Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/323830313a31313a623830303a3a2f34382d3438203d3e203634313133.roa
File:                     323830313a31313a623830303a3a2f34382d3438203d3e203634313133.roa (raw, json)
Hash identifier:          OVq6e39yNKRjU+/7DEnWKggb096JDSact5cpjbHK2y8=
Subject key identifier:   0D:9E:B2:26:7B:50:DB:17:24:0D:CA:24:FA:80:46:BB:62:C4:20:BE
Certificate issuer:       /CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
Certificate serial:       73BB8CCF525DE39637DFC873B8EAA502C38D85EB
Authority key identifier: 81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/323830313a31313a623830303a3a2f34382d3438203d3e203634313133.roa
Signing time:             Tue 04 Feb 2025 18:48:55 +0000
ROA not before:           Tue 04 Feb 2025 18:43:55 +0000
ROA not after:            Tue 03 Feb 2026 18:48:55 +0000
asID:                     64113
IP address blocks:        2801:11:b800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:8c:cf:52:5d:e3:96:37:df:c8:73:b8:ea:a5:02:c3:8d:85:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
        Validity
            Not Before: Feb  4 18:43:55 2025 GMT
            Not After : Feb  3 18:48:55 2026 GMT
        Subject: CN=0D9EB2267B50DB17240DCA24FA8046BB62C420BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:2d:98:93:91:b7:67:3e:f2:57:88:6a:ee:
                    4c:9f:f9:72:e4:39:37:e7:9e:da:bd:11:bd:83:9d:
                    5b:bf:60:c5:aa:f2:10:6f:03:d3:8b:d2:04:8e:58:
                    c6:d9:6e:e4:5d:1f:fa:9b:93:4f:12:3b:ef:18:ee:
                    59:d8:7b:e4:a5:4c:69:f5:59:77:cf:01:19:b5:ca:
                    59:84:16:bc:b3:53:57:a0:2c:92:bd:f7:ba:d2:2e:
                    5a:17:a3:84:6d:06:81:d5:fb:22:c1:4c:dd:07:d8:
                    00:4f:c3:37:35:90:d2:88:4e:d6:34:29:68:60:23:
                    fc:88:27:af:51:41:4e:24:ed:fb:95:6c:33:b7:cf:
                    6e:6a:be:26:df:d7:2d:b3:9e:b4:26:c9:57:04:0d:
                    ab:95:ed:7f:26:e0:78:d8:8f:3b:4b:56:31:7a:9e:
                    71:a2:09:58:f6:60:c3:13:a2:07:dc:d0:21:65:38:
                    34:18:45:e6:47:55:c5:4f:e2:30:96:be:73:97:8e:
                    2f:74:ed:74:bb:95:46:35:f1:9a:25:c5:cd:84:0e:
                    12:c0:f7:6f:d3:d5:6a:2f:32:3f:03:2e:d1:2a:65:
                    cb:2f:f5:60:5d:fb:8f:39:0b:2b:38:83:14:65:8f:
                    b5:2f:71:db:2e:e9:c4:8d:98:47:57:20:87:5f:b1:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:B2:26:7B:50:DB:17:24:0D:CA:24:FA:80:46:BB:62:C4:20:BE
            X509v3 Authority Key Identifier:
                keyid:81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/323830313a31313a623830303a3a2f34382d3438203d3e203634313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:e7:9f:1c:02:10:ce:9b:61:36:4c:2a:93:13:1d:d7:30:
         9a:57:c7:68:3f:98:9e:61:48:0c:5e:eb:30:30:80:15:2a:de:
         28:0e:c6:22:db:bd:f3:dd:6f:b5:65:81:71:72:85:40:7f:3c:
         0b:c0:52:53:98:03:79:f6:dc:88:e1:54:ca:ad:07:b6:5e:0a:
         e5:ca:da:30:26:6d:44:b0:f8:3b:49:51:f5:2e:de:95:78:69:
         82:44:e8:85:04:3b:9e:0c:db:2c:27:ec:bd:c0:ff:4e:35:97:
         9a:dd:b4:fa:12:ff:2f:15:06:54:7f:9c:6c:d6:fc:83:43:72:
         fb:93:77:57:10:a8:17:a7:d6:cd:eb:7a:98:4f:96:55:df:32:
         14:55:fc:13:ea:dc:3b:de:e7:bb:fd:e5:80:4b:88:31:a1:79:
         76:ab:c1:c7:72:43:1f:c5:f9:2d:8e:8b:96:a5:5a:18:f8:d7:
         4b:4a:42:83:06:30:6a:42:c3:57:e2:e1:a5:38:30:1c:b2:f8:
         85:59:15:17:db:a7:03:b7:7e:4f:64:98:d3:b3:77:db:63:4b:
         44:aa:39:13:bf:6f:b4:e7:20:54:54:38:91:6c:7a:07:0b:5c:
         2a:e4:e1:a4:e4:4d:4c:f3:ef:df:34:d5:f2:22:4f:22:c4:39:
         5b:9a:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:46 2025 by rpki-client