Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          s/Ffzym7d/5MeC7nowdd0mCciPHP3RqxKW6KrR9cUK0=
Subject key identifier:   98:42:CA:F0:C4:75:15:38:9F:A7:8B:AD:12:0A:47:37:09:D6:D3:D6
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2E9E968F9D4974B2DE61307ED0E72A5C7236B368
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:01 +0000
ROA not before:           Tue 04 Feb 2025 18:40:01 +0000
ROA not after:            Tue 03 Feb 2026 18:45:01 +0000
asID:                     271891
IP address blocks:        2801:151:45::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:96:8f:9d:49:74:b2:de:61:30:7e:d0:e7:2a:5c:72:36:b3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:01 2025 GMT
            Not After : Feb  3 18:45:01 2026 GMT
        Subject: CN=9842CAF0C47515389FA78BAD120A473709D6D3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:2a:9b:46:95:0b:d9:10:c2:8a:07:56:10:
                    85:df:54:8c:c7:bf:ad:9e:27:9a:d4:8d:43:21:b7:
                    18:e4:00:f3:a6:c6:85:c3:ee:fa:a9:1b:b4:69:39:
                    88:d9:4a:16:c7:cf:25:1f:a3:38:75:fa:8d:3d:dd:
                    4e:a2:71:96:e5:3b:5a:b1:e3:44:60:8b:96:5c:82:
                    4a:dc:36:34:c8:4f:37:c2:8a:ae:cb:97:77:2b:45:
                    e8:1e:e3:f8:e2:66:9f:5c:3f:30:7c:91:d3:ae:c7:
                    1d:10:21:54:a4:81:f7:02:e6:46:fc:b8:b3:2e:ad:
                    86:b2:9b:46:33:fc:eb:4f:e4:a4:54:29:dd:9f:4f:
                    8c:de:cb:d4:83:2d:62:94:29:3e:64:9c:12:71:20:
                    75:cc:e3:8b:9c:08:e1:a6:ec:e5:96:13:d4:bf:6d:
                    9a:a1:5a:2e:10:80:4b:dc:f4:9e:fd:3d:f8:0e:f8:
                    cc:a3:f6:8a:21:aa:fa:67:08:9c:bd:1d:b7:db:e9:
                    ca:e4:f9:f1:76:7b:9c:01:fd:0f:82:88:6e:cc:1c:
                    1a:bb:7b:57:f7:0e:f9:11:bb:b9:02:55:3b:4f:70:
                    fe:a1:00:0d:f9:6e:ba:95:62:b6:9d:eb:5f:3a:e1:
                    e0:51:50:ce:f4:7c:d0:e8:de:4a:aa:af:1c:8d:c6:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:42:CA:F0:C4:75:15:38:9F:A7:8B:AD:12:0A:47:37:09:D6:D3:D6
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:b5:c4:cd:58:48:b3:e0:40:f4:db:6b:3b:71:b9:5a:22:
         5d:1e:f0:a1:70:58:76:73:23:c8:ed:96:ba:35:90:84:89:9c:
         c4:a5:c9:63:5d:1f:5a:16:d3:1b:2b:fd:96:4c:85:4f:c1:d5:
         fb:4b:f7:b8:ab:74:e4:3b:31:01:ea:c1:11:9a:68:5e:ee:e4:
         27:a1:b3:1b:32:2f:41:ed:c4:7d:b8:a5:a5:52:93:80:09:7d:
         ca:f6:4c:32:ac:94:18:40:fb:4c:48:c8:5c:95:2e:5f:e5:75:
         e1:89:14:e6:a5:a9:f0:7d:8b:79:cb:18:6e:7f:ae:23:70:06:
         c5:87:97:ac:cb:bb:89:c2:7e:84:c9:64:7e:2b:0f:cc:3a:8b:
         3a:eb:9e:0f:c3:a5:d5:b6:8c:ee:21:34:31:db:63:cc:56:85:
         e7:ea:f5:c5:26:eb:a1:29:0c:4e:60:5d:0d:69:3b:e4:0a:13:
         a4:cd:e9:6b:d3:f9:77:c3:54:f8:d2:e2:6c:e4:ab:8f:e1:09:
         b0:b4:c6:b6:ed:8a:5d:11:9b:0a:0c:f2:aa:d1:73:28:f7:ee:
         98:5c:e5:53:49:1d:9d:f7:96:c6:2e:12:b6:4f:3e:ef:34:ee:
         6c:11:9d:50:0f:6c:3c:ca:0a:52:bb:c0:6c:59:65:19:64:28:
         61:15:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:19 2025 by rpki-client