Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
File:                     323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa (raw, json)
Hash identifier:          kCQ2E4hvIAKCbT49Kw8sfqznuBx7iyzNT7Bx3hWAg7E=
Subject key identifier:   84:D9:03:07:E2:FF:92:A4:F4:51:49:59:35:03:36:8F:14:3D:1A:5F
Certificate issuer:       /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial:       4BD934C2A0155AE3CE9FDCD70273A9CD7E18DD57
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
Signing time:             Tue 04 Feb 2025 18:50:46 +0000
ROA not before:           Tue 04 Feb 2025 18:45:46 +0000
ROA not after:            Tue 03 Feb 2026 18:50:46 +0000
asID:                     262201
IP address blocks:        2801:0:290::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:34:c2:a0:15:5a:e3:ce:9f:dc:d7:02:73:a9:cd:7e:18:dd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
        Validity
            Not Before: Feb  4 18:45:46 2025 GMT
            Not After : Feb  3 18:50:46 2026 GMT
        Subject: CN=84D90307E2FF92A4F45149593503368F143D1A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:3a:85:d6:e2:37:6a:99:e4:cd:6f:ad:3b:
                    6c:d8:e4:c2:8a:96:3d:33:34:07:61:79:ce:2a:5e:
                    c3:a1:2d:cd:d1:90:ba:1a:38:97:f0:73:51:ac:85:
                    4d:f5:3b:6f:44:5d:36:42:96:a8:05:51:84:3b:da:
                    55:2a:d0:fe:68:5b:93:27:49:df:ba:26:6b:85:b2:
                    f8:86:3d:cc:25:5b:1d:38:dd:c7:32:ac:4e:2d:4c:
                    09:b0:e7:b5:e7:fb:cf:a4:67:ad:ab:15:d9:ba:aa:
                    d8:94:92:44:98:48:e8:ae:8e:77:59:a6:90:85:75:
                    4a:f2:6d:71:6e:94:2a:c6:38:37:33:1d:2d:e8:72:
                    32:b2:8f:91:78:10:d4:0c:57:8f:35:7a:54:ff:5d:
                    0e:e0:49:10:b9:20:db:de:cb:30:ce:9b:04:1a:ee:
                    40:f5:4e:1d:07:b9:81:04:8b:e2:d1:55:11:9b:10:
                    77:22:27:e6:d8:4c:7b:75:80:ce:8b:f4:f6:6e:3f:
                    d5:4f:21:4e:57:fa:87:e1:56:6b:08:7f:eb:6c:45:
                    bb:f3:e1:c4:c9:40:83:08:31:33:ed:a1:7b:b7:d4:
                    cd:64:7e:ca:82:08:36:a4:01:0d:e1:60:ac:2f:d5:
                    35:0f:d8:52:ad:a6:ff:ab:b7:7c:cb:f1:9c:7a:14:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D9:03:07:E2:FF:92:A4:F4:51:49:59:35:03:36:8F:14:3D:1A:5F
            X509v3 Authority Key Identifier:
                keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:ce:7b:48:29:4a:67:8a:4f:b7:fa:e7:dc:95:d3:0d:b1:f7:
         c8:ab:08:fb:8e:86:e3:07:f1:21:2c:bb:1a:0e:83:76:d0:77:
         69:71:fa:8f:05:a9:4b:a1:b7:6c:df:f1:8e:4d:da:81:71:cf:
         8a:c5:76:56:0c:bd:a1:fb:27:49:ba:55:89:8b:8d:17:e2:7f:
         77:06:34:6e:52:0e:6b:f6:91:26:cc:88:fa:25:7a:81:99:32:
         de:c1:f2:5b:85:8d:16:82:4c:37:99:77:e4:38:9d:53:b6:c9:
         fd:0f:24:09:71:6c:c9:72:0b:a8:3c:89:cd:08:e2:f7:cb:8c:
         1d:f8:be:42:61:c8:e8:ce:f6:56:3c:04:a1:4c:25:57:68:56:
         38:17:bf:77:db:fa:cc:c8:04:95:76:c9:4c:95:ee:b0:a5:61:
         33:84:5f:73:c6:dc:a6:63:d8:92:ff:e3:b9:04:d2:d4:24:e7:
         97:f2:a9:86:bb:f2:84:ea:3f:5e:3e:61:f3:c9:f4:0d:1a:30:
         2d:63:6e:5a:09:01:eb:3e:d0:f3:ff:06:14:a7:5a:1f:53:7d:
         76:57:c8:22:37:05:2b:94:21:8a:c6:29:d8:03:f8:47:f3:21:
         73:1c:67:27:1d:dc:68:41:3c:40:2f:aa:78:2c:74:aa:90:4f:
         5d:5a:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:52:35 2025 by rpki-client