Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa
File:                     323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa (raw, json)
Hash identifier:          LLWJG+b6UvUzVyXMA5/vA0wsJ5Dzdc9cIZ1FuQCXyFk=
Subject key identifier:   74:97:01:EC:4F:DB:C6:A2:61:43:49:63:66:3E:F6:9F:51:ED:92:73
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       724680FDBBABD86DE6C29C963B27AA3CD7B538C4
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa
Signing time:             Tue 04 Feb 2025 18:27:00 +0000
ROA not before:           Tue 04 Feb 2025 18:22:00 +0000
ROA not after:            Tue 03 Feb 2026 18:27:00 +0000
asID:                     264630
IP address blocks:        2800:110:2200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:46:80:fd:bb:ab:d8:6d:e6:c2:9c:96:3b:27:aa:3c:d7:b5:38:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:00 2025 GMT
            Not After : Feb  3 18:27:00 2026 GMT
        Subject: CN=749701EC4FDBC6A261434963663EF69F51ED9273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:2d:a1:80:f6:df:00:3e:9e:b3:b9:2b:71:
                    cb:9f:e0:fe:e6:6c:ab:4d:b1:95:5d:63:98:ed:aa:
                    ab:90:a2:28:bb:f3:39:e1:0a:cb:19:4a:ed:4e:f9:
                    f7:70:73:bb:2e:69:fe:ba:15:5a:b4:4d:88:f8:eb:
                    9c:e6:f4:15:ae:31:9d:ff:f3:5d:5b:c3:3b:c0:ce:
                    ef:40:2f:24:10:8c:a1:07:08:ce:2d:1e:90:64:e8:
                    2e:8b:8b:9a:1f:4b:ab:5f:55:00:3d:d2:85:94:3e:
                    3d:12:88:d1:50:7a:35:d9:08:f5:af:26:a8:29:01:
                    5d:e7:a5:34:6c:38:c0:2c:c1:6e:39:a0:3d:f3:31:
                    e1:4b:21:e5:8a:66:32:fb:f4:70:01:26:ce:28:ae:
                    bf:9a:2b:39:ae:cd:f9:f1:49:4c:0a:f6:e4:a1:8f:
                    9b:62:31:be:3c:68:47:ec:98:c5:15:25:ac:04:68:
                    47:c0:7d:82:b7:90:15:82:17:9b:09:5f:08:0b:a7:
                    11:5b:c7:24:75:af:a9:eb:97:02:02:90:00:56:d0:
                    70:f9:55:d5:ca:e9:1b:f5:9c:0c:6a:f4:d9:0b:41:
                    c5:57:f9:4a:01:cc:52:df:9d:ad:27:80:75:14:92:
                    e3:78:b9:83:26:0e:48:e0:47:92:a5:4f:0b:c9:0f:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:01:EC:4F:DB:C6:A2:61:43:49:63:66:3E:F6:9F:51:ED:92:73
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:b7:29:5c:76:c8:7e:05:23:f6:f9:87:a3:d0:69:b6:79:
         f6:16:20:d7:c6:f5:fa:86:59:55:e6:67:f8:6f:9d:4d:57:2b:
         bc:82:9e:33:26:93:3e:96:e1:05:00:4f:f2:cc:7d:df:6c:37:
         bd:d1:86:84:20:09:c1:03:7d:d3:5e:15:67:de:12:c8:1f:d4:
         1e:4b:bf:fe:2a:4d:9d:2f:ea:3c:e5:4a:84:e3:bb:22:f3:a8:
         44:b3:36:a7:29:70:3a:aa:05:2d:cf:b2:c5:04:f4:fb:62:2f:
         cb:85:b0:5c:a9:20:90:29:d0:00:d2:39:1d:8e:c1:2a:84:de:
         23:53:98:3c:f0:af:13:78:6b:20:06:43:d2:52:ea:24:07:da:
         c2:fe:12:7a:e6:d2:c5:ab:1a:8d:b6:05:75:9b:1a:28:6d:eb:
         e1:2a:30:f3:16:2b:0c:40:16:4f:0d:0f:dc:6e:3b:10:e7:c7:
         6d:5e:84:61:59:4c:34:a7:6f:85:9e:d2:f7:3b:57:dc:1a:64:
         a6:93:73:b9:75:34:9f:3c:01:b3:49:80:42:52:6a:b1:ff:f4:
         7f:65:e6:a2:31:e4:bb:d7:87:9f:ab:e2:07:69:27:f6:3a:75:
         04:b9:be:80:a4:e4:85:58:9f:7a:7d:2a:82:6d:0c:06:bb:0f:
         e6:db:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:26 2025 by rpki-client