Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
File:                     323830313a3161353a3a2f34342d3434203d3e20323733303431.roa (raw, json)
Hash identifier:          cYHRXxzDBtC2MWsQmwLZOrPukLb5X+Wp0yYpBz5pbWg=
Subject key identifier:   CC:F7:00:38:DB:6B:3F:C0:E2:4C:C6:EB:A2:63:00:58:7B:90:FE:76
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       4B92466DED9794C0AB00834134D49CCF7D423E12
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:47 +0000
ROA not before:           Tue 04 Feb 2025 18:50:47 +0000
ROA not after:            Tue 03 Feb 2026 18:55:47 +0000
asID:                     273041
IP address blocks:        2801:1a5::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:46:6d:ed:97:94:c0:ab:00:83:41:34:d4:9c:cf:7d:42:3e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:47 2025 GMT
            Not After : Feb  3 18:55:47 2026 GMT
        Subject: CN=CCF70038DB6B3FC0E24CC6EBA26300587B90FE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:40:49:1a:e3:41:90:90:9c:dd:b3:3e:c6:
                    8c:d4:3b:b2:18:fc:76:01:9c:03:6e:ed:d4:e4:ee:
                    f2:b5:fe:28:68:be:92:6c:2c:13:15:7c:f8:ba:7b:
                    72:81:a6:8a:a1:70:7e:c5:89:7d:35:af:47:7c:9b:
                    1c:ec:5c:8c:e1:28:85:7d:b8:a9:fd:71:c3:02:58:
                    6f:3b:c0:e9:4a:88:5e:91:a6:8c:46:56:91:9b:9a:
                    67:bc:e6:57:7b:c3:dd:e3:2f:95:59:d4:11:37:70:
                    1e:64:92:80:eb:36:b7:cc:d5:04:e6:9e:7f:30:c7:
                    89:12:f4:58:a8:31:ea:47:ef:0a:d3:b0:c3:05:f0:
                    f1:88:b3:44:28:6f:93:c6:61:8a:49:fc:2d:82:0a:
                    61:cc:57:5c:f4:e5:54:96:db:8e:e9:1b:05:65:d8:
                    58:15:8f:80:cb:26:cb:a5:f1:ba:f2:1e:fb:67:b4:
                    ce:70:f7:8b:61:86:d1:e3:73:fb:64:75:ea:d7:74:
                    5d:39:52:7c:b8:6c:28:7f:1a:5d:aa:fc:82:86:85:
                    d1:24:3d:f4:23:e6:9a:41:f9:5c:39:0b:12:43:20:
                    2e:01:ce:74:1c:b0:28:29:ac:68:c5:75:76:be:1d:
                    c0:fe:86:00:6f:e2:5f:6e:97:83:92:42:14:a5:8b:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:00:38:DB:6B:3F:C0:E2:4C:C6:EB:A2:63:00:58:7B:90:FE:76
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:3b:70:17:a0:1e:a6:11:62:b1:40:38:f3:fc:13:59:54:
         b9:91:0c:75:af:f4:5f:13:ec:ed:c5:09:23:3a:a4:a1:34:68:
         ef:33:7f:db:c1:3a:0d:b7:24:67:9e:4c:d7:9b:2e:a9:ca:fb:
         f9:80:08:4b:97:12:c5:0e:71:6b:cb:3c:15:5c:dd:7a:f8:36:
         08:b9:36:7d:55:83:54:7c:ad:c8:4f:1a:39:14:64:aa:27:25:
         30:b8:01:7c:15:1d:29:85:29:7f:f9:5b:ba:e4:b0:5f:0b:45:
         a8:aa:60:ef:95:92:df:4a:d1:e8:cb:e6:fe:71:aa:28:66:b8:
         7e:03:4f:07:35:53:da:f7:cf:f8:ce:a6:ce:1d:e4:ba:3a:d0:
         8e:71:2c:08:cb:ba:fd:26:43:06:0f:81:50:8f:eb:75:5c:e7:
         9d:04:c9:ca:41:7b:13:fb:6d:84:34:be:9d:c1:14:b4:6f:00:
         10:0a:7b:4d:20:0e:98:ea:68:aa:0e:9e:eb:de:ac:39:2b:eb:
         40:65:00:36:46:b2:c1:20:db:06:4e:0d:00:5e:77:f3:30:3f:
         92:c6:59:07:e0:54:1f:68:9b:54:38:33:2f:22:7b:2b:e9:22:
         60:1e:66:b8:91:cd:35:33:71:46:38:b9:17:46:78:24:a8:d3:
         fb:01:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:43 2025 by rpki-client