Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Ye9SwpvT+9JzBCy0t7N31r/ppp2Kp2lNJAAGdPm/4qI=
Subject key identifier:   C3:05:77:EB:B7:4A:03:CA:F1:1F:6A:F7:D2:9F:6B:77:53:A7:5F:04
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       286BD15A6326DB9BDD4E7C7A7932DE266A678249
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:16 +0000
ROA not before:           Tue 04 Feb 2025 18:40:16 +0000
ROA not after:            Tue 03 Feb 2026 18:45:16 +0000
asID:                     271891
IP address blocks:        2801:151:109::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6b:d1:5a:63:26:db:9b:dd:4e:7c:7a:79:32:de:26:6a:67:82:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:16 2025 GMT
            Not After : Feb  3 18:45:16 2026 GMT
        Subject: CN=C30577EBB74A03CAF11F6AF7D29F6B7753A75F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:09:9e:be:58:ad:ea:3d:4c:f2:0d:fd:a3:
                    ec:28:ab:2f:49:f5:99:71:c9:3f:58:cd:29:df:28:
                    47:93:38:f7:09:6b:54:bd:17:e0:82:43:98:09:2b:
                    d1:46:2e:2c:c7:65:e2:f5:a6:f8:43:ee:b9:65:3a:
                    92:de:d7:2e:7a:ee:b4:ce:1c:e0:c8:05:85:27:4c:
                    3e:eb:8f:4a:f0:9b:9c:5e:ae:4d:0f:28:97:d1:a2:
                    88:45:ca:52:1c:2c:d1:17:d9:36:06:26:a8:f4:da:
                    ba:fb:61:89:e0:0f:5b:80:fd:3c:d5:03:ff:a8:a2:
                    d6:ad:a7:53:17:be:3a:67:74:55:89:11:62:38:01:
                    f4:ed:05:78:92:8b:a3:d6:22:ef:61:b4:87:ac:34:
                    6c:17:7a:84:23:3e:d4:f4:2e:84:cd:33:eb:e4:c7:
                    96:2a:32:25:e4:de:72:8b:27:a6:2c:ba:34:20:8f:
                    94:36:56:a5:a4:e9:81:a4:f6:36:b9:bf:a6:36:00:
                    8a:30:47:ec:7f:5b:25:23:fa:83:05:50:56:eb:3f:
                    4f:45:cb:51:b7:ed:b8:06:b8:55:fc:fc:5b:b1:7a:
                    02:c7:ec:cf:af:68:c4:ec:3c:10:95:83:2b:1a:b2:
                    5b:ce:6b:89:df:72:db:6f:25:b1:b7:75:a5:72:d7:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:77:EB:B7:4A:03:CA:F1:1F:6A:F7:D2:9F:6B:77:53:A7:5F:04
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:109::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:83:81:56:ea:a5:30:72:07:e5:59:67:ca:87:c3:ea:fe:
         df:d4:1a:2b:d1:18:66:94:00:df:8e:ff:55:fe:0e:40:b8:c8:
         a0:c6:c4:75:1a:90:e8:c0:03:e6:d1:e7:b4:aa:06:3a:cc:31:
         0e:a6:8f:2c:91:55:46:a0:10:77:4c:4e:6d:80:56:7b:48:89:
         42:ef:41:aa:ff:6e:14:f8:b1:f2:1a:3e:ad:b4:11:30:97:6b:
         c1:be:68:41:b8:91:4e:c3:a0:97:f1:4e:66:81:4f:9b:27:19:
         46:70:63:21:f7:7d:24:3e:86:e9:50:8b:e3:16:8c:ef:30:8d:
         e4:54:0b:6f:d8:69:42:2a:fa:0c:b2:4a:8f:8d:b0:0b:30:68:
         4f:9f:f8:e4:5f:b0:42:7b:e0:f8:a1:41:d7:1c:74:2b:96:8a:
         0e:09:41:dc:da:b3:40:be:06:e5:11:d1:b6:c8:c4:5f:65:7e:
         45:23:8b:83:9e:96:c9:c2:29:80:c1:47:d1:e3:02:d0:cc:25:
         70:c4:7d:56:e1:67:68:a0:68:3b:52:c0:84:55:67:37:e9:42:
         19:af:88:7c:75:d8:d8:5e:95:c8:58:b9:15:d0:17:09:65:84:
         31:91:4a:1c:31:18:d3:a9:ee:86:9d:1f:80:ee:d1:1c:76:e4:
         8f:b6:cf:09
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUKGvRWmMm25vdTnx6eTLeJmpngkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNTAyMDQxODQwMTZaFw0yNjAyMDMxODQ1MTZaMDMxMTAvBgNV
BAMTKEMzMDU3N0VCQjc0QTAzQ0FGMTFGNkFGN0QyOUY2Qjc3NTNBNzVGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecwmevlit6j1M8g39o+woqy9J
9ZlxyT9YzSnfKEeTOPcJa1S9F+CCQ5gJK9FGLizHZeL1pvhD7rllOpLe1y567rTO
HODIBYUnTD7rj0rwm5xerk0PKJfRoohFylIcLNEX2TYGJqj02rr7YYngD1uA/TzV
A/+ootatp1MXvjpndFWJEWI4AfTtBXiSi6PWIu9htIesNGwXeoQjPtT0LoTNM+vk
x5YqMiXk3nKLJ6YsujQgj5Q2VqWk6YGk9ja5v6Y2AIowR+x/WyUj+oMFUFbrP09F
y1G37bgGuFX8/FuxegLH7M+vaMTsPBCVgysaslvOa4nfcttvJbG3daVy13FTAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUwwV367dKA8rxH2r30p9rd1OnXwQwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTMxMzAz
OTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzkzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAVEBCTANBgkqhkiG9w0BAQsFAAOCAQEASbiDgVbqpTByB+VZZ8qHw+r+39Qa
K9EYZpQA347/Vf4OQLjIoMbEdRqQ6MAD5tHntKoGOswxDqaPLJFVRqAQd0xObYBW
e0iJQu9Bqv9uFPix8ho+rbQRMJdrwb5oQbiRTsOgl/FOZoFPmycZRnBjIfd9JD6G
6VCL4xaM7zCN5FQLb9hpQir6DLJKj42wCzBoT5/45F+wQnvg+KFB1xx0K5aKDglB
3NqzQL4G5RHRtsjEX2V+RSOLg56WycIpgMFH0eMC0MwlcMR9VuFnaKBoO1LAhFVn
N+lCGa+IfHXY2F6VyFi5FdAXCWWEMZFKHDEY06nuhp0fgO7RHHbkj7bPCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:28 2025 by rpki-client