Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          bM4Cm/FNMCtJAiM2tp3lVlfAjyaKyDFidNzkj6V+iug=
Subject key identifier:   18:97:DA:CE:F1:47:8E:3F:C6:93:0F:4D:32:7F:41:8E:A4:3B:5E:59
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       23C428C03A02D5DE71CAF09F3985A65BA929D9BE
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 04 Feb 2025 18:45:19 +0000
ROA not before:           Tue 04 Feb 2025 18:40:19 +0000
ROA not after:            Tue 03 Feb 2026 18:45:19 +0000
asID:                     3790
IP address blocks:        2801:151:2a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c4:28:c0:3a:02:d5:de:71:ca:f0:9f:39:85:a6:5b:a9:29:d9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:19 2025 GMT
            Not After : Feb  3 18:45:19 2026 GMT
        Subject: CN=1897DACEF1478E3FC6930F4D327F418EA43B5E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:63:b6:9e:d6:8b:36:c1:f6:df:e2:ef:8f:
                    e4:dc:a6:c6:a6:65:3c:60:c9:3c:c6:c9:1d:3c:9e:
                    3a:57:95:b2:c8:2b:c2:cd:a6:c5:db:d4:5b:c9:a7:
                    d5:df:fe:63:eb:e7:e9:48:38:88:ae:52:eb:7b:95:
                    d2:5a:46:1c:cc:ce:34:c3:d0:a0:63:fa:ef:2a:84:
                    79:26:37:a3:1b:ec:58:1c:5c:61:f2:34:82:a3:0e:
                    f2:6d:70:7b:d5:85:61:75:15:71:44:34:33:1e:31:
                    41:64:2e:0e:39:f0:a6:a0:23:83:86:d7:c4:9a:36:
                    fb:ce:5d:7a:8c:d2:02:9a:88:d1:42:78:9e:f7:bd:
                    e3:52:78:33:48:03:a1:df:b5:76:f8:ef:8b:b1:ba:
                    be:2d:6c:9e:3f:30:fc:68:88:8f:9c:12:55:0a:9f:
                    1d:3e:34:83:c3:0e:3f:de:d1:b3:fd:df:8f:22:00:
                    18:cd:f1:0d:8e:4b:40:cc:e6:a9:ac:1d:cd:1b:94:
                    69:22:c7:57:f4:8e:4f:8a:8b:88:35:0d:4c:d6:b9:
                    8e:ab:be:8c:11:28:7f:34:e0:51:4d:9f:1b:9c:a3:
                    fc:2a:93:d3:5a:f5:93:eb:e8:9b:eb:3b:fa:ca:56:
                    2a:12:59:1f:b2:09:93:6a:53:91:70:d2:96:37:98:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:DA:CE:F1:47:8E:3F:C6:93:0F:4D:32:7F:41:8E:A4:3B:5E:59
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:a7:04:cf:ae:de:9b:63:a6:6b:f0:5f:05:bf:69:41:b6:8a:
         c7:df:65:7a:c7:8d:33:49:09:bc:19:a3:50:00:6a:32:a8:ec:
         b0:90:47:a7:8c:3f:ae:26:70:07:f0:3b:41:ba:0e:5a:dd:b3:
         5c:ed:50:e0:12:54:04:6f:73:5b:63:a7:7c:48:87:2c:4f:ae:
         50:5f:b9:58:4a:28:2a:f9:db:eb:24:24:00:37:42:2c:df:10:
         c8:16:10:05:52:1c:43:3b:d1:b0:56:67:c8:ae:7d:e5:26:1a:
         bb:45:ea:6b:24:ab:08:74:3a:b5:95:21:74:37:dd:1c:c1:12:
         9b:0a:81:b6:0a:18:97:9a:00:57:38:7c:31:91:e7:c8:88:59:
         30:eb:cf:19:85:87:12:ca:ac:ea:95:c1:22:bf:c4:40:21:6b:
         96:19:b1:5b:a3:c9:f3:89:2a:37:af:69:e4:8f:6d:7c:8b:30:
         6d:95:1f:23:36:8e:72:37:14:97:ea:c5:ac:64:b3:2d:34:d6:
         cc:51:93:3e:fc:66:81:99:2b:f3:ed:e1:38:70:96:08:b0:cb:
         36:2a:23:02:eb:13:be:d4:cd:8c:50:33:55:fb:97:2f:e3:08:
         e7:e5:83:da:17:bd:5f:d1:4a:66:33:cf:ed:77:04:43:9b:d2:
         26:bb:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:40 2025 by rpki-client