f:2e:fb:66:14:a1:97:ea:
                    e2:e9:e7:59:be:f6:1c:81:5a:f0:d3:a7:0d:19:14:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:05:4C:48:C7:F9:2C:71:52:D1:2E:50:05:B8:1A:ED:6B:D9:13
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a363a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:f3:44:95:d0:97:3e:3e:fc:30:c3:c6:bd:02:8e:ad:56:
         6d:d4:82:72:30:af:00:23:cf:3e:e7:b6:17:6c:b6:18:11:d7:
         14:2c:cb:2e:67:74:5a:0e:92:e6:e5:dc:e5:9a:b8:90:fd:e2:
         4c:b1:8a:30:84:f9:6e:4f:f9:0d:13:f4:dd:49:1b:fa:2e:4f:
         58:3e:8e:0a:a9:fb:e2:5e:b7:d0:26:38:f0:45:cb:e3:c7:40:
         f4:97:09:0d:2d:86:9c:ab:f6:34:c0:59:03:5f:d3:f7:85:dd:
         ce:3b:00:46:d2:da:88:e6:fb:ef:27:d1:c3:85:0b:50:84:53:
         52:24:b2:70:52:fc:de:99:2f:87:6b:93:44:17:4c:eb:60:4f:
         ba:1d:fc:c6:65:94:a8:e5:c7:5c:9a:d0:85:d5:11:d1:85:d3:
         e1:8d:bd:59:e1:a3:23:78:f6:a6:f3:ee:56:d7:36:5d:63:33:
         b2:58:13:47:6f:c1:28:0a:18:bc:2f:3d:aa:bc:c0:f4:4a:bd:
         ee:69:e8:15:91:2b:05:0e:53:e3:c5:cd:85:c2:6d:6b:b0:ff:
         f8:c6:02:f2:aa:1e:ac:de:37:53:39:2f:38:ce:33:38:5a:4f:
         da:2d:bc:02:63:95:b4:88:1d:91:11:9b:8c:90:f1:81:2d:48:
         6d:75:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----