Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130613a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130613a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          nRsU0AuwGQMfTycw04os/WUX+vQ7dn8kNexg/ic+YK0=
Subject key identifier:   7B:80:DE:5D:13:0C:58:61:D2:8F:41:54:46:39:D5:18:D9:CA:F3:66
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7B1CAD23077792AABEB79A7E77539DBE5E79BAE3
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130613a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:11 +0000
ROA not before:           Tue 04 Feb 2025 18:40:11 +0000
ROA not after:            Tue 03 Feb 2026 18:45:11 +0000
asID:                     271891
IP address blocks:        2801:151:10a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1c:ad:23:07:77:92:aa:be:b7:9a:7e:77:53:9d:be:5e:79:ba:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:11 2025 GMT
            Not After : Feb  3 18:45:11 2026 GMT
        Subject: CN=7B80DE5D130C5861D28F41544639D518D9CAF366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:5b:20:5d:eb:73:d2:c2:70:b0:5d:81:2a:
                    1c:1e:01:13:b5:da:cb:cd:a2:d8:10:bc:8f:0a:87:
                    10:cc:67:de:fe:f3:6f:be:3b:6f:21:e6:55:1b:ed:
                    f7:11:d7:c2:0a:4d:31:a8:83:a5:03:47:f8:9c:e6:
                    8c:d7:87:f7:06:df:f5:b2:43:cb:25:26:1a:69:6a:
                    36:98:a2:3f:1d:8b:ba:c8:c2:d4:5f:b6:a5:07:38:
                    2b:a0:2d:a9:2e:bb:18:80:e5:6d:43:6d:c4:7e:d1:
                    26:fe:bc:dd:ac:89:c0:77:43:95:28:d8:eb:e0:16:
                    80:a8:93:f5:e8:44:61:b5:3a:91:9b:65:09:b3:36:
                    70:32:eb:53:24:a6:01:b8:54:f3:26:bf:c4:27:49:
                    0a:bf:5f:a5:0b:80:93:23:59:d2:dd:b0:72:8c:c7:
                    97:12:65:cf:36:db:f0:74:99:08:2f:60:59:77:f3:
                    34:a8:83:cb:4c:08:43:28:be:34:62:5e:a9:13:fc:
                    5a:36:11:8f:51:20:0d:a8:09:62:c5:3d:54:e6:f9:
                    0e:c9:07:60:72:0a:c6:7c:b5:a7:26:92:13:37:0d:
                    8e:8c:c0:39:91:9a:06:2a:f4:dc:0b:c7:1c:a8:e6:
                    4a:a0:2a:ff:97:59:54:c7:9f:fa:ba:0d:ee:11:a2:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:DE:5D:13:0C:58:61:D2:8F:41:54:46:39:D5:18:D9:CA:F3:66
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130613a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:fc:7e:d5:35:76:6e:d7:43:12:f9:4d:51:a7:bd:91:05:0e:
         fd:fa:b7:93:f6:53:86:f3:82:f9:7d:56:de:a0:3e:ff:9e:c4:
         cf:91:44:c0:c9:35:b5:57:f0:e6:ba:32:d8:b4:76:b9:fb:53:
         ab:06:4d:f8:c6:b7:75:06:c6:4e:f5:0c:7f:95:e0:20:98:85:
         d8:6b:ef:80:4e:e4:28:8e:b6:0e:e9:50:ff:55:44:d1:a4:cd:
         69:e0:01:b6:df:16:49:2d:c6:d0:5e:fc:c4:2e:8c:96:d0:4d:
         c9:52:fa:2e:57:bc:dd:98:06:33:c1:7e:49:15:d2:79:0c:de:
         21:a2:75:bf:b6:f5:23:9e:0c:6d:64:3b:b8:49:2b:3c:f6:95:
         2a:84:cb:1d:b6:88:f4:a3:f1:2b:a2:55:30:9d:f5:1d:79:41:
         5b:9a:aa:de:40:4f:90:82:e6:be:a6:c7:6c:64:56:f9:20:d1:
         e4:82:f1:ba:01:97:2a:4d:f6:28:d8:dc:6f:ff:8b:91:d7:51:
         1f:a8:97:89:2d:dc:66:70:99:24:23:d7:ac:56:3e:c3:76:2a:
         0d:5e:e2:32:4f:73:8c:25:06:d3:b0:48:41:52:8a:3a:50:94:
         28:26:8c:01:ad:44:6b:08:de:fa:66:93:83:4b:54:35:b0:75:
         ca:34:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:07:38 2025 by rpki-client