Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a333a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a333a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          UPM8wgolHHssffx9D99DEYkh4pHiJb2yIe8cv3GGYbY=
Subject key identifier:   BC:35:0A:5E:49:AE:02:A7:D5:87:00:8C:44:D6:B0:FA:68:92:FB:83
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       528DC3BF02D45A001D1931EFC92D7832E0E0F444
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a333a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:44:58 +0000
ROA not before:           Tue 04 Feb 2025 18:39:58 +0000
ROA not after:            Tue 03 Feb 2026 18:44:58 +0000
asID:                     11830
IP address blocks:        2801:151:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8d:c3:bf:02:d4:5a:00:1d:19:31:ef:c9:2d:78:32:e0:e0:f4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:58 2025 GMT
            Not After : Feb  3 18:44:58 2026 GMT
        Subject: CN=BC350A5E49AE02A7D587008C44D6B0FA6892FB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:b8:33:43:7c:66:79:47:8e:8c:1b:a4:58:
                    f7:9c:2c:fe:c4:9c:15:1a:53:c2:41:d1:b2:10:c8:
                    a8:f6:f1:df:3f:dd:95:12:e8:18:98:69:ae:82:40:
                    cd:80:7a:93:15:87:c1:7e:de:48:38:af:53:0c:52:
                    08:e4:41:b7:8c:14:29:8d:b4:84:43:1b:01:35:7c:
                    c8:6c:58:13:99:bc:77:f3:10:ed:c2:2d:14:dd:08:
                    15:4c:da:db:19:5f:12:e8:ec:0a:af:3b:47:86:f6:
                    33:4a:ae:99:3e:0b:ba:1a:88:e9:ff:23:4a:df:80:
                    67:44:39:f8:76:86:aa:cf:01:40:e3:fc:fa:e4:12:
                    36:fd:ad:13:be:ec:bc:da:62:8b:94:1a:00:22:4e:
                    f6:3d:e5:3c:e9:87:dc:bf:9d:ed:a9:67:19:7c:79:
                    2d:ad:43:36:66:6d:60:64:75:bd:73:2b:0c:cf:42:
                    36:74:af:4d:1d:ee:7e:73:97:53:f8:4d:49:58:6e:
                    1f:65:70:2b:37:0b:73:42:17:8d:bb:35:d0:95:fd:
                    ee:24:90:dc:d8:63:30:e9:6b:a3:5b:2f:a8:9b:ce:
                    a2:d3:2b:2d:27:6b:e5:e9:d6:63:d3:31:c5:32:37:
                    96:9b:3b:00:33:5d:93:e0:77:cc:e7:65:ee:ad:3f:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:0A:5E:49:AE:02:A7:D5:87:00:8C:44:D6:B0:FA:68:92:FB:83
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a333a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:91:9a:9e:f9:24:24:2b:89:24:91:4e:da:55:90:49:1c:ea:
         85:4c:06:00:02:0c:3e:66:8d:a8:4d:6b:b5:52:53:bf:98:cd:
         fd:1c:42:b8:6d:e6:e5:a6:41:44:a5:df:3a:12:43:e1:b1:37:
         cb:97:d4:f2:2f:88:ac:0b:9c:eb:67:af:c1:6b:db:54:a3:75:
         81:fd:60:5b:58:d5:bf:16:d2:0d:1b:1c:e2:64:89:5d:4b:fa:
         3b:90:cb:1c:31:48:84:4e:2b:4f:c9:f2:63:ff:d9:5c:4b:f5:
         82:3f:9d:d1:08:56:b8:8d:fb:39:1c:b0:bf:36:4f:7c:d3:b3:
         b2:77:4b:09:a1:aa:ac:b4:64:a2:8d:b1:37:10:6b:ad:c5:6d:
         f4:c7:70:6c:38:58:bb:56:b5:46:b7:53:25:60:51:67:f4:d1:
         61:66:df:f7:bd:92:9c:20:47:91:4e:97:68:09:d1:9e:da:fa:
         dc:a1:d7:d1:e7:eb:56:82:d5:0a:5d:1f:a6:55:23:b7:50:5a:
         68:1f:0e:90:b9:9a:d7:9e:31:e8:d4:73:f2:d8:d1:d9:30:68:
         30:1d:6e:34:98:32:1e:c5:8b:03:78:37:e0:16:c1:c3:38:ce:
         4e:b1:30:64:a4:b3:14:03:4b:af:44:f8:1d:cc:6a:53:34:bc:
         aa:15:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:18 2025 by rpki-client