Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2033353439.roa
File:                     323830313a31313a613030303a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier:          HjkRjIZBzR0bUtSaH1vlrfykMFmDoA/7k3yKCV24D5s=
Subject key identifier:   09:19:85:7C:75:63:D2:8B:85:77:23:18:19:8E:B2:23:8E:F7:5B:2F
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       48AEBBA2D9824E1EB518A89D7795EDBF8F7941A0
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:29:24 +0000
ROA not before:           Tue 04 Feb 2025 18:24:24 +0000
ROA not after:            Tue 03 Feb 2026 18:29:24 +0000
asID:                     3549
IP address blocks:        2801:11:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ae:bb:a2:d9:82:4e:1e:b5:18:a8:9d:77:95:ed:bf:8f:79:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Feb  4 18:24:24 2025 GMT
            Not After : Feb  3 18:29:24 2026 GMT
        Subject: CN=0919857C7563D28B85772318198EB2238EF75B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:30:0b:9b:2e:d5:f9:a7:5f:38:50:bb:eb:
                    73:e6:c1:3d:b4:3f:1b:57:7f:a7:eb:0c:d1:3b:45:
                    51:58:b0:f2:4c:1d:06:7d:ce:ea:18:0c:70:3d:2e:
                    16:72:53:58:9b:a4:dc:15:c5:b0:c3:40:49:b8:a5:
                    f2:bb:98:98:e0:0e:89:a2:a6:aa:73:95:11:5c:0c:
                    8d:44:37:a3:2a:fb:8d:af:11:c6:12:5f:5c:86:e9:
                    90:db:f8:f9:46:62:0d:23:77:c9:2f:29:97:c9:66:
                    5f:d9:d6:df:b6:1b:45:10:e6:d1:48:13:36:7c:fd:
                    e6:91:8f:50:6c:67:c9:ea:65:b3:72:6c:87:8a:f8:
                    44:c3:67:50:cf:4a:40:f8:02:6e:d3:f0:83:1e:c1:
                    5c:b6:a9:95:1c:5c:6e:93:72:35:59:18:fc:a2:ad:
                    06:ee:43:1c:33:28:95:35:ee:cf:41:94:f9:69:f8:
                    87:dd:fb:9b:55:92:35:63:fb:46:14:03:26:32:3c:
                    1a:c6:93:b3:89:67:99:66:9a:13:dc:93:eb:b7:c9:
                    5e:72:c6:96:94:3f:38:00:5f:0a:de:5e:de:03:55:
                    9a:37:8b:4d:85:0d:36:c8:07:3d:17:e4:12:29:3c:
                    b8:1d:e1:6a:ad:ab:d2:c1:bd:0b:10:c0:72:4b:59:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:85:7C:75:63:D2:8B:85:77:23:18:19:8E:B2:23:8E:F7:5B:2F
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:c7:27:db:e3:a6:b0:f5:e2:db:09:2f:c2:39:ff:69:e5:
         e1:ce:91:a6:e5:af:af:ad:ce:7a:b5:56:ef:8c:a3:92:fa:a6:
         c5:3c:22:cd:3d:1c:61:62:6d:1d:86:d7:d5:6e:d9:3a:da:d5:
         aa:2d:f3:6c:86:b0:43:b6:d5:28:23:77:67:05:4a:80:d0:55:
         97:45:66:3d:98:85:2b:75:e3:7a:f5:54:0b:8b:30:d9:7c:f8:
         a5:17:92:06:1f:f1:d9:e0:a3:67:b7:ad:c3:56:b6:f6:7a:47:
         a5:93:69:c2:69:62:69:61:99:b5:3b:3e:48:b0:ff:89:21:ce:
         90:3e:8f:ee:94:2c:01:3f:9f:ed:af:e5:11:68:71:20:22:b5:
         fb:f2:1c:17:90:df:95:aa:d9:74:22:68:59:11:25:8a:43:3d:
         c4:c9:5d:99:a4:30:5a:3c:1e:be:77:8b:15:68:a7:d7:9f:c4:
         2a:c9:22:ab:0b:b1:f1:0e:8d:71:f1:9d:16:05:84:12:38:8d:
         92:d6:ae:d3:76:fd:95:b1:46:90:98:8f:87:06:43:7e:83:24:
         a9:98:0d:38:73:57:51:1c:a1:a0:d5:b8:dc:a3:79:f7:8c:7c:
         a3:b9:d7:ff:1c:9c:e6:a8:27:ed:35:c8:20:c5:33:51:b8:de:
         1c:58:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:30 2025 by rpki-client