Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          9D2cWnBG0JVbREm4/Zn3+EgL8E3Z4edTcbRZpA6Qs78=
Subject key identifier:   13:F2:00:42:78:FA:D8:65:65:7E:2F:28:55:56:37:19:11:25:ED:40
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       0A0BD24F939997BF304DEA08FF48BECDC5025020
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:50 +0000
ROA not before:           Tue 04 Feb 2025 18:50:50 +0000
ROA not after:            Tue 03 Feb 2026 18:55:50 +0000
asID:                     273041
IP address blocks:        2801:1a5:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0b:d2:4f:93:99:97:bf:30:4d:ea:08:ff:48:be:cd:c5:02:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:50 2025 GMT
            Not After : Feb  3 18:55:50 2026 GMT
        Subject: CN=13F2004278FAD865657E2F28555637191125ED40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:96:bc:29:63:c3:dc:be:9b:11:81:07:13:
                    b9:3a:0d:1d:4c:c8:af:1f:2a:5e:c2:52:dc:aa:f8:
                    d8:81:3a:78:89:ad:2f:f6:57:d7:79:85:97:64:87:
                    27:9c:17:90:f4:39:91:06:39:91:41:4d:89:49:ea:
                    4c:2e:57:5b:77:21:56:ce:16:4d:bc:41:bd:b7:3f:
                    b8:b1:8a:2f:84:e3:d4:ec:f3:d1:1a:e7:8d:6a:eb:
                    75:ff:a1:12:1b:83:8a:10:1e:f4:59:d0:72:43:64:
                    d8:65:90:27:1a:a5:6c:d4:5d:da:e5:11:12:f0:d5:
                    c7:da:a6:0e:f6:1c:a5:2e:35:24:58:f7:55:17:af:
                    78:ad:26:e8:2a:93:40:55:18:8a:36:b7:72:16:9c:
                    44:ec:10:13:f0:3c:32:de:14:7e:7e:18:e3:38:af:
                    e2:89:aa:ca:d2:aa:96:fe:9b:41:36:fc:44:98:8f:
                    13:f3:42:ef:c0:32:d6:46:8f:9f:72:91:c2:5e:a9:
                    83:d7:b0:f3:b7:1d:0b:5c:eb:e9:12:04:c8:ee:6f:
                    3d:9f:e6:30:44:5f:0f:32:1a:49:83:8e:91:b9:4b:
                    d8:7f:0a:d4:96:2c:07:8f:38:ac:9b:61:ab:48:13:
                    22:1f:5f:c9:95:7f:a5:69:ba:32:0e:44:f7:35:c4:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:00:42:78:FA:D8:65:65:7E:2F:28:55:56:37:19:11:25:ED:40
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:dc:d8:60:73:7e:52:bd:be:50:44:2c:c7:02:84:a9:63:
         8b:ec:a2:c8:56:6a:72:43:c3:34:73:54:42:9d:e9:89:6a:3d:
         5c:31:fd:07:37:39:09:c1:c3:af:46:f9:3c:0b:21:41:47:0c:
         ab:ce:86:f8:3c:a5:2f:54:65:d4:22:2c:a8:0a:c4:c9:38:2a:
         ca:89:e0:9d:25:cc:60:71:7c:c5:ef:83:f2:77:41:d1:d4:ae:
         16:44:36:a2:f3:75:64:2a:dc:16:85:db:85:32:42:9f:9b:c7:
         6b:21:f8:9d:b7:9e:f9:42:42:58:49:9b:8e:9e:4a:92:8a:1e:
         10:59:d6:05:10:34:0e:91:14:75:fa:4d:59:14:27:c5:4a:77:
         e5:7e:5c:60:5a:22:b3:66:40:30:b7:c4:02:a8:eb:26:54:3e:
         d7:55:6b:ea:8d:6b:86:f0:bd:fa:7f:12:67:77:97:b6:a3:23:
         37:c1:84:8f:d1:6c:cf:d1:0e:63:c2:5f:fc:6a:62:78:95:c6:
         b4:03:5c:80:88:97:8c:7a:df:86:ec:76:f4:63:b4:95:85:9d:
         b2:ab:7d:e7:64:0e:c4:b5:2f:61:e6:af:8c:2a:07:c8:da:21:
         20:d1:b6:5b:96:1a:d3:0c:47:b0:11:6e:ef:af:be:14:ff:f4:
         fd:e0:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:13 2025 by rpki-client