Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          Umv9ErLNxEvOya0FlIZ+q6d/jywP73o6oDj1i41iXsM=
Subject key identifier:   92:FF:BD:70:D8:FB:F8:CC:96:BF:72:B1:69:15:C7:03:CE:EC:C3:15
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       0F53B0C74C019616EFE523AE0534C8D9E85ED990
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 20:02:39 +0000
ROA not before:           Tue 04 Feb 2025 19:57:39 +0000
ROA not after:            Tue 03 Feb 2026 20:02:39 +0000
asID:                     18747
IP address blocks:        2801:115:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:53:b0:c7:4c:01:96:16:ef:e5:23:ae:05:34:c8:d9:e8:5e:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Feb  4 19:57:39 2025 GMT
            Not After : Feb  3 20:02:39 2026 GMT
        Subject: CN=92FFBD70D8FBF8CC96BF72B16915C703CEECC315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:b3:12:33:93:29:e0:2b:76:6a:c4:6e:f2:
                    79:c3:52:05:ea:18:eb:26:3b:b5:dc:9c:eb:aa:b3:
                    9a:d1:96:3a:37:3e:31:df:76:88:bb:8d:0f:1a:76:
                    ac:47:d3:19:3f:eb:ca:e0:58:39:16:8a:d9:15:29:
                    f1:f1:dc:4b:52:78:33:28:f9:6c:e4:38:1e:79:ad:
                    33:c4:30:0e:ca:6e:49:07:df:fa:ad:4a:6d:b1:bc:
                    bc:ca:fa:e8:74:b0:c0:17:30:bc:d2:46:be:df:1a:
                    0d:3e:cb:62:86:0f:7c:38:04:9f:48:ec:cc:f0:4b:
                    ec:41:02:03:ad:27:12:31:36:03:a7:b8:26:3d:90:
                    a7:4f:cf:e3:e9:d6:9d:43:20:a0:0f:2c:47:c2:38:
                    b6:c8:96:d1:1c:e9:db:16:2a:84:21:6c:81:99:d2:
                    6d:6a:f3:1a:b3:c7:52:c5:ea:fa:e1:97:da:bc:91:
                    8e:81:5a:cc:da:31:8b:96:9b:2b:8f:6c:77:06:a3:
                    08:35:37:dd:8e:c9:71:b1:77:62:5b:d1:34:8b:83:
                    55:fd:ef:ae:dc:f3:63:11:48:1e:86:5a:dc:14:a2:
                    58:50:ac:3d:1c:13:6f:db:02:7d:91:34:67:0a:f9:
                    7c:1d:c2:56:af:ef:a3:00:7d:d7:eb:e2:89:fc:7c:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FF:BD:70:D8:FB:F8:CC:96:BF:72:B1:69:15:C7:03:CE:EC:C3:15
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:cc:a2:a9:78:20:6b:75:be:a7:64:9a:39:60:48:3c:52:
         07:4d:85:e7:a1:e0:d1:03:7f:e7:6e:eb:cc:5e:d0:6b:83:61:
         6f:1f:42:d5:56:85:c9:54:09:b5:97:f1:0b:e7:6d:03:57:cd:
         29:e1:b8:e3:5b:20:39:49:4e:be:3a:83:77:22:63:99:b7:ee:
         7d:47:6d:20:53:b4:41:94:09:bd:11:93:8c:6a:d2:0f:3a:c9:
         11:29:a1:7e:f6:99:4f:64:6c:f5:df:cc:c5:9f:8c:80:21:cb:
         32:ce:5f:4a:31:9f:72:b6:ba:74:b6:a2:4f:04:84:d2:8b:33:
         51:33:eb:4b:eb:97:83:40:cc:b9:e7:07:2a:d5:0e:9f:1a:0c:
         11:a2:c8:31:4e:6a:2a:3e:dd:b8:10:e9:48:65:56:d7:1d:e4:
         af:8c:f3:c8:00:4a:f8:11:ff:92:28:f3:de:11:5e:5a:30:9e:
         49:09:be:d3:10:5f:6a:92:ae:51:02:c1:fc:9c:99:c4:5c:57:
         1a:ee:65:38:0e:27:63:42:5b:12:75:fd:78:b5:06:95:60:d5:
         6e:7a:91:c5:9c:bd:95:54:0a:21:ca:28:a9:f6:3f:b2:59:a8:
         b1:39:54:43:54:4e:ca:29:df:c9:55:4d:54:7e:da:c6:34:22:
         5c:7a:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:34:52 2025 by rpki-client