Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa
File:                     323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa (raw, json)
Hash identifier:          j5RlCP0FJV8E1OHYAGewHp+Gcma7tbBe+vJBYyepPHw=
Subject key identifier:   47:1E:F0:FA:B0:D7:3D:A1:D0:35:42:C0:15:51:8A:76:E2:EE:EE:0C
Certificate issuer:       /CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Certificate serial:       3B4A2A7DF726EBF7331CE6ACD19E9D8571A6A19E
Authority key identifier: D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa
Signing time:             Tue 04 Feb 2025 18:54:05 +0000
ROA not before:           Tue 04 Feb 2025 18:49:05 +0000
ROA not after:            Tue 03 Feb 2026 18:54:05 +0000
asID:                     52318
IP address blocks:        2801:14:b000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4a:2a:7d:f7:26:eb:f7:33:1c:e6:ac:d1:9e:9d:85:71:a6:a1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
        Validity
            Not Before: Feb  4 18:49:05 2025 GMT
            Not After : Feb  3 18:54:05 2026 GMT
        Subject: CN=471EF0FAB0D73DA1D03542C015518A76E2EEEE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:77:de:ba:a7:1f:95:e0:22:5a:0f:2b:9c:
                    d2:98:b9:9e:5c:e1:dd:71:62:cd:fd:39:82:8e:91:
                    da:63:b7:45:3b:91:48:af:b6:1a:c6:c7:86:32:44:
                    7f:e2:df:83:03:40:20:30:46:37:98:d8:79:25:a5:
                    be:33:36:d3:7d:9b:62:dc:16:ec:33:64:f6:92:d1:
                    1e:a7:d1:bf:25:48:77:0a:ae:80:fc:4a:a5:6f:2d:
                    be:0e:fb:da:6b:09:2e:29:df:42:00:cc:6e:37:d9:
                    04:2b:a4:83:3e:be:a6:e1:61:6e:f2:34:a5:6a:60:
                    fe:1a:8e:7c:46:60:2b:54:27:03:e3:30:1d:23:73:
                    4e:2c:1a:6e:de:78:47:9b:60:50:49:f3:cf:a0:ae:
                    35:12:8a:db:e5:81:ca:59:ca:f8:03:17:79:ca:65:
                    57:fd:e9:01:85:3e:8c:0b:56:18:87:a0:32:f8:d9:
                    00:ca:50:7d:5f:59:88:56:a1:4a:28:c0:df:d3:eb:
                    6a:d7:c8:18:92:3b:76:42:3b:df:02:9b:ac:7c:0d:
                    3e:ea:e0:d4:e8:f5:45:16:37:2a:86:45:34:a0:d2:
                    cf:cf:2e:a8:4a:2f:c7:d4:7c:e8:a6:32:98:e3:40:
                    4f:f4:b8:fc:9a:68:b6:55:22:62:0f:01:ac:4f:46:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:F0:FA:B0:D7:3D:A1:D0:35:42:C0:15:51:8A:76:E2:EE:EE:0C
            X509v3 Authority Key Identifier:
                keyid:D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:24:35:ae:59:9f:79:78:71:e8:8d:16:1e:98:39:6a:20:
         1f:c9:88:ac:95:97:0a:60:10:11:81:fa:cd:65:a8:46:a9:c3:
         db:c8:62:24:2f:35:6f:70:21:7c:68:66:99:4d:59:2d:92:12:
         cf:c5:ba:a7:08:92:fd:a2:4e:79:ae:36:d9:d9:63:0f:df:49:
         11:ba:bb:96:a1:a8:44:30:a5:6e:98:e4:32:57:c3:36:80:34:
         80:ed:b3:d5:0c:3f:20:dd:4c:6a:94:17:4e:be:f1:66:76:44:
         e7:bb:11:af:95:bc:dc:58:03:60:28:d7:73:91:77:2b:3a:01:
         b7:46:ee:91:cc:c7:ec:9e:d0:fd:44:1e:2c:69:42:3c:b6:b3:
         5e:96:ef:5a:2a:82:5c:5d:94:3e:7f:8c:ce:b7:df:ac:1b:9c:
         07:ec:7d:bd:19:41:3d:16:42:6a:91:c9:98:f0:e1:88:6d:19:
         ba:d2:6f:49:40:a6:9e:fd:e9:e7:75:d7:87:d1:d2:ab:c9:55:
         af:c9:ce:93:e5:a6:fb:0c:a1:8d:87:79:67:8c:9e:5e:05:bb:
         eb:ad:46:b8:e7:81:0f:67:11:0b:07:70:86:db:df:fc:db:86:
         07:f6:12:3f:7f:60:b3:44:b7:ac:b7:19:6e:51:26:c7:09:9c:
         5a:47:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:54 2025 by rpki-client