Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
File:                     323830313a303a39303a3a2f34382d3438203d3e203238313039.roa (raw, json)
Hash identifier:          7Rs5pUI05riMcv+p44YeDpRw4NApJo7cEDrExen8G44=
Subject key identifier:   FE:62:F3:76:D7:91:46:1A:92:40:82:59:91:CF:3B:45:9B:6C:14:B0
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       3C8AB88CD8ABC43111917F7657A4BE8867EBD927
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
Signing time:             Tue 04 Feb 2025 18:34:55 +0000
ROA not before:           Tue 04 Feb 2025 18:29:55 +0000
ROA not after:            Tue 03 Feb 2026 18:34:55 +0000
asID:                     28109
IP address blocks:        2801:0:90::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8a:b8:8c:d8:ab:c4:31:11:91:7f:76:57:a4:be:88:67:eb:d9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Feb  4 18:29:55 2025 GMT
            Not After : Feb  3 18:34:55 2026 GMT
        Subject: CN=FE62F376D791461A9240825991CF3B459B6C14B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:63:cc:70:3b:d8:40:bb:9f:21:59:84:97:
                    d8:05:e0:72:0b:c4:f4:00:65:10:e3:79:0d:b9:35:
                    b7:44:03:77:2e:77:df:79:07:ae:12:23:45:85:fd:
                    42:1f:26:7a:02:52:94:be:34:cd:41:99:e2:97:76:
                    7c:66:18:1f:8e:0a:24:04:78:70:a0:3c:c0:58:7b:
                    f4:c0:43:4d:d1:63:80:91:a2:46:0f:5d:46:69:ec:
                    b0:90:47:67:dc:60:cb:c3:f1:50:e8:9f:0b:d0:62:
                    fc:2d:32:e1:44:df:5e:4a:98:c0:08:b0:fe:8e:9e:
                    1e:da:1b:11:da:b9:62:65:cf:33:1b:38:04:74:62:
                    c8:79:40:1d:20:cb:0a:51:0f:07:9c:21:99:07:78:
                    3b:83:a8:a7:8e:5b:7f:b4:97:da:b9:12:8b:e3:b0:
                    d1:f4:48:73:8d:6d:08:52:0f:5d:13:88:fd:b9:74:
                    1c:24:19:17:05:b7:7a:62:f2:19:cf:fd:7c:87:f8:
                    da:25:16:e4:c5:75:a2:e1:65:29:65:2e:35:67:b3:
                    7f:ef:97:ec:85:e7:ad:a2:d8:19:6e:12:16:a5:2c:
                    f1:12:23:c7:c9:1a:04:93:42:01:75:10:97:ed:61:
                    38:c0:d8:39:c3:11:11:19:08:45:dd:1f:12:d2:f7:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:F3:76:D7:91:46:1A:92:40:82:59:91:CF:3B:45:9B:6C:14:B0
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:97:ff:3b:0c:d1:a5:ef:d7:fe:9e:ca:cd:39:53:60:b5:06:
         4e:21:32:d6:65:7d:6e:c1:10:68:22:cf:da:80:c8:26:9b:65:
         60:c7:ab:35:e5:ca:30:e1:f9:8b:c6:70:4f:76:2e:ff:10:03:
         ca:c0:d2:ca:09:d9:ee:1e:fa:c3:d1:3d:bc:e2:bf:49:0b:96:
         e1:6d:69:5b:62:e9:9a:6f:ff:ed:5a:20:84:cb:93:46:6a:d1:
         22:36:8a:67:02:b2:01:33:1a:f3:aa:93:54:e3:ea:11:c6:ef:
         89:e8:df:42:1d:0a:b7:77:f1:52:34:59:1f:31:3c:17:49:5d:
         a2:f8:48:0a:8d:6e:36:0b:fd:c7:b3:c7:12:95:62:b8:9c:ae:
         b0:36:ad:53:d4:9e:d8:66:d7:fc:87:00:20:18:58:6e:20:6c:
         21:46:02:be:ad:6f:d0:f6:96:be:34:1f:5b:5a:5c:b5:e9:e0:
         3e:f1:df:60:46:93:16:b2:af:a9:dc:14:bf:17:86:71:3f:62:
         f8:77:a6:68:67:54:37:f0:ac:63:da:81:a5:fd:3f:fd:2a:fa:
         0f:71:47:19:52:7b:ca:18:49:56:8b:68:11:89:7a:03:0e:9a:
         89:4e:78:8b:f9:c3:a9:57:ef:3a:9c:4b:ad:53:16:00:17:6f:
         42:57:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:15 2025 by rpki-client