Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa
File:                     323830303a3633303a3a2f33322d3332203d3e2037303439.roa (raw, json)
Hash identifier:          vkiTKJ5xAHVyDTHVKBXb8b3Obk2e1tY/qDtKSqt77eA=
Subject key identifier:   25:92:5C:08:1D:4B:48:1A:CC:8D:3A:74:0A:35:C7:2F:E5:99:26:BC
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       1D0D4A96F74EB7EB518623B7FE249D0A9E539ECB
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 20:00:08 +0000
ROA not before:           Tue 04 Feb 2025 19:55:08 +0000
ROA not after:            Tue 03 Feb 2026 20:00:08 +0000
asID:                     7049
IP address blocks:        2800:630::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:4a:96:f7:4e:b7:eb:51:86:23:b7:fe:24:9d:0a:9e:53:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Feb  4 19:55:08 2025 GMT
            Not After : Feb  3 20:00:08 2026 GMT
        Subject: CN=25925C081D4B481ACC8D3A740A35C72FE59926BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:1b:ca:0e:46:1a:e5:38:54:8a:e9:35:94:
                    24:ae:25:48:12:35:a4:d6:8f:1d:02:44:0f:4c:fd:
                    76:db:fa:31:17:ed:31:64:42:22:f7:08:d7:8c:45:
                    a4:cd:01:ab:a3:be:56:ef:64:d3:c9:77:00:09:3f:
                    be:90:33:c7:48:cf:90:5c:ab:02:aa:0d:82:10:44:
                    db:ef:8a:2a:a1:38:e5:07:5e:e8:83:f7:7d:91:4b:
                    24:92:0e:c9:9b:80:ae:50:9e:3c:63:e6:d4:ab:a9:
                    65:3e:f0:42:75:83:a9:37:dc:00:e9:bd:0c:53:77:
                    b2:51:2b:b7:07:93:54:a9:7a:58:f2:cb:c9:8c:fe:
                    49:80:32:00:86:4d:8d:dc:1b:5a:1b:08:4f:89:31:
                    f8:da:9a:1b:45:30:bc:8f:e6:db:b0:a1:b1:f1:e9:
                    af:48:18:88:65:b1:c2:f1:de:80:d1:b7:52:4a:47:
                    97:8c:3a:96:9e:c0:3e:45:02:9a:ec:5b:f2:63:92:
                    91:aa:6f:bf:44:42:44:25:39:10:8e:cf:ba:05:7c:
                    94:35:3d:da:54:77:a1:21:6f:ea:15:74:1b:28:8a:
                    bd:d2:62:b3:f7:4b:61:d4:bd:11:09:de:b8:8c:20:
                    20:c7:51:d9:ad:49:2b:52:af:ea:73:91:81:ae:65:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:5C:08:1D:4B:48:1A:CC:8D:3A:74:0A:35:C7:2F:E5:99:26:BC
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:630::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:b2:16:4b:f5:0a:36:ea:28:d8:f9:98:37:6e:59:33:0b:
         95:c5:0b:5c:5b:3f:e9:eb:7f:17:d0:31:00:8e:6c:23:32:23:
         f4:d2:da:3f:58:14:e6:24:8a:80:84:b7:b5:03:84:23:cf:0f:
         80:6b:3a:29:cc:f7:e9:48:db:94:96:4c:2a:a3:54:94:cc:01:
         b9:ab:20:11:a0:29:f5:14:7a:1b:fd:45:db:d5:64:97:d4:63:
         03:f1:e9:50:01:3a:96:73:b9:b9:71:4d:94:9c:07:17:ad:83:
         5f:96:cb:84:ca:1b:12:9d:2b:97:24:70:49:c5:6b:fa:6c:62:
         f0:45:61:b9:f3:a9:3c:62:45:14:91:00:05:28:27:48:fa:bf:
         c0:32:3b:82:be:0b:65:03:65:f1:f2:08:ea:16:00:a5:b5:94:
         ff:45:b5:ea:94:e9:82:e8:f5:6b:94:c2:e9:a3:e2:6b:fd:5f:
         85:da:3a:04:fe:48:4c:59:ed:eb:46:f1:c0:ca:67:88:74:1a:
         05:2c:6a:4e:8a:f5:ed:69:26:fd:04:52:54:f5:09:d3:10:69:
         69:32:71:c8:3b:dc:7d:48:43:db:c0:45:d7:e7:e5:a0:c0:d8:
         b0:ba:88:0d:8a:8e:d0:07:e7:91:0d:70:4e:17:ea:be:51:60:
         3b:96:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client