Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130343a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130343a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          aj/ENLaJyGQvCCEygLDhKo1TLZ7bJY2DU2nXcPH+Qgc=
Subject key identifier:   E7:66:09:7C:7C:2C:55:9E:7D:44:83:97:A1:76:04:7B:B9:7A:EF:8A
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7B85874207BE83BB05D173647EAA85E0AD9DDCFF
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130343a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:16 +0000
ROA not before:           Tue 04 Feb 2025 18:40:16 +0000
ROA not after:            Tue 03 Feb 2026 18:45:16 +0000
asID:                     271891
IP address blocks:        2801:151:104::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:87:42:07:be:83:bb:05:d1:73:64:7e:aa:85:e0:ad:9d:dc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:16 2025 GMT
            Not After : Feb  3 18:45:16 2026 GMT
        Subject: CN=E766097C7C2C559E7D448397A176047BB97AEF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:3f:ce:7e:2f:17:2c:b1:54:f7:61:93:e4:
                    f4:2f:dd:59:81:8a:aa:73:1a:89:3d:76:d7:99:97:
                    62:13:b7:eb:58:96:42:e6:61:de:1b:2f:38:f3:cd:
                    76:20:8e:49:83:e5:71:52:a2:fa:f3:a5:35:3f:b4:
                    c6:ab:e9:e8:98:29:a9:6d:d1:f0:2d:b0:73:0f:e2:
                    24:11:a8:65:56:00:51:f2:05:a7:33:36:c1:10:08:
                    99:f9:ca:d4:75:39:1e:95:a1:b5:a1:48:60:f2:0a:
                    c0:7e:c3:33:91:f8:b0:08:1c:a6:ab:c4:52:99:96:
                    f4:38:b6:07:91:2c:2a:75:64:54:2a:f5:a2:46:1f:
                    6f:b2:6e:e7:06:d3:6f:a7:b1:39:b1:ba:a4:b9:7b:
                    4b:5f:5a:22:4c:22:27:b9:d4:11:80:41:e9:82:a2:
                    c6:eb:28:6c:fa:fe:98:b7:3d:41:9b:be:73:78:f7:
                    56:be:bc:25:ce:21:6f:6b:1e:a1:d6:16:d7:a4:bf:
                    3d:41:2d:15:b9:43:1f:7f:00:a4:3d:25:c4:41:ef:
                    a3:e3:14:18:72:04:49:e7:69:46:99:d2:a8:b7:7b:
                    f2:fd:bd:a9:5b:66:86:47:ac:31:4d:b5:72:89:4b:
                    2c:78:79:7b:95:80:14:a8:c9:a3:22:c4:15:6b:1a:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:09:7C:7C:2C:55:9E:7D:44:83:97:A1:76:04:7B:B9:7A:EF:8A
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130343a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:dd:67:ab:69:b8:3d:61:b9:04:cf:57:0c:9e:2a:de:65:
         d9:d0:7d:94:3c:f3:3b:95:33:13:3b:a5:4b:ca:13:62:f0:da:
         b2:65:e9:ab:73:53:68:08:e4:5e:6d:04:7b:b4:c6:e6:bd:51:
         14:02:88:f3:6e:58:1f:02:ac:92:ff:6f:28:40:d8:26:ea:33:
         2c:b0:c5:97:c6:c6:1b:d8:14:fb:12:54:ba:9f:51:1c:3d:68:
         c3:74:fe:fc:20:95:c5:e9:54:e7:94:8d:4c:78:68:83:c6:b8:
         c2:09:29:2a:8f:45:e2:f2:05:85:62:57:1f:64:e5:7a:57:d9:
         41:9c:96:a8:1f:6d:d5:f6:2b:4e:97:6b:54:ad:75:ae:ab:b3:
         b7:c0:12:1f:1c:62:12:86:9d:69:bb:73:68:5c:f9:57:f0:96:
         b7:d3:d2:60:0d:a8:f9:03:25:27:df:cd:b8:7d:f2:3c:9e:13:
         69:6a:e0:16:51:1d:dc:5f:18:77:9f:ed:36:bf:0f:74:0b:71:
         0a:0d:fd:c8:21:72:bf:f3:ac:e8:b4:25:c8:70:a5:d9:29:33:
         15:10:d0:18:e3:34:6d:cb:62:c3:b6:fa:d3:bb:52:13:85:f3:
         88:4a:6e:7a:80:3b:e9:e9:ea:9e:33:b2:18:bf:f6:64:e8:40:
         85:3b:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:10 2025 by rpki-client