Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa
File:                     323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa (raw, json)
Hash identifier:          P9VjinEvLUEaLCmNIFDUcjsWI8E+dts9lLGtjxuUhI8=
Subject key identifier:   04:3F:19:CE:52:C0:81:48:EE:FF:58:8D:6F:EA:0B:71:4E:DB:50:45
Certificate issuer:       /CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Certificate serial:       156DDFD8872A8B2DFA2D1DAA8EDEF39F3016C3BF
Authority key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa
Signing time:             Tue 04 Feb 2025 18:53:40 +0000
ROA not before:           Tue 04 Feb 2025 18:48:40 +0000
ROA not after:            Tue 03 Feb 2026 18:53:40 +0000
asID:                     61499
IP address blocks:        2801:19:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6d:df:d8:87:2a:8b:2d:fa:2d:1d:aa:8e:de:f3:9f:30:16:c3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
        Validity
            Not Before: Feb  4 18:48:40 2025 GMT
            Not After : Feb  3 18:53:40 2026 GMT
        Subject: CN=043F19CE52C08148EEFF588D6FEA0B714EDB5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:ef:a3:53:44:53:cf:67:74:16:15:e2:31:
                    4e:a1:67:69:62:fb:5b:55:16:d6:36:d8:ac:c1:c4:
                    67:85:11:a3:42:39:28:b8:64:83:69:db:de:7f:6d:
                    23:d6:5a:dd:bf:30:b3:c7:c1:3e:4e:fd:0f:10:26:
                    fa:6d:88:46:c2:78:c7:8b:c8:4f:5a:82:44:79:fe:
                    eb:57:1e:47:82:93:c2:f2:ea:2f:d6:f8:c1:a1:02:
                    37:1b:5a:f0:ad:c4:58:dc:57:29:cd:f1:2e:31:07:
                    1d:be:69:4a:f9:ec:bc:86:a8:d7:9b:42:da:47:35:
                    80:31:59:d8:25:8c:ef:f3:73:d1:fd:45:81:ff:85:
                    d6:72:58:c1:eb:37:be:32:86:0f:d6:9f:4f:e7:8f:
                    bf:0e:d5:ce:f4:61:fa:e2:87:07:5c:78:fe:e1:27:
                    63:31:3e:d3:dc:60:ab:3b:29:ec:40:4d:91:fe:64:
                    81:71:64:ed:19:b0:46:3a:65:87:2e:d9:4f:94:99:
                    79:46:9c:cc:8d:0f:5b:f9:32:14:54:1b:99:4e:78:
                    f1:95:06:fb:5c:db:6b:f7:bd:75:b9:01:67:f3:d8:
                    7f:25:23:66:f6:41:d9:8a:d3:59:e3:a4:c7:ca:57:
                    3a:ea:ab:f0:ba:29:67:77:f0:33:9f:09:03:70:d8:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:19:CE:52:C0:81:48:EE:FF:58:8D:6F:EA:0B:71:4E:DB:50:45
            X509v3 Authority Key Identifier:
                keyid:0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:28:c8:ab:e9:7c:06:eb:07:85:a7:b2:4d:f0:8f:be:36:
         b3:51:24:58:db:4d:1e:a1:50:17:da:c7:c9:be:d2:cb:c3:fc:
         a4:69:21:f7:c8:01:66:f4:50:e8:ee:b3:d0:93:b1:a2:0a:b4:
         3f:21:7f:d4:8c:de:c5:f0:fd:be:e0:c4:35:d5:1b:3d:38:98:
         da:fd:0b:f0:3a:38:22:df:ee:17:23:6e:42:48:98:20:b8:8f:
         73:fa:1a:51:2d:fb:38:36:a8:24:c0:64:09:e0:a7:c3:64:98:
         85:aa:16:01:91:96:41:80:4e:93:86:b8:d8:00:af:98:fb:a2:
         57:e7:84:bc:d9:74:b1:0a:31:6f:89:be:8f:c8:1e:b1:7e:81:
         94:bf:23:d6:3e:db:fa:da:24:fc:33:74:ee:f2:3e:c5:7f:18:
         12:df:c2:72:c5:f6:f8:94:1a:f9:be:d6:0a:65:93:d5:1b:bd:
         ef:8d:2a:6a:21:9a:01:26:6f:43:89:bb:9c:a0:c9:5e:af:fb:
         56:28:38:7d:7d:3c:fb:9a:bd:ef:95:16:b7:df:fc:e1:7c:59:
         cc:93:8d:ff:63:1e:0d:5b:fb:82:59:28:7f:09:60:f7:73:50:
         a9:ea:0a:df:c7:56:86:07:77:2d:3f:fe:22:6d:d7:59:59:89:
         d7:0a:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:47:05 2025 by rpki-client