Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a31313a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a31313a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          ZzN4+OteELvUmygW8/Kenb6KsHl05OR+ymHC1uyV11Q=
Subject key identifier:   D2:B2:4B:1E:48:5B:45:3D:F5:03:78:D3:04:E7:62:23:95:54:4A:BA
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       A6175E7AA2B03229B8AE9DAFD729585E4D9370
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a31313a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 04 Feb 2025 18:45:18 +0000
ROA not before:           Tue 04 Feb 2025 18:40:18 +0000
ROA not after:            Tue 03 Feb 2026 18:45:18 +0000
asID:                     3790
IP address blocks:        2801:151:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a6:17:5e:7a:a2:b0:32:29:b8:ae:9d:af:d7:29:58:5e:4d:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:18 2025 GMT
            Not After : Feb  3 18:45:18 2026 GMT
        Subject: CN=D2B24B1E485B453DF50378D304E7622395544ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:ef:07:3e:16:0a:32:9f:d8:1b:28:4e:91:
                    2a:ba:d1:77:44:de:de:59:ee:54:c8:6f:f0:f9:b3:
                    84:5d:6b:80:19:00:8b:16:87:92:10:bd:c9:f1:e6:
                    7f:be:11:00:b0:dd:53:d6:00:3c:18:ad:4f:c9:38:
                    b5:f1:8e:54:42:f9:49:f5:a1:69:2e:ed:39:17:fe:
                    5c:cc:5f:7e:a5:46:50:74:72:84:05:11:6b:d7:3a:
                    cf:54:10:42:85:0e:1a:cf:75:e5:b8:dc:9a:48:81:
                    52:12:ef:49:e2:8c:9b:93:7c:cb:59:89:b3:cc:ec:
                    14:3f:76:a1:62:25:50:c8:34:fb:bb:57:2f:f0:d8:
                    f8:bd:e2:d9:f2:44:df:d3:f7:cf:ef:5e:5a:fe:f3:
                    43:a5:37:7a:15:51:d5:4b:6a:01:f5:45:3b:12:00:
                    ac:b7:14:5c:28:6c:55:24:be:04:e5:bf:b6:d4:9d:
                    c0:87:bf:f9:81:10:f1:29:2f:12:43:fa:a6:59:d7:
                    02:ae:14:4e:7e:05:05:f2:fd:38:4f:67:b2:66:d6:
                    14:e8:0c:44:c1:6f:e9:2c:5d:d5:34:b0:de:ff:fb:
                    92:ae:50:ef:b0:83:c5:7c:74:97:a2:95:7f:01:59:
                    27:d8:39:a1:88:44:85:3d:27:d5:ef:a6:1b:ad:44:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B2:4B:1E:48:5B:45:3D:F5:03:78:D3:04:E7:62:23:95:54:4A:BA
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a31313a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:64:92:9a:64:c0:62:44:cf:8f:e4:30:36:92:99:5d:ff:73:
         b2:4b:3b:4a:b9:64:dc:38:99:52:15:89:c1:9a:77:ce:54:cd:
         32:aa:18:67:64:70:7e:8d:ce:d5:cb:9e:3d:61:40:28:f1:a5:
         78:22:82:f8:e4:0c:b5:fb:1c:f3:1b:40:44:c8:69:1d:96:ac:
         39:10:cf:8c:24:2f:c9:58:12:f7:bc:e5:d2:e4:ee:4c:e6:ca:
         d0:f0:44:2e:7c:6f:9f:0b:32:5a:b1:d1:5c:46:ed:bb:d6:31:
         f0:04:0c:43:50:39:07:98:c5:b1:75:12:26:96:be:6e:d9:f9:
         11:63:e4:87:9d:1b:9d:3a:a4:02:98:f6:96:44:05:f1:e8:57:
         c8:30:75:07:be:dc:9b:05:b0:c7:e4:08:0b:2e:6d:56:fe:5a:
         07:c5:75:70:9c:88:6b:60:87:a7:b7:ec:51:e3:48:2b:c4:6b:
         65:77:17:a4:7b:46:c1:22:4d:ee:12:8b:35:37:5a:50:85:25:
         fe:ad:cc:40:38:21:1d:19:88:10:c9:dc:37:89:4f:59:00:5a:
         ce:76:6e:c5:5f:3a:9f:59:54:07:2e:dd:ab:1f:96:5f:ef:6f:
         8c:82:5b:b4:a7:e3:28:6f:98:da:67:9d:61:5f:ad:ee:e7:28:
         4b:41:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:40 2025 by rpki-client