Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa
File:                     323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa (raw, json)
Hash identifier:          AM21mrQE3ajKTLPkmWB4hFfmckVXiAWEwPMSRS2gYeM=
Subject key identifier:   B3:2B:10:C3:90:16:35:E4:9B:DF:39:FE:B5:30:DC:C0:07:E2:68:3C
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       50045CD6CA7446916FDB82DE4967C9F0BF862C33
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:38:03 +0000
ROA not before:           Tue 04 Feb 2025 18:33:03 +0000
ROA not after:            Tue 03 Feb 2026 18:38:03 +0000
asID:                     3356
IP address blocks:        2801:1a:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:04:5c:d6:ca:74:46:91:6f:db:82:de:49:67:c9:f0:bf:86:2c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:03 2025 GMT
            Not After : Feb  3 18:38:03 2026 GMT
        Subject: CN=B32B10C3901635E49BDF39FEB530DCC007E2683C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:13:0d:52:9f:94:d0:32:ed:15:d6:67:98:
                    72:10:33:71:fa:39:8f:84:86:5b:e6:0d:48:3a:74:
                    b1:90:61:49:3c:7e:c1:54:a1:c4:49:0b:c1:88:11:
                    14:86:17:32:1b:87:d6:08:e1:59:87:19:27:62:a0:
                    ea:9f:31:b4:46:71:b8:ec:5d:c5:27:a9:a1:22:6b:
                    8e:fb:86:5a:2d:1f:69:07:c6:7f:86:00:51:d6:55:
                    fe:83:88:c3:3a:11:91:45:ed:49:60:93:fc:3e:a7:
                    51:fe:95:1f:51:71:25:0c:61:41:d2:9a:49:67:b0:
                    71:8f:a7:6f:53:3c:aa:27:57:a3:23:d0:5a:39:4e:
                    ac:df:f9:7b:e3:ef:0a:62:9f:7e:cc:30:43:f0:c7:
                    7c:b0:a2:1d:d6:d9:59:66:0a:bd:fc:67:a4:d0:17:
                    40:3f:3b:59:83:df:20:c0:6a:8c:03:b7:b8:79:5e:
                    ab:8b:29:93:e6:ba:7a:f0:49:0c:69:ea:4d:0f:9d:
                    c1:b1:65:37:77:d0:9a:ab:e5:1a:fb:2d:f6:c6:32:
                    ac:f4:53:f7:b8:f8:c1:f4:1e:e3:b3:39:4c:92:77:
                    58:53:6a:04:0f:60:74:12:e5:69:2f:6d:8c:c7:f7:
                    ce:de:ba:ea:5b:76:75:4b:56:73:b2:dc:d4:a3:fe:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:10:C3:90:16:35:E4:9B:DF:39:FE:B5:30:DC:C0:07:E2:68:3C
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:cc:55:0c:d0:0e:81:79:ed:88:a3:a5:ab:44:d8:a9:60:
         50:24:ca:7a:99:01:6f:58:6c:68:89:9b:63:82:ea:a1:14:69:
         f4:98:34:2d:b4:91:d9:f7:5c:7e:e4:b3:26:a8:1e:a7:ab:e0:
         a9:4d:75:af:b1:11:f6:57:ec:da:06:0a:91:09:b3:75:27:85:
         d9:e6:bc:6c:48:41:8e:38:72:ac:40:1a:e0:d8:42:4d:35:8b:
         d6:06:23:32:30:bf:7a:5c:95:95:74:bf:42:66:95:3c:c7:ca:
         77:ca:43:77:dd:b2:60:b3:81:f9:c0:60:5b:4a:89:95:5d:53:
         1b:dd:27:20:29:91:12:03:59:e9:69:d6:ab:57:c2:b5:45:d0:
         ed:5a:76:a6:e5:35:72:6d:4a:fd:51:f2:c0:c2:7a:05:09:b4:
         b0:f4:06:4e:18:71:15:49:97:aa:d9:74:15:d8:67:7b:94:43:
         4f:25:5c:aa:b3:6d:6c:24:36:e6:ec:6a:5c:08:6a:c8:2d:dc:
         8f:c3:00:c8:5d:36:de:82:d6:e8:09:8e:c1:cb:cb:e7:c2:c3:
         42:d3:b4:3c:a3:9d:70:02:68:1d:d6:9c:e4:d3:fe:a8:3f:52:
         e1:3c:a4:f4:73:e9:2b:2c:1e:86:f6:f2:f4:7a:3c:87:59:0a:
         dc:c2:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:33 2025 by rpki-client