Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130333a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130333a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          KmgWxKHpAQtnDqkK+PxL9iVqPNGFLl/XRiios2xK0PI=
Subject key identifier:   77:C2:F1:31:0A:3B:92:63:0A:7B:43:E7:27:74:C0:C7:D4:CB:9F:94
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4415CDAD4EC9634D233CEBD9EDDD7BA02E36AC56
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130333a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:13 +0000
ROA not before:           Tue 04 Feb 2025 18:40:13 +0000
ROA not after:            Tue 03 Feb 2026 18:45:13 +0000
asID:                     271891
IP address blocks:        2801:151:103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:cd:ad:4e:c9:63:4d:23:3c:eb:d9:ed:dd:7b:a0:2e:36:ac:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:13 2025 GMT
            Not After : Feb  3 18:45:13 2026 GMT
        Subject: CN=77C2F1310A3B92630A7B43E72774C0C7D4CB9F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:05:9c:b7:a6:c8:23:83:e2:44:59:d2:cc:
                    57:88:1d:71:db:ac:cc:76:8e:67:44:d1:bb:7b:ef:
                    bb:43:9b:e5:62:91:2d:56:ee:51:56:74:1e:cf:a8:
                    53:a1:42:b1:12:1d:db:e1:ee:f3:78:d0:89:76:b5:
                    51:3b:6d:6b:fe:65:4a:5c:e2:b2:ed:40:b2:7f:f2:
                    f0:da:c1:96:a9:6f:16:6d:f2:ad:20:e3:ae:d6:9f:
                    e9:66:66:84:40:63:30:08:98:e1:bc:09:99:a2:4a:
                    fc:41:1a:97:00:d3:ba:2e:b6:47:c1:96:d7:b9:45:
                    4c:5c:12:9a:e1:05:13:ad:5c:3f:9b:97:aa:f4:3d:
                    b2:d7:20:8f:cf:f2:1c:aa:d8:d4:90:80:20:23:0b:
                    05:c0:bb:b8:e6:6a:a7:fe:8c:eb:7f:c1:4e:47:11:
                    de:a1:7e:7e:1d:cb:37:6b:f0:0b:50:36:4e:ad:a7:
                    cd:da:01:d5:33:3f:c1:35:6f:c1:20:a3:40:e4:e6:
                    76:fd:a3:c8:09:e1:23:ca:a9:5c:68:d4:cc:a7:0b:
                    41:c7:6c:f9:2d:6a:45:bf:a5:b8:2b:5a:b5:fa:41:
                    0f:a8:d6:d1:05:b9:e3:a3:bf:05:82:dc:f9:b6:db:
                    f6:e2:ee:ac:71:56:41:76:a2:39:30:54:98:be:85:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:F1:31:0A:3B:92:63:0A:7B:43:E7:27:74:C0:C7:D4:CB:9F:94
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130333a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:29:d1:4f:2e:f2:4b:29:73:53:7b:57:51:cb:50:ed:b8:fa:
         8a:13:96:25:41:c9:b9:cb:14:8d:81:aa:ef:42:6d:ca:20:cd:
         92:8c:df:dc:b7:34:aa:62:4d:d0:d0:c9:4d:80:e7:dc:1c:5b:
         86:19:16:b4:70:12:ff:4b:7b:d5:3c:37:28:dd:d7:b0:30:85:
         6d:23:58:f4:48:24:6b:cc:a9:ec:cc:f2:38:cb:9b:91:8c:91:
         c3:1c:7a:73:44:77:eb:be:78:7b:89:a8:4f:c3:58:1d:dc:e9:
         ed:bc:45:c7:18:3a:a7:45:e5:28:8d:64:78:51:e6:c3:14:c6:
         7d:75:06:de:d6:c1:3b:71:f0:78:5a:8d:ab:b2:c7:d8:1f:8e:
         80:aa:19:1d:4b:6c:c2:8d:e4:37:64:54:1e:2b:2a:34:d8:3b:
         04:98:81:a6:1a:a1:19:52:bc:a5:77:3a:a0:b2:6c:4c:d3:5b:
         03:21:60:6a:10:84:b5:39:f2:d3:9b:98:57:10:b0:21:72:b7:
         a2:f9:5c:25:56:7f:41:6c:9d:02:b2:3b:9d:be:3c:24:0b:75:
         cc:7c:27:8c:44:02:66:9b:3f:e7:3e:8f:7f:be:e2:6b:75:59:
         bd:77:20:31:77:1f:0e:46:49:1e:f9:3f:78:1c:0d:3b:b9:b8:
         56:bf:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:31 2025 by rpki-client