Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33643a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33643a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          gpYyK7gu7OqNfsEgkbXyKHklmQaeqRtl/chB4rZAjDY=
Subject key identifier:   C5:CF:95:2F:1B:0F:5A:40:CF:FD:0C:F3:C2:E0:4E:0A:EA:68:E6:FA
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       44D42B0CDA928B3BF865A781623B94B0DBD85819
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33643a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:44:58 +0000
ROA not before:           Tue 04 Feb 2025 18:39:58 +0000
ROA not after:            Tue 03 Feb 2026 18:44:58 +0000
asID:                     271891
IP address blocks:        2801:151:3d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:2b:0c:da:92:8b:3b:f8:65:a7:81:62:3b:94:b0:db:d8:58:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:58 2025 GMT
            Not After : Feb  3 18:44:58 2026 GMT
        Subject: CN=C5CF952F1B0F5A40CFFD0CF3C2E04E0AEA68E6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:b4:35:41:15:4b:ec:a6:89:ac:3f:39:be:
                    4e:cb:d1:d6:18:46:08:09:c1:86:df:dd:0e:7c:ae:
                    25:d5:1f:86:dc:1a:36:ad:cb:1f:f0:e3:be:50:66:
                    66:a5:ab:9f:b0:5c:7f:f7:6a:a5:df:80:f8:ff:3a:
                    b3:c7:97:6a:ca:0d:bc:9f:83:0d:18:ef:0f:b0:ef:
                    f9:fa:fc:ef:03:b2:57:d1:2a:83:2e:6c:c6:f2:f8:
                    74:f9:aa:2d:e8:4c:77:aa:56:d5:a3:9f:be:a4:82:
                    d6:18:7e:70:00:ec:29:9e:bb:0f:31:a3:bc:c9:8c:
                    29:59:d2:52:79:b1:49:94:6e:e9:1a:fd:20:f4:e6:
                    6b:38:c9:2b:18:af:82:82:bb:4a:99:e0:f8:99:1a:
                    8b:ed:cb:1e:e4:97:cc:da:77:a1:51:80:62:5b:7c:
                    76:25:4b:33:56:6d:bc:9e:95:77:85:77:d6:de:df:
                    be:1a:18:c7:3b:be:3e:9f:ac:bc:2a:5d:2d:3b:a0:
                    b7:cc:31:26:b3:28:fb:01:a5:23:a3:68:93:d5:93:
                    6e:52:d1:e9:ab:53:70:7b:62:b0:cb:25:3d:72:02:
                    81:5d:c3:14:0f:bb:28:9a:38:8a:e3:70:b1:da:53:
                    77:ba:13:51:17:53:15:63:0e:26:3e:fa:bf:b1:67:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:95:2F:1B:0F:5A:40:CF:FD:0C:F3:C2:E0:4E:0A:EA:68:E6:FA
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33643a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:74:87:df:bc:d1:39:b8:06:4c:24:7e:fb:1c:68:8e:80:e6:
         6c:46:30:48:0e:7e:26:5a:dd:84:82:29:a6:47:f2:11:10:24:
         59:25:13:88:27:f8:99:1c:50:3d:94:d8:f3:40:31:62:42:69:
         1f:dd:d9:c7:d0:36:1f:92:c1:db:11:c0:8c:28:fa:77:ac:f8:
         49:b2:aa:e0:a9:86:62:57:70:39:a2:74:fa:4e:47:a9:6c:0b:
         4a:4b:93:17:82:82:bd:7c:fe:48:4a:d1:86:15:d6:0f:96:db:
         cf:90:cb:4b:fd:fc:83:45:2e:9a:16:ea:e8:7e:b9:14:c2:46:
         36:00:80:a6:f9:86:a5:37:92:6d:81:bb:74:2a:4e:3b:95:b6:
         87:9a:04:df:83:5e:97:67:e5:57:41:88:9d:25:76:63:79:8f:
         e0:d6:5e:18:83:12:8e:7b:38:dd:47:3a:97:f5:a4:a8:78:9b:
         5f:54:ee:5c:aa:f4:8e:8b:16:29:8a:12:be:60:54:24:dc:a2:
         03:7d:1c:88:d4:9f:ac:11:9c:09:43:a5:3b:17:d5:a2:84:13:
         fd:90:f7:c5:f9:a8:87:1c:c5:fe:1a:b9:63:f7:8b:3b:cc:9c:
         2a:b6:09:5c:30:06:5e:76:48:bb:ab:9d:ab:62:84:ca:07:d4:
         c0:84:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:57:42 2025 by rpki-client