Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa
File:                     323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa (raw, json)
Hash identifier:          HFyz37ssHCrAO0EdYY0J7rMs77vi8eWquMzYgPblzGw=
Subject key identifier:   32:40:16:D4:3F:9A:FB:9B:D6:E1:37:F3:CB:E6:54:67:11:6F:41:50
Certificate issuer:       /CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
Certificate serial:       3E83E121988601B535276A9A9B2F14E68195DF39
Authority key identifier: 34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa
Signing time:             Tue 04 Feb 2025 18:37:29 +0000
ROA not before:           Tue 04 Feb 2025 18:32:29 +0000
ROA not after:            Tue 03 Feb 2026 18:37:29 +0000
asID:                     28477
IP address blocks:        2801:c4:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:83:e1:21:98:86:01:b5:35:27:6a:9a:9b:2f:14:e6:81:95:df:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
        Validity
            Not Before: Feb  4 18:32:29 2025 GMT
            Not After : Feb  3 18:37:29 2026 GMT
        Subject: CN=324016D43F9AFB9BD6E137F3CBE65467116F4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:55:b0:fd:e1:a2:cd:2f:3f:2a:05:0b:5b:
                    b8:d0:31:36:18:ca:66:d5:5c:d8:3b:26:1c:e8:39:
                    b4:c5:a5:43:c2:df:4c:81:03:f1:5a:9c:8c:49:30:
                    b4:01:ea:eb:71:97:c3:ae:14:59:37:f6:d6:a5:0b:
                    53:d7:6b:35:77:b8:2c:d2:27:2b:f1:2f:52:24:5d:
                    83:9d:01:8a:d7:68:8d:dd:25:65:29:3c:c5:d6:f8:
                    3b:fa:18:b4:7d:1e:22:dc:21:5d:ff:81:3e:14:9f:
                    ec:91:ce:09:eb:db:b5:88:7e:eb:16:91:24:66:5e:
                    39:59:39:82:79:8b:b7:f4:ab:e5:b6:bc:cc:de:4f:
                    fe:70:8c:4c:09:33:bb:97:1e:82:f4:35:08:34:f4:
                    cb:fe:e6:a4:61:de:85:ca:92:71:b9:01:85:2f:95:
                    b0:d2:9a:a2:c3:8c:2c:fe:ba:c9:d7:5e:35:28:8c:
                    a3:11:03:e6:a6:ce:3d:56:44:43:2a:e5:c0:83:3d:
                    e4:a7:0a:5b:db:f6:37:2f:bd:5e:81:d0:97:eb:ad:
                    16:35:a6:09:6e:22:59:80:04:6e:b2:1a:08:a3:53:
                    85:07:68:44:38:2a:de:68:80:38:c7:e4:37:44:fe:
                    fc:5f:83:7a:60:88:90:4d:d2:db:df:7e:5f:6a:0c:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:16:D4:3F:9A:FB:9B:D6:E1:37:F3:CB:E6:54:67:11:6F:41:50
            X509v3 Authority Key Identifier:
                keyid:34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:be:44:98:d1:33:ac:37:93:d2:31:d4:34:ec:25:00:86:f1:
         6e:de:68:ab:ef:9f:1e:13:d4:78:85:8f:c3:58:a5:d1:60:02:
         c3:53:0b:5a:d1:08:58:cc:cc:ca:63:9b:e8:31:42:39:f2:21:
         b2:1e:1d:d1:18:3b:52:59:14:6a:23:fa:5b:35:5d:4c:02:84:
         ff:a5:cb:02:56:4e:78:69:b4:b7:0e:dd:b2:42:b5:7a:b6:76:
         62:22:30:73:31:a1:b5:05:92:00:50:be:17:b0:23:79:af:89:
         d8:45:67:ef:8a:5d:00:ff:9b:ee:3c:29:8f:0a:07:41:c0:a1:
         4d:3a:67:63:81:b8:c3:42:da:a7:6a:76:8e:46:bc:8f:dc:18:
         e6:23:24:e4:c6:77:09:e5:c0:0f:90:30:2c:d4:ad:77:0b:8d:
         69:b1:bc:1d:97:9a:9c:1d:d3:a9:de:ce:13:8d:1c:58:3d:13:
         15:bb:a3:dc:57:d3:3a:70:2e:63:dc:de:03:b9:52:64:00:ee:
         e7:e0:48:db:85:93:d5:d2:82:34:37:e8:5e:07:14:0f:2b:bb:
         fb:10:ec:24:6e:0c:5c:f6:9a:40:5f:0a:56:c8:42:6c:72:22:
         f6:b2:41:e3:9b:02:c1:02:47:de:3c:be:3b:5e:1f:36:ad:62:
         81:8c:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:11 2025 by rpki-client