Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa
File:                     323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa (raw, json)
Hash identifier:          cSbiujnfIsLtX/iLazt2Xi0VqwGC2Sp5IMgxpZxNWUk=
Subject key identifier:   76:8B:FC:C7:BF:23:2A:25:7D:D8:45:72:B3:8B:03:0B:D4:C4:AB:E0
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       4C355B6C0F0C787E3E83B1ADF90448CFDA3E16F0
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa
Signing time:             Tue 04 Feb 2025 18:38:03 +0000
ROA not before:           Tue 04 Feb 2025 18:33:03 +0000
ROA not after:            Tue 03 Feb 2026 18:38:03 +0000
asID:                     202
IP address blocks:        2801:1a:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:5b:6c:0f:0c:78:7e:3e:83:b1:ad:f9:04:48:cf:da:3e:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:03 2025 GMT
            Not After : Feb  3 18:38:03 2026 GMT
        Subject: CN=768BFCC7BF232A257DD84572B38B030BD4C4ABE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:ef:90:ea:7b:8e:29:7f:7a:5f:68:2b:59:
                    0c:8c:95:c3:86:0f:24:34:41:04:f2:ef:75:49:a4:
                    3e:8a:bc:a4:66:f5:b7:ac:04:08:3b:a6:40:35:0c:
                    34:2a:6a:63:40:2b:36:d9:df:67:10:14:a1:4b:3d:
                    a2:ac:ed:93:35:63:9e:7b:2b:54:f6:30:06:ff:26:
                    ef:47:4e:70:b3:b3:c4:e9:25:dc:e0:e9:79:2b:77:
                    f0:7d:c2:00:77:9f:6d:4f:26:c3:2b:69:91:cd:fd:
                    2d:6b:48:e8:31:a2:9d:af:58:94:b7:53:ec:37:38:
                    f5:93:b3:0e:ff:3a:5c:1d:de:c4:12:aa:ae:1e:af:
                    69:c1:d0:2a:b0:6d:c2:61:b4:3a:6b:c7:c7:35:b7:
                    35:b6:d5:8f:93:de:2a:3a:82:d6:49:8f:08:ec:85:
                    6c:7f:36:ba:84:d4:a0:68:be:6d:bd:ea:b3:02:77:
                    af:59:8b:d8:1f:6c:b9:d0:1d:a7:20:63:9c:73:62:
                    91:a4:10:29:a7:43:e8:fe:9e:76:a0:67:66:24:22:
                    29:42:e7:3b:ca:d1:16:29:c8:f1:09:58:60:b0:19:
                    9a:26:07:e8:7d:54:36:0a:8f:0f:e5:4c:a1:a8:c9:
                    f1:f7:ce:23:ea:6c:06:3a:48:ba:dc:06:c7:8c:b3:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8B:FC:C7:BF:23:2A:25:7D:D8:45:72:B3:8B:03:0B:D4:C4:AB:E0
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:20:d3:6e:54:f2:b1:28:d7:c4:c4:f6:19:79:70:3c:0a:88:
         f0:e1:9b:d6:ab:f8:7f:0e:50:cd:46:dc:e3:d1:22:8c:e8:ee:
         24:7d:26:02:2e:6e:40:f9:4f:54:59:8e:cd:3b:85:9d:ff:75:
         25:1f:da:c2:ba:70:69:3a:1a:42:ef:f4:30:46:38:59:5c:c7:
         96:b9:4f:b8:ad:d4:ee:c8:fb:9a:aa:51:d8:51:68:76:8d:c2:
         c9:5c:7f:85:3b:d8:e5:5c:4d:94:ba:4d:4e:f9:15:e5:f0:40:
         a3:da:80:5e:22:05:35:43:6f:7d:f9:2f:0a:61:68:ad:40:a4:
         d1:34:f6:0c:3f:74:98:1a:18:1f:c2:9b:51:ed:5c:3e:cb:22:
         68:17:86:bb:d9:4b:ff:2d:a1:80:8c:c7:b0:8f:05:4d:a9:01:
         aa:b8:d4:96:c1:76:f5:74:e9:9a:f5:93:4a:d7:26:0f:4f:c9:
         54:14:7a:48:7b:7a:3a:52:d8:c5:25:12:52:7a:79:cc:3b:f9:
         00:25:74:07:bd:ab:d9:c9:84:9e:08:1b:d0:cc:2c:c8:cf:d7:
         4c:0f:04:d4:e0:57:bb:dc:1f:7e:29:5b:c4:c3:09:cf:d5:ef:
         26:68:eb:f1:84:fe:79:47:77:1f:82:0a:df:af:77:b5:dc:f5:
         f0:96:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:19 2025 by rpki-client