Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          2XONlmMB+mC8zPl6nH5PTO+tKlSJYffZgPc84fuF4I0=
Subject key identifier:   1E:9C:0F:E2:6E:16:65:2A:AB:C9:BD:4D:F3:A3:80:C5:E7:E2:71:AC
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7AC86CB14608C04A9AFE6109472ED33BA1FA3671
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:08 +0000
ROA not before:           Tue 04 Feb 2025 18:40:08 +0000
ROA not after:            Tue 03 Feb 2026 18:45:08 +0000
asID:                     271891
IP address blocks:        2801:151:10b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c8:6c:b1:46:08:c0:4a:9a:fe:61:09:47:2e:d3:3b:a1:fa:36:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:08 2025 GMT
            Not After : Feb  3 18:45:08 2026 GMT
        Subject: CN=1E9C0FE26E16652AABC9BD4DF3A380C5E7E271AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:3b:16:cc:bd:56:61:a0:0e:b5:f4:f7:b4:
                    6a:f1:75:92:74:a1:9b:c1:18:c5:88:07:e4:0b:a3:
                    3d:01:4b:2d:40:55:67:96:e7:3d:90:b8:95:1f:1c:
                    3a:44:c4:0e:4d:59:ae:10:45:fd:04:54:60:74:d0:
                    df:1b:c3:f1:72:bc:cb:31:2a:31:15:a3:bc:67:52:
                    cd:07:84:9f:25:45:29:6c:48:f7:77:cd:03:9f:96:
                    60:bd:d6:1e:91:62:6d:cc:1e:f8:22:6a:6b:8f:63:
                    a5:6b:cf:76:51:a7:dc:1c:a5:fa:86:cd:a9:18:33:
                    a5:a9:59:7a:71:07:52:ef:eb:18:e7:e4:8d:a3:83:
                    cb:ad:59:78:20:5d:96:66:7e:00:58:94:28:38:40:
                    b2:22:19:fb:2b:52:fe:06:f7:39:20:3d:0c:25:b6:
                    d6:7a:ef:d0:c5:e1:c6:96:47:8e:e2:4b:3f:67:ce:
                    67:98:b1:12:82:1d:93:c6:f9:47:2d:ec:9f:6a:87:
                    db:85:9f:35:21:3f:b0:52:38:5b:d4:87:7f:68:92:
                    08:c2:5d:ae:dc:be:91:ed:33:f3:02:f3:cb:b9:ef:
                    e6:42:d7:25:69:7a:e1:45:2c:c0:e7:00:24:42:c3:
                    4d:6e:da:a7:38:8e:67:3b:60:ba:5d:b8:b4:3b:11:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:0F:E2:6E:16:65:2A:AB:C9:BD:4D:F3:A3:80:C5:E7:E2:71:AC
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:b1:e4:67:ef:50:75:4e:67:ae:4d:1c:70:50:be:cf:56:
         3b:cd:66:f9:34:70:12:25:b3:45:29:70:52:a7:c9:4c:66:97:
         df:c4:c1:61:1a:50:e4:0e:5a:a7:6b:d2:81:26:d5:b4:69:b3:
         a9:19:7c:09:cf:9d:40:c9:51:bf:28:50:a2:5a:f8:40:9f:c7:
         60:e8:48:78:00:57:76:f4:47:e3:4c:7f:6f:fd:3f:c4:8a:58:
         9c:9a:8a:95:17:02:1d:1a:4a:c0:32:0c:7c:ea:07:9a:e9:5a:
         cb:f1:ac:30:b8:be:2d:3e:9f:03:d4:21:78:dd:33:28:21:85:
         ba:56:f0:42:75:1c:35:56:a3:53:79:61:5d:f0:9b:50:28:89:
         1d:e2:36:28:d9:ec:11:3a:5d:22:cc:81:15:36:0c:6a:3b:9c:
         42:22:c4:83:8e:47:c1:15:d3:fd:1d:df:dc:fd:f0:29:58:6e:
         08:ac:29:64:e0:73:99:3f:ee:fa:2b:78:37:67:3a:04:07:7e:
         8f:9c:3c:b6:f2:9c:e8:44:e2:ee:eb:76:01:73:3b:75:c2:a7:
         dd:4d:3c:f2:53:2e:a2:8c:8b:e1:c2:37:4f:2d:44:e5:8e:0f:
         12:66:f7:f3:51:f6:63:79:9c:ff:dd:f1:9d:a5:f4:c2:4d:0d:
         7f:04:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:40:17 2025 by rpki-client