Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/323830313a63343a65303a3a2f34342d3438203d3e20323730313637.roa
File:                     323830313a63343a65303a3a2f34342d3438203d3e20323730313637.roa (raw, json)
Hash identifier:          nkdfz7BsHQvY4H591DibP1uMSkz61E8ur9/JF5R9Eg8=
Subject key identifier:   99:7E:53:4B:8D:28:97:A8:E7:86:AA:4E:5D:06:8C:3D:AE:59:80:40
Certificate issuer:       /CN=679A5BC1EDD2E15290D48AAE9B647CC9FFF45624
Certificate serial:       2C0C7A0EED63414E9BFE487CDBA2FFD484A7EAFE
Authority key identifier: 67:9A:5B:C1:ED:D2:E1:52:90:D4:8A:AE:9B:64:7C:C9:FF:F4:56:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/323830313a63343a65303a3a2f34342d3438203d3e20323730313637.roa
Signing time:             Tue 04 Feb 2025 18:21:00 +0000
ROA not before:           Tue 04 Feb 2025 18:16:00 +0000
ROA not after:            Tue 03 Feb 2026 18:21:00 +0000
asID:                     270167
IP address blocks:        2801:c4:e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0c:7a:0e:ed:63:41:4e:9b:fe:48:7c:db:a2:ff:d4:84:a7:ea:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679A5BC1EDD2E15290D48AAE9B647CC9FFF45624
        Validity
            Not Before: Feb  4 18:16:00 2025 GMT
            Not After : Feb  3 18:21:00 2026 GMT
        Subject: CN=997E534B8D2897A8E786AA4E5D068C3DAE598040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:79:6b:1f:91:8a:ed:c8:82:1b:25:47:c6:
                    71:0e:55:7a:3a:9d:c4:92:17:9b:f0:bc:81:75:7c:
                    72:46:d6:70:3e:e6:22:23:d6:2c:92:f8:5c:b5:9d:
                    52:e6:e6:40:54:1d:ad:bf:4f:07:5e:18:6d:09:24:
                    3b:7a:c4:12:7a:c4:41:59:bf:45:cf:58:2d:50:ea:
                    8e:ec:36:1b:00:d5:04:00:33:0d:fa:34:4c:51:ec:
                    4b:48:87:7b:6d:9d:1e:eb:7f:f7:8b:56:4b:30:c3:
                    95:ba:0f:87:d1:a5:0e:a8:6c:c9:87:e7:e1:ac:33:
                    00:91:68:bc:b9:af:f4:2f:75:90:29:d5:1d:ca:ae:
                    62:c2:c6:e2:5e:ca:96:91:ff:61:0f:17:50:a1:37:
                    5c:5b:4f:93:32:e6:86:a8:02:b5:7a:12:4c:cf:7a:
                    55:e4:58:b5:ea:71:4d:a9:ef:2b:9c:7a:e9:a2:3e:
                    bf:35:0c:b9:0d:89:d0:c4:c4:9b:4d:10:57:1c:bb:
                    d3:fe:cd:6e:35:df:96:e5:97:29:53:da:e3:35:43:
                    96:9b:50:28:4b:fa:0e:0e:21:cd:d3:c1:6f:91:18:
                    dd:f6:2c:29:55:e1:e2:8a:bc:21:95:4d:28:94:9c:
                    20:79:32:dd:7d:d3:78:99:86:8e:e0:e6:cb:08:e6:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:53:4B:8D:28:97:A8:E7:86:AA:4E:5D:06:8C:3D:AE:59:80:40
            X509v3 Authority Key Identifier:
                keyid:67:9A:5B:C1:ED:D2:E1:52:90:D4:8A:AE:9B:64:7C:C9:FF:F4:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/323830313a63343a65303a3a2f34342d3438203d3e20323730313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:f7:af:12:b0:39:54:99:e3:ee:5c:3b:78:e6:e3:ae:47:
         01:d4:b6:7e:d1:ff:0e:73:74:c1:7c:c1:ab:ac:8d:aa:b9:51:
         bb:4d:9d:fa:81:eb:c4:21:dd:3a:1f:88:a7:b9:08:67:67:e4:
         d0:52:bf:6d:4a:c8:09:7b:59:4c:a5:49:e6:fb:88:31:ed:28:
         6f:36:8e:a4:c5:e7:9b:fa:ca:9f:49:2b:4a:a4:85:54:69:8c:
         be:94:6b:58:40:41:f4:ce:66:78:3c:62:bb:66:4a:80:70:15:
         7b:d0:18:b9:84:ba:10:59:fb:bc:85:63:f0:4c:5a:d2:f7:5e:
         87:1e:11:e5:74:5b:b8:09:ce:a9:10:81:7c:74:ba:ac:14:90:
         8e:37:9a:d2:42:2e:7e:fa:8a:cd:5e:87:c5:d9:1a:3f:da:32:
         a9:2e:30:b6:32:b2:0c:65:27:bd:11:c9:d7:3a:7a:d8:2e:4c:
         b5:75:87:c7:64:f9:d0:a8:9f:90:84:c9:d4:58:55:ce:db:b1:
         58:b1:8a:0c:92:28:4c:4a:31:83:05:33:d5:93:07:0b:76:05:
         f8:d1:6a:9a:f6:0d:78:b9:b6:f5:2b:4d:01:1a:f0:38:8a:f8:
         5c:02:3e:85:dd:ca:36:0c:cb:af:c8:ae:76:c2:80:8e:e9:4d:
         ce:9c:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:16 2025 by rpki-client