Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130303a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130303a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          L7loyRKuFTigOT5iYMakidLOPqkL1PMJT52lpY/0rXw=
Subject key identifier:   61:DA:D0:8C:49:A0:00:3E:9B:F1:BB:EF:DE:FD:36:2F:FC:E9:22:31
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       3732CE168F7624A87F58F36517E99FDD674DAE92
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130303a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:12 +0000
ROA not before:           Tue 04 Feb 2025 18:40:12 +0000
ROA not after:            Tue 03 Feb 2026 18:45:12 +0000
asID:                     271891
IP address blocks:        2801:151:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:32:ce:16:8f:76:24:a8:7f:58:f3:65:17:e9:9f:dd:67:4d:ae:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:12 2025 GMT
            Not After : Feb  3 18:45:12 2026 GMT
        Subject: CN=61DAD08C49A0003E9BF1BBEFDEFD362FFCE92231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:f1:47:dc:eb:ac:65:9c:b0:15:37:6e:cd:
                    4c:a8:54:6a:aa:b5:33:a1:8d:21:4c:f7:be:81:1d:
                    10:10:cc:3d:04:bd:a4:61:84:b3:71:70:81:57:7d:
                    6f:7d:14:aa:8d:3d:d6:8f:98:25:d3:3e:0b:d8:a5:
                    95:84:c6:52:cc:a7:82:ca:4a:44:cd:31:2c:22:8d:
                    ae:8f:3f:28:38:49:7f:a9:52:a2:ba:e0:a9:07:f1:
                    da:99:1b:a7:f5:3c:65:77:16:86:3e:11:b4:0d:f7:
                    54:78:6a:10:b9:61:02:ca:3f:f1:59:36:6b:b4:b6:
                    21:f9:7b:58:df:01:04:e6:6b:cc:84:b1:fc:5a:07:
                    5a:88:e5:25:c4:a1:b2:15:41:8a:e5:58:6b:0e:0f:
                    df:01:75:33:eb:c8:1e:bc:0c:fa:98:58:6f:e0:4d:
                    f9:75:be:f4:32:c0:62:df:ba:2c:f7:8d:f1:8a:29:
                    1b:6e:f9:e2:7f:88:e2:df:09:a6:6b:5b:7e:bd:9e:
                    43:e6:5c:bf:c5:9a:f4:2b:58:11:6d:9c:16:62:04:
                    57:a5:0b:83:c7:85:31:60:83:9f:fd:b6:3e:92:4f:
                    e9:32:88:57:16:fc:c9:74:36:63:87:3e:56:87:73:
                    bb:c3:bc:33:1c:52:ff:37:51:87:e7:53:31:75:02:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DA:D0:8C:49:A0:00:3E:9B:F1:BB:EF:DE:FD:36:2F:FC:E9:22:31
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130303a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:34:73:21:3f:7f:80:04:11:ab:11:a2:c0:77:d4:fd:0c:b7:
         ee:e0:12:e2:23:b5:4d:90:35:4b:69:be:0b:c4:0d:8f:ad:b2:
         3f:1b:cc:8e:ad:d4:55:4e:b9:a9:b4:7b:65:c4:b8:94:a7:3d:
         9b:cd:d9:21:3c:b2:70:bb:96:98:6c:72:1b:90:37:c4:b8:eb:
         b3:28:cd:19:d2:6a:6c:38:b5:f9:ce:c2:02:75:bf:8f:38:66:
         23:41:e1:f3:2b:4e:08:ed:c0:f7:74:66:cf:5e:03:4c:69:8f:
         3a:d8:3d:df:44:08:35:00:7f:33:44:e2:d1:d1:a9:05:a1:92:
         f6:77:93:08:52:34:bc:e5:27:f4:1f:3d:3a:21:42:36:12:e4:
         76:74:87:b5:f6:8b:09:d3:86:57:10:bc:fa:16:34:44:82:36:
         fa:96:2a:b1:b3:18:b9:8a:d4:7c:4d:47:cc:e3:c6:64:9b:42:
         85:47:49:a4:ee:02:de:7d:cc:6d:c1:05:29:e0:39:ad:58:2d:
         0e:8d:55:41:0d:13:da:a8:09:be:65:fc:33:4f:9c:5f:af:19:
         3c:34:1a:05:43:52:3a:4e:2c:69:15:9f:87:b5:2f:c6:3a:f8:
         32:de:50:00:74:bf:74:9c:85:e3:01:c0:db:7f:23:09:a8:35:
         02:eb:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:18 2025 by rpki-client