Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a346430303a3a2f34302d3430203d3e203237393531.roa
File:                     323830303a3439303a346430303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          rh5HKYWbfg5y628c9P8azWhMyDkWtN6bEfNiKd1IASQ=
Subject key identifier:   36:72:40:48:82:0E:9E:75:17:24:00:F7:40:A2:27:62:A4:0A:C5:EF
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       20EE69B08463E4B368C339CEB60BF4E3201DA75F
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a346430303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:57:05 +0000
ROA not before:           Tue 04 Feb 2025 19:52:05 +0000
ROA not after:            Tue 03 Feb 2026 19:57:05 +0000
asID:                     27951
IP address blocks:        2800:490:4d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:69:b0:84:63:e4:b3:68:c3:39:ce:b6:0b:f4:e3:20:1d:a7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:05 2025 GMT
            Not After : Feb  3 19:57:05 2026 GMT
        Subject: CN=36724048820E9E75172400F740A22762A40AC5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:28:a1:ce:b6:3a:74:0f:7c:6f:b3:3f:7f:
                    b9:b4:3a:c3:aa:3b:2e:55:c9:59:be:5d:02:44:d3:
                    27:e4:9f:51:31:00:13:d9:25:97:1f:a3:ef:6a:40:
                    ae:91:09:b3:61:0f:6b:67:c3:26:fd:ca:56:1a:28:
                    d5:4a:e8:62:5b:26:8c:36:4f:fa:f5:5a:57:4e:d7:
                    48:9a:c6:6d:bf:d2:87:e0:f7:0c:1d:9a:91:a4:58:
                    9e:5e:bc:65:78:a5:82:5e:83:de:e8:5c:57:06:dd:
                    f9:53:7a:d2:7a:d9:a6:54:1b:05:5a:c8:28:75:8a:
                    9b:ff:e4:7e:4d:88:7c:f1:d5:75:83:2e:bf:04:24:
                    f1:cb:ef:f0:af:9c:ae:01:cd:33:7e:69:97:fc:81:
                    9f:b3:88:0c:a4:c4:f0:52:b5:dd:bd:f9:12:f6:be:
                    26:35:99:49:6f:59:a4:bc:c3:eb:ed:51:a1:2d:98:
                    bd:c3:b7:40:51:79:3b:1e:82:0a:97:b0:04:c7:78:
                    69:54:f2:fa:43:94:67:1e:96:e2:a1:6c:20:a8:4a:
                    7c:84:a4:ec:12:cf:cb:34:92:6b:e5:38:aa:4c:f2:
                    eb:15:b8:6e:5c:1a:a1:17:3f:e3:de:c7:e6:ba:05:
                    79:56:a5:cc:28:11:d2:78:db:10:ba:58:a6:2c:74:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:40:48:82:0E:9E:75:17:24:00:F7:40:A2:27:62:A4:0A:C5:EF
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a346430303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:18:8c:50:c9:70:94:d1:04:ec:34:aa:8f:68:00:78:b3:cc:
         8d:e5:1f:9d:5f:66:e8:58:cb:bc:ee:ee:6b:f7:82:da:49:88:
         32:6d:9b:1a:38:4c:84:7e:0c:07:26:fa:2e:a6:0d:d7:e6:6c:
         68:09:f2:40:8b:c3:f9:81:fd:21:25:a6:3a:8e:b2:0c:06:a0:
         48:bb:57:58:e5:c2:a8:f5:2b:ee:3e:61:76:a2:ac:bb:bb:ca:
         d2:25:6a:bf:30:c8:a6:c2:24:8e:71:66:8b:90:dd:84:71:d4:
         8f:8a:30:ba:7f:18:6f:cf:df:7f:11:27:82:c8:ce:b5:ab:f5:
         cb:10:1e:db:3c:bb:dd:3c:3e:ce:bd:a1:f6:85:9d:49:3b:7e:
         a9:f1:b5:9e:b0:c2:dc:38:c2:52:b7:1d:0e:97:5e:60:c8:b2:
         d6:a3:b5:0b:db:ca:e1:68:79:df:15:00:cf:68:b7:5d:18:fa:
         25:38:0e:bc:cc:58:f1:bd:2f:38:5a:2f:1a:c1:26:66:b9:f6:
         3c:d4:64:16:0b:ad:9b:aa:02:7c:a7:b6:6a:37:66:a3:94:b9:
         8d:85:2a:71:b2:ff:d8:f2:55:a9:f3:f5:80:23:47:01:68:42:
         3e:33:84:13:64:ab:fe:51:e1:10:19:09:23:02:f4:e8:09:7b:
         83:e9:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:29 2025 by rpki-client