Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          FI37jq4nuLUPHV079qf6ZmIIuu4szEXXCDUQLDWA3Ic=
Subject key identifier:   EA:60:39:96:7D:3F:93:E8:8C:C2:F7:C6:74:2C:CD:A5:23:C8:BF:17
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4D0467FC961C8682C1105868B81A5277A206FA82
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:06 +0000
ROA not before:           Tue 04 Feb 2025 18:40:06 +0000
ROA not after:            Tue 03 Feb 2026 18:45:06 +0000
asID:                     271891
IP address blocks:        2801:151:51::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:04:67:fc:96:1c:86:82:c1:10:58:68:b8:1a:52:77:a2:06:fa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:06 2025 GMT
            Not After : Feb  3 18:45:06 2026 GMT
        Subject: CN=EA6039967D3F93E88CC2F7C6742CCDA523C8BF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:e5:fa:d9:2e:81:5b:81:09:64:3d:61:2e:
                    d5:6d:b8:b2:62:35:fa:68:62:e2:22:36:87:10:dd:
                    79:1f:45:4d:f9:c9:91:e3:74:60:38:84:d9:66:a8:
                    f5:65:00:2f:f2:84:6b:90:65:16:ee:6d:9f:e6:b6:
                    46:7b:d2:73:ce:e8:34:5d:91:ff:4d:67:bf:e6:da:
                    fc:c9:de:98:a5:25:83:80:33:c4:f2:b6:4d:1c:62:
                    00:96:89:1c:5a:4c:af:aa:c3:76:7b:9c:61:db:f6:
                    54:dd:67:4b:25:a7:14:88:df:2f:54:e5:01:76:27:
                    e5:e6:b3:29:6c:36:87:9e:8b:97:c1:8f:fd:67:64:
                    e7:ad:3e:31:5a:c1:7e:5f:7d:d5:55:d3:1d:10:99:
                    31:bd:de:b6:9b:4b:a2:f3:bc:d0:86:92:07:0e:45:
                    c4:b3:56:d8:6a:86:0d:d5:2a:39:10:24:d7:76:3e:
                    d8:15:f3:84:cb:74:e6:e8:01:b3:3c:a1:76:d7:af:
                    0c:89:41:a7:c8:94:ba:b1:78:d2:76:26:c4:b3:17:
                    61:8b:ca:96:19:28:03:96:8f:4f:30:17:92:6c:e5:
                    6c:47:55:26:54:dc:72:18:c1:e4:e6:fd:18:b7:33:
                    51:65:b5:ed:55:85:b6:a2:0c:f0:1b:74:42:7a:55:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:39:96:7D:3F:93:E8:8C:C2:F7:C6:74:2C:CD:A5:23:C8:BF:17
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:31:49:91:52:91:5e:fd:d9:ad:95:11:c9:61:f9:bc:2a:
         35:f1:de:6e:bc:c7:40:37:17:d0:4d:fb:8a:e0:13:45:0e:cc:
         15:cc:3e:fa:77:89:b5:0d:fb:6e:dd:b1:06:10:31:e3:b4:7e:
         16:bf:46:53:98:4d:33:8a:03:9c:bc:25:3c:19:a3:b1:f5:08:
         64:5e:52:37:e7:13:fa:bf:05:83:24:31:8b:3a:79:95:a0:b0:
         5e:5e:6c:83:21:34:2d:d9:74:c1:38:d8:89:79:4d:f0:9f:24:
         c6:fa:c5:f3:19:f3:25:48:f6:5a:c5:cd:66:8b:64:cf:08:e2:
         52:26:7b:cd:4e:ad:4d:9f:77:6d:3f:cd:8d:39:fb:83:22:91:
         8e:b1:a1:a4:37:59:9a:29:61:c4:af:fc:cd:09:22:20:e3:31:
         d9:93:24:90:a6:f2:88:ac:19:81:89:47:d8:a6:7b:83:56:47:
         b8:47:2c:e8:33:60:7a:3d:3e:0f:7c:59:b1:4d:48:fa:64:a3:
         fd:6b:97:34:b7:12:7a:13:12:c1:5f:8d:1c:c3:2b:e9:49:2e:
         0b:1d:7c:b2:44:30:1e:6f:8c:00:fc:f7:11:c7:94:37:63:ba:
         aa:06:90:9c:38:97:9d:ab:68:63:de:a9:7a:e5:1a:1a:ff:3a:
         63:c9:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:14 2025 by rpki-client