Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
File:                     323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa (raw, json)
Hash identifier:          u/1kjNhdyUhR8GjrfFDQRvpAhIjblRjLO8LhEh6r+KA=
Subject key identifier:   CE:E4:7E:D7:D9:B9:2C:E0:1F:1B:B3:9F:FC:79:7F:E8:AF:2A:5C:50
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       404B3942764CD4D58FD7C0E51DE8B39B83328BED
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
Signing time:             Tue 04 Feb 2025 18:50:32 +0000
ROA not before:           Tue 04 Feb 2025 18:45:32 +0000
ROA not after:            Tue 03 Feb 2026 18:50:32 +0000
asID:                     273027
IP address blocks:        2801:1ba:e0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:39:42:76:4c:d4:d5:8f:d7:c0:e5:1d:e8:b3:9b:83:32:8b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Feb  4 18:45:32 2025 GMT
            Not After : Feb  3 18:50:32 2026 GMT
        Subject: CN=CEE47ED7D9B92CE01F1BB39FFC797FE8AF2A5C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:68:ea:60:1c:05:6f:f8:70:b8:43:7a:fd:
                    37:bb:58:f4:82:20:10:09:f6:cb:58:c0:a7:dc:54:
                    4a:1f:2a:cc:57:0a:a4:9c:a2:dd:82:a8:c3:86:dc:
                    2e:79:aa:62:2b:42:9b:41:04:ef:59:bb:9c:55:5d:
                    c8:8a:40:b4:a1:2e:7b:05:cb:ad:db:f7:3b:7a:f1:
                    9a:dc:33:3f:7f:49:6d:f7:df:a8:4e:67:79:63:90:
                    0c:a3:c0:3b:20:26:06:ad:fa:5f:1e:9d:f5:02:c1:
                    85:1a:9f:15:22:85:42:ea:ab:d1:34:2e:a8:e6:50:
                    f4:b9:46:be:e9:a1:cf:9e:6d:11:70:bc:9c:4c:29:
                    b0:46:25:5b:cb:9c:74:b8:93:05:90:c1:29:b3:30:
                    90:b8:94:3e:bb:07:41:b3:cd:f7:9c:c8:a4:e9:b9:
                    6c:94:c9:a5:b6:0b:6b:4e:3b:82:f5:ca:76:20:ab:
                    65:31:dd:e8:c7:17:5a:15:56:50:de:17:67:67:13:
                    c9:20:a4:91:11:a4:13:7d:a7:1c:fd:29:fc:b0:40:
                    49:08:d5:df:99:42:3f:1b:09:73:e7:75:76:2e:ef:
                    64:c9:2b:f9:41:3a:a1:9c:c3:98:f1:29:ab:fa:cd:
                    b3:5b:93:90:3b:4d:08:38:58:cb:0d:ea:f7:11:f4:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:7E:D7:D9:B9:2C:E0:1F:1B:B3:9F:FC:79:7F:E8:AF:2A:5C:50
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ba:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:13:60:50:f2:a7:3d:47:77:25:8a:35:39:32:27:82:c8:
         4c:34:7f:df:81:b6:ac:6b:49:b5:8e:86:4c:fc:0c:5d:94:b9:
         81:b4:7d:ae:88:42:6e:a6:a6:4f:1e:28:18:06:a4:91:49:fa:
         e9:27:dd:d8:8a:3c:b6:2c:16:e8:0a:b5:dc:3b:48:d5:1d:b0:
         d7:69:e9:37:97:38:fb:9b:c0:74:07:bc:7e:ed:1f:01:98:b5:
         9d:68:c3:39:11:84:fd:93:b2:17:f1:80:4b:9b:4e:b5:6e:a6:
         5e:56:5e:46:6f:3a:a8:bd:ab:2a:c6:33:73:41:fe:3d:ab:e7:
         c6:6b:6b:7a:f2:cd:0e:95:ee:59:bf:06:bd:fd:ca:21:11:10:
         0f:a2:c2:c2:6f:bb:56:35:ab:7b:88:5d:bd:61:1a:d3:bd:09:
         35:d7:57:47:9f:06:6d:ad:70:c7:c0:a2:a2:cf:0d:4a:7f:5f:
         40:05:2e:0b:78:98:ec:1c:ca:28:9d:5f:ef:9b:e3:e0:fd:17:
         c0:62:bd:30:56:dc:0a:9d:a8:6c:90:3f:d2:fc:3c:65:bf:ba:
         6d:a0:26:14:29:13:7a:d3:5f:4d:ca:77:f1:db:40:81:60:b4:
         ce:45:c7:f4:72:c8:b1:22:db:04:16:f6:38:d7:47:15:69:80:
         e2:43:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:04 2025 by rpki-client