Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa
File:                     323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa (raw, json)
Hash identifier:          G7Odmi3CvTgpoC79KFZaoFmHgmlY73smKpY42nLOyBU=
Subject key identifier:   C4:D4:88:7B:71:D1:C0:CB:24:7D:84:9D:9F:09:56:A5:88:8B:6E:2C
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       4DDAC366EB51F2B2B2E7CE9AE790761A0AD651F3
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa
Signing time:             Tue 04 Feb 2025 20:05:52 +0000
ROA not before:           Tue 04 Feb 2025 20:00:52 +0000
ROA not after:            Tue 03 Feb 2026 20:05:52 +0000
asID:                     52305
IP address blocks:        2001:1398:276::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:da:c3:66:eb:51:f2:b2:b2:e7:ce:9a:e7:90:76:1a:0a:d6:51:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Feb  4 20:00:52 2025 GMT
            Not After : Feb  3 20:05:52 2026 GMT
        Subject: CN=C4D4887B71D1C0CB247D849D9F0956A5888B6E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:b9:7a:29:a1:8e:8d:01:66:58:bc:4b:60:
                    8c:52:68:cb:60:6b:65:6e:3c:d9:01:f7:43:39:23:
                    7b:60:e2:6a:4b:af:58:c0:37:be:3a:ff:04:71:e1:
                    60:b8:b8:39:91:17:3e:dd:4b:fe:ac:91:7a:49:16:
                    27:8e:db:23:7a:22:40:cb:80:47:3b:26:85:0e:fb:
                    43:3e:35:1d:32:38:9d:bd:5a:4d:ca:39:f4:b9:7c:
                    1e:8a:59:86:50:38:21:2b:41:d9:3f:be:11:60:cd:
                    90:e1:39:15:f0:73:7b:2d:61:fe:e1:56:d5:79:7d:
                    a6:2c:40:96:4c:bc:37:66:c3:92:a8:75:f3:d8:00:
                    2d:cc:74:21:92:ef:70:81:42:fc:d3:e4:84:13:73:
                    3e:e5:ca:08:05:2d:23:07:b6:86:87:c1:37:d2:f2:
                    15:e7:af:e3:aa:0c:97:5e:4d:3e:89:aa:f5:b7:a2:
                    26:38:20:35:53:3d:f2:55:9e:99:29:a3:2f:d9:34:
                    85:4a:4f:93:3d:75:93:95:9c:ad:51:35:73:53:20:
                    26:90:46:d3:b1:95:5b:af:0a:db:e2:91:94:8d:49:
                    da:72:d2:21:5e:76:cd:3e:5c:43:2d:9b:30:13:90:
                    98:28:ed:28:67:c1:49:f0:76:c4:06:4f:4d:f0:4a:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:88:7B:71:D1:C0:CB:24:7D:84:9D:9F:09:56:A5:88:8B:6E:2C
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:276::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:24:e7:24:39:da:60:f1:aa:4f:33:ca:eb:dd:94:5a:c3:
         56:17:f2:7e:03:00:dc:4e:45:bb:ff:a4:35:44:75:29:5b:4d:
         95:a0:6e:f8:73:e2:84:f7:30:c1:76:d6:f5:7d:dc:27:27:87:
         33:f1:14:48:de:4d:07:d1:60:74:8b:7e:50:e1:10:ab:e9:e5:
         35:a1:eb:86:c2:9b:4d:52:2a:69:2b:68:c5:92:3f:2a:34:9d:
         5c:2d:6b:56:ef:a5:6a:40:67:d3:aa:32:63:f9:18:c8:c0:e5:
         87:e9:99:d9:2d:6a:5d:5b:45:a8:82:7c:f0:f7:1e:96:4b:a5:
         8b:85:f6:cb:07:8d:03:8f:d6:c8:3f:c6:5f:7d:d6:39:a3:ca:
         96:65:51:6f:37:5e:cc:25:67:8e:77:d9:44:f6:bd:74:cb:18:
         34:64:c2:20:90:24:84:a3:0b:40:9f:14:a3:23:8f:dc:f9:4f:
         21:a2:b7:f9:f1:96:8f:3d:59:a5:92:1f:1f:11:e7:5d:1f:24:
         c0:46:98:8a:fc:1f:67:61:55:f7:4e:83:37:04:d9:a2:b8:4c:
         c5:a3:05:de:ef:3e:69:43:4e:8b:9c:45:9c:4a:6e:7c:8c:81:
         58:e5:40:74:ee:10:bb:f6:7c:14:f2:55:47:2d:87:e6:24:75:
         ee:db:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:57:06 2025 by rpki-client