Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa
File:                     323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa (raw, json)
Hash identifier:          gCyOCEnOzVnIEcsasmuYiDYc9fN7AAPYlUSTehKDRgk=
Subject key identifier:   9E:E2:37:D2:5F:61:49:07:EC:D4:8C:D2:4A:6B:95:47:2E:D0:1A:A7
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       279755E5CCF8E78A59833DD6A8A361D1F468599D
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa
Signing time:             Tue 04 Feb 2025 18:40:26 +0000
ROA not before:           Tue 04 Feb 2025 18:35:26 +0000
ROA not after:            Tue 03 Feb 2026 18:40:26 +0000
asID:                     28008
IP address blocks:        2800:3a0:192::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:97:55:e5:cc:f8:e7:8a:59:83:3d:d6:a8:a3:61:d1:f4:68:59:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Feb  4 18:35:26 2025 GMT
            Not After : Feb  3 18:40:26 2026 GMT
        Subject: CN=9EE237D25F614907ECD48CD24A6B95472ED01AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:36:68:8c:df:4f:38:d3:e7:9a:f4:f6:22:
                    96:01:82:32:54:98:0a:a4:28:fb:85:51:81:17:90:
                    54:64:1b:a6:d5:7b:89:d5:9d:8c:6c:3e:e3:3e:12:
                    24:5f:cb:94:46:ef:2d:2d:ca:4f:c7:86:c8:39:3c:
                    24:7b:09:92:6c:d9:02:40:53:55:b3:e2:3b:83:8b:
                    7b:30:9c:6e:2e:3d:70:90:04:2b:1c:b9:b6:c3:28:
                    95:53:7f:0e:51:77:80:b0:41:0e:1d:22:e2:16:fa:
                    f4:b2:0e:c8:c1:42:08:0c:e6:0c:fe:ea:89:0d:1a:
                    69:32:f2:55:90:9d:54:7c:c2:a2:65:e9:76:c3:f5:
                    93:47:d5:8e:79:19:6e:5c:e2:04:20:19:19:c7:20:
                    7a:6e:6f:e4:83:d2:3d:54:a9:1f:43:09:8f:93:06:
                    82:c9:d9:da:83:c7:bb:63:22:2c:58:7b:0f:25:bf:
                    e7:25:82:87:c1:c7:e1:7a:21:24:3f:bf:bd:eb:18:
                    4e:b2:66:3f:d7:fd:cb:87:36:49:38:10:99:d8:44:
                    1f:74:35:ae:6e:14:c2:43:f4:8f:d4:f5:f3:1c:5a:
                    17:e9:a4:d1:d2:f8:f4:63:ec:e0:12:30:14:06:70:
                    13:6d:64:ad:65:74:fb:b5:f1:75:d2:ef:2a:0b:7d:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:37:D2:5F:61:49:07:EC:D4:8C:D2:4A:6B:95:47:2E:D0:1A:A7
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3a0:192::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:39:7c:aa:bf:e1:8e:bc:f7:55:0e:79:6b:22:d0:c8:6a:22:
         67:e1:33:8d:de:dd:50:37:6c:2f:eb:75:e3:26:c1:06:a4:b3:
         5f:a3:62:f2:cb:e7:78:0f:4e:3c:85:13:ad:72:f9:b5:ba:ae:
         8c:e6:c9:fb:c7:b8:f6:c2:45:4a:4a:fc:cb:72:5c:ad:30:9f:
         ef:d9:e6:34:2d:06:43:af:b9:fe:05:0d:11:3f:6a:5f:43:f0:
         9a:36:52:b0:95:82:57:b5:05:60:9f:91:e5:17:5d:aa:00:54:
         3c:ee:38:d9:f5:d6:99:83:e3:fe:c0:65:e0:68:b4:38:43:59:
         e5:47:da:ba:7e:76:7d:68:9e:c4:1a:fc:0c:19:4b:fa:72:a9:
         7c:d1:81:f5:65:a3:dc:ba:71:c6:67:f9:9e:88:c0:53:91:9f:
         0e:8a:0f:f0:1a:02:b5:cf:83:27:78:3e:ea:73:98:d5:65:5c:
         5d:49:8e:97:93:7c:00:5a:6d:3f:ec:06:5f:9f:ae:9f:77:71:
         7a:4c:3f:4e:c0:32:2d:57:ff:81:94:44:ac:e5:ab:5d:d4:be:
         d6:bb:09:b7:7c:41:a9:be:9f:9e:9e:f3:72:23:20:56:cc:1f:
         94:39:17:2e:10:25:60:a9:df:19:7c:2a:2f:9b:19:42:97:22:
         e9:02:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:20 2025 by rpki-client