Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa
File:                     323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa (raw, json)
Hash identifier:          LxmJ1RBbnRy39IKskRa3x3NtAKWf+7A2sDLFuyPH68g=
Subject key identifier:   A2:F3:6A:D0:CB:7D:CB:47:98:93:6E:58:CD:0A:0E:24:C0:71:EE:37
Certificate issuer:       /CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
Certificate serial:       0D04BB8D62ECE24491F8C0DD9A940183359AFFCC
Authority key identifier: FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa
Signing time:             Tue 04 Feb 2025 18:32:10 +0000
ROA not before:           Tue 04 Feb 2025 18:27:10 +0000
ROA not after:            Tue 03 Feb 2026 18:32:10 +0000
asID:                     264623
IP address blocks:        2801:1e:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:04:bb:8d:62:ec:e2:44:91:f8:c0:dd:9a:94:01:83:35:9a:ff:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
        Validity
            Not Before: Feb  4 18:27:10 2025 GMT
            Not After : Feb  3 18:32:10 2026 GMT
        Subject: CN=A2F36AD0CB7DCB4798936E58CD0A0E24C071EE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:23:5d:6c:51:5a:0c:eb:3a:3a:c8:bd:c8:
                    b6:8e:1a:96:d9:8b:2b:72:b0:f9:e1:a8:05:23:e4:
                    56:f7:70:67:4b:79:7a:cd:50:2c:5a:19:9b:7b:f0:
                    da:c7:c3:26:40:dd:3b:68:7c:fc:27:0b:5f:56:02:
                    11:0c:10:cb:d1:2f:6e:16:d0:ee:55:ef:a9:54:86:
                    a4:54:14:1c:e1:fb:65:8e:12:35:bb:37:7c:35:55:
                    d3:5d:e1:43:b9:58:f9:e7:ee:66:6b:ec:23:ad:93:
                    f6:4c:e4:47:f8:46:02:7c:a6:25:f3:e9:e5:fc:3a:
                    a1:96:df:be:cd:2e:86:04:4a:dd:a4:63:5e:96:39:
                    f9:b1:48:7d:96:ce:a1:c3:e8:0b:25:9a:21:8d:aa:
                    1f:1e:b5:d7:66:1e:24:74:16:ce:3b:87:51:c0:02:
                    da:de:14:0b:b8:08:6c:63:fb:ab:20:b8:a5:30:73:
                    7b:92:c8:3a:5d:dd:3f:3f:bf:00:b8:ec:22:3d:13:
                    74:93:dc:25:5b:01:82:af:f9:12:c3:bf:bc:4b:64:
                    23:10:1f:2b:c6:69:2f:fc:55:8a:96:74:a8:cf:ac:
                    2a:f2:6e:79:14:6b:4e:59:77:db:6d:06:36:22:39:
                    b8:c4:ff:d5:87:c0:b1:cc:ee:84:58:24:a7:56:0f:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:6A:D0:CB:7D:CB:47:98:93:6E:58:CD:0A:0E:24:C0:71:EE:37
            X509v3 Authority Key Identifier:
                keyid:FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:09:90:0f:b1:f9:78:18:9a:b8:bd:0c:ab:4b:e0:e2:f2:
         50:07:31:cb:3c:12:dd:71:9c:a9:a7:d5:ac:28:93:0b:34:9a:
         19:97:96:e6:52:50:9d:77:5b:21:f6:ba:9d:e3:45:ce:ec:c1:
         34:7d:29:9d:e3:d3:5b:5d:cd:e9:a5:72:c7:42:35:25:c2:e7:
         e3:96:1d:30:47:c1:3a:41:d2:b5:6d:a1:11:3e:ae:8d:ca:fc:
         43:51:f6:39:a8:18:87:09:61:38:50:cb:69:15:ea:74:36:d3:
         26:5b:e7:d3:90:58:12:dd:56:0f:42:09:cd:4c:7c:82:29:78:
         f5:4c:e3:35:21:16:ae:ae:23:9e:2a:30:75:94:63:92:1b:23:
         13:46:7b:b4:60:de:d1:12:b2:5f:45:2a:b7:28:db:4b:3a:38:
         10:dc:90:82:de:11:a4:b5:f7:7c:f3:10:0a:96:f0:da:15:b6:
         1a:77:9e:47:48:18:5a:3e:56:c7:2c:70:e9:2f:a7:5e:1f:65:
         ec:d0:7b:79:f9:ed:9e:a6:47:49:78:37:b4:43:60:8f:c7:87:
         13:01:cc:95:e0:2e:20:48:20:2f:69:8d:9f:67:d2:06:99:0b:
         9c:eb:66:47:04:e8:e6:f4:40:1a:16:cf:4d:1e:8d:4a:98:15:
         fb:be:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:40 2025 by rpki-client