Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa
File:                     323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa (raw, json)
Hash identifier:          vs9MbUobFVj3J84NooNPPUlmBexY893wLJS7nehVq+4=
Subject key identifier:   C8:77:75:F4:E0:48:9E:44:68:C2:4D:9A:84:C0:3A:3E:63:95:A6:E9
Certificate issuer:       /CN=D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E
Certificate serial:       2491D0CFE87285C86551E2AFC32FD8A59E80BC6E
Authority key identifier: D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa
Signing time:             Tue 04 Feb 2025 18:49:48 +0000
ROA not before:           Tue 04 Feb 2025 18:44:48 +0000
ROA not after:            Tue 03 Feb 2026 18:49:48 +0000
asID:                     273077
IP address blocks:        2801:16:b800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:91:d0:cf:e8:72:85:c8:65:51:e2:af:c3:2f:d8:a5:9e:80:bc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E
        Validity
            Not Before: Feb  4 18:44:48 2025 GMT
            Not After : Feb  3 18:49:48 2026 GMT
        Subject: CN=C87775F4E0489E4468C24D9A84C03A3E6395A6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:09:f9:a1:ee:a4:57:a6:e1:75:b8:6b:6e:
                    ef:5c:4f:08:e2:1d:5a:6d:7b:ec:ac:be:e3:70:71:
                    e5:30:b0:1d:54:56:a0:d5:29:92:94:5c:e7:98:57:
                    af:21:4b:87:93:de:ad:bb:4d:34:4e:9f:5b:16:ab:
                    04:ec:fa:c6:b3:fa:ed:f1:ef:6f:5a:6e:bf:ff:2a:
                    66:01:d9:8b:ee:9e:2b:fb:f5:54:20:60:93:98:62:
                    42:91:8f:25:63:57:e5:b6:b0:0d:a2:fc:d7:0f:b6:
                    c9:6a:fd:92:c9:33:b7:1b:fb:24:96:bb:df:47:f6:
                    24:d1:71:ce:7b:78:1d:99:8c:1c:54:c3:3b:9e:e8:
                    10:3c:1e:e0:27:14:c2:05:79:20:6b:c7:6d:75:70:
                    17:fc:a9:08:a8:24:c2:dc:ed:ed:46:c0:89:4b:42:
                    58:4f:5a:24:aa:63:41:83:c9:b1:52:85:59:67:8d:
                    31:b1:4b:65:26:40:72:7a:53:b5:a3:74:79:63:b8:
                    5d:b9:14:27:96:ca:4c:c8:e3:21:20:d3:0a:ce:2e:
                    8b:6d:49:29:91:7b:52:9a:d1:73:4a:22:a1:d1:da:
                    d4:eb:43:d4:ba:00:03:53:2f:12:28:54:06:85:d9:
                    17:a9:ad:b5:92:4a:85:85:71:a3:ba:39:f4:01:04:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:77:75:F4:E0:48:9E:44:68:C2:4D:9A:84:C0:3A:3E:63:95:A6:E9
            X509v3 Authority Key Identifier:
                keyid:D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:c9:15:92:af:3b:7a:a9:04:dc:5c:b8:bd:26:00:4d:ee:
         ca:81:f6:46:a2:db:c7:6f:d6:3b:90:9a:6b:23:c5:3b:1c:70:
         cf:a5:2e:3f:0e:2c:a5:ae:34:1d:a4:0c:0b:ca:5d:2d:ee:9c:
         e9:55:f2:f6:9f:65:ce:b0:4a:02:09:40:f6:65:51:1e:d0:0f:
         05:ec:db:c7:58:99:de:4b:8d:7a:b4:cf:c5:f9:0d:1e:b5:0a:
         38:c3:8d:46:63:af:44:0b:85:ac:0c:3e:51:1b:6b:72:0c:59:
         05:2b:04:02:58:2d:78:37:9e:22:0a:c5:d0:fb:5b:da:e7:00:
         38:2a:ca:a7:07:59:e0:3d:10:36:84:3f:80:6a:5c:43:61:78:
         43:b3:8c:0b:e1:8a:43:f6:ff:72:3e:48:99:89:2f:22:f1:23:
         c5:d0:b5:8a:31:06:30:b1:83:6f:bb:d8:0c:29:6b:34:34:82:
         7d:aa:e3:15:65:1a:05:dc:60:79:a0:1a:de:01:ca:b9:ee:43:
         f3:fc:26:ae:8e:50:79:5f:78:1e:3e:94:48:47:04:b5:f0:d9:
         0d:6d:ca:6e:e6:14:89:a9:7b:4b:af:3e:62:ab:21:df:5c:a5:
         91:92:62:8e:8c:0a:1a:66:72:60:80:04:f1:44:03:db:cc:ae:
         93:c1:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client