Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a343a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a343a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          mYayImMeNRHNpVoum9lqgU2VNbPQgOYDAxFdNVt5ztY=
Subject key identifier:   B3:0B:1C:92:B8:16:B6:C0:E5:68:AF:F8:91:2B:07:A5:44:EF:DE:05
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       272D6F3DAC5CA9CA64A35C5060F24FFF2B58724D
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a343a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 04 Feb 2025 18:44:59 +0000
ROA not before:           Tue 04 Feb 2025 18:39:59 +0000
ROA not after:            Tue 03 Feb 2026 18:44:59 +0000
asID:                     3790
IP address blocks:        2801:151:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:6f:3d:ac:5c:a9:ca:64:a3:5c:50:60:f2:4f:ff:2b:58:72:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:59 2025 GMT
            Not After : Feb  3 18:44:59 2026 GMT
        Subject: CN=B30B1C92B816B6C0E568AFF8912B07A544EFDE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:8d:11:3c:3a:8e:54:3c:ae:02:28:22:89:
                    9b:40:b6:e0:ec:52:1c:4d:07:90:e7:dc:8b:af:da:
                    de:31:a6:42:d3:65:6f:b1:ec:17:87:6a:1e:0c:27:
                    48:af:8e:6d:c7:9e:72:54:59:31:d2:05:d1:a8:4e:
                    07:b0:6a:8d:05:4f:68:bb:a8:15:86:e5:ea:7f:6c:
                    ad:c7:e6:d2:15:e5:e1:42:68:a8:b2:c2:30:68:8b:
                    f9:30:2e:e4:1f:2a:35:f4:4b:b9:38:b9:75:cf:cf:
                    06:13:55:1f:d1:dc:59:ea:27:a8:16:3d:6e:7b:e8:
                    e5:68:81:73:a2:3b:ea:00:f3:d1:b0:72:29:d0:13:
                    c8:6b:73:aa:01:46:03:71:c1:7d:d9:87:4f:fe:7c:
                    53:f1:64:25:b9:21:fd:e5:73:22:cb:38:84:81:66:
                    94:a3:67:db:6b:6b:eb:98:4e:14:ab:30:da:3b:c8:
                    8e:07:f0:0c:d7:7d:45:d6:64:7b:a0:17:22:34:79:
                    8b:5d:1a:8e:2c:65:78:30:fa:0d:da:bc:d9:a5:41:
                    74:b5:af:9b:55:09:b1:db:06:37:d8:f1:b1:45:2f:
                    db:ed:06:2c:33:85:8b:18:e6:15:27:30:6e:75:32:
                    de:b2:c1:7f:37:e6:79:49:c9:a8:11:0a:70:ab:aa:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:1C:92:B8:16:B6:C0:E5:68:AF:F8:91:2B:07:A5:44:EF:DE:05
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a343a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:16:b5:76:21:61:f5:f2:f6:8b:2b:9f:1f:3c:71:fd:03:c5:
         0a:af:04:f1:55:8d:45:01:b8:c2:6b:09:b5:d7:7e:5e:30:3d:
         5c:03:58:5a:7b:8c:d8:a3:89:ba:13:01:58:1f:23:aa:15:fa:
         71:5b:4e:d6:e0:77:47:bc:33:0c:f0:a5:76:7e:39:b9:db:b2:
         a0:a4:b6:bb:6a:57:fd:e8:16:47:65:e9:34:c5:63:2b:f8:63:
         67:0a:fb:b3:b2:49:bc:1a:67:2b:6f:eb:14:76:79:78:26:a9:
         cd:1c:c0:39:e9:c5:15:c2:59:c2:9e:6a:6f:c7:d8:c2:6c:c9:
         7e:67:e5:d7:8e:a8:6d:c8:eb:aa:ef:2e:54:9e:e4:c6:92:9f:
         5f:32:d9:df:62:99:28:4a:5b:a5:58:e0:ce:c6:3e:d8:8d:37:
         b2:7d:ed:24:5b:1d:83:27:26:c3:98:47:dc:b6:d8:86:3c:a6:
         5a:a6:a2:2c:69:9a:ed:b2:0d:a2:4c:dd:a8:42:24:64:df:1e:
         3b:4a:74:f2:dc:d6:f2:ac:7d:f7:cd:62:98:cb:9c:7e:f0:43:
         18:fc:a2:e3:a4:7f:09:86:17:c4:48:cc:4a:8d:5c:b5:67:f5:
         79:be:30:9d:2a:59:29:f8:aa:ce:e6:e9:08:d9:3a:eb:93:87:
         ee:7b:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:36:07 2025 by rpki-client