Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63333a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a63333a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          GJdNEAwM+NhZ8f222LctI6yz0jqC4FMGWdHxJKH+vUs=
Subject key identifier:   67:4C:6A:CD:27:E2:FC:C9:0E:B4:FF:95:70:5F:34:58:93:C5:FB:99
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       095F81CF8274222FD701721F40026D7DCA0750A5
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63333a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:44:57 +0000
ROA not before:           Tue 04 Feb 2025 18:39:57 +0000
ROA not after:            Tue 03 Feb 2026 18:44:57 +0000
asID:                     11830
IP address blocks:        2801:151:c3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:81:cf:82:74:22:2f:d7:01:72:1f:40:02:6d:7d:ca:07:50:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:57 2025 GMT
            Not After : Feb  3 18:44:57 2026 GMT
        Subject: CN=674C6ACD27E2FCC90EB4FF95705F345893C5FB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7f:b9:c2:c8:8b:b1:7f:44:e6:42:47:e6:37:
                    59:5a:ab:46:8b:53:a7:17:73:24:b2:bf:13:63:2e:
                    cd:77:9e:79:2f:0f:8d:ea:56:b7:a4:b5:72:71:80:
                    d9:fe:a9:ae:3d:2e:db:3a:07:e4:0a:92:9b:99:13:
                    86:82:79:22:e3:86:25:9c:e9:b6:aa:86:e9:50:23:
                    37:f3:3a:32:81:1a:f2:25:7e:f8:87:6e:36:5a:e9:
                    38:d3:d9:23:c2:aa:af:e2:07:e6:7f:a3:62:12:18:
                    6a:34:ce:ae:d5:85:65:14:2c:24:46:1d:b4:45:37:
                    f9:03:b3:0f:e7:15:88:94:38:7f:12:4d:43:81:b9:
                    85:b0:55:50:2a:4e:85:9d:23:b5:64:0b:26:6b:1e:
                    b4:75:73:ae:14:9f:a5:20:69:6e:ba:9a:34:4d:33:
                    4a:9a:bb:b3:37:94:2e:c4:d2:b3:f5:ed:86:f2:19:
                    d6:4d:03:09:0b:4b:be:40:3c:55:70:16:a1:31:6c:
                    7f:39:86:37:a3:c2:f5:ed:a5:26:6a:4e:65:d1:75:
                    01:25:38:7a:d5:52:5b:25:3d:bd:bc:76:f1:c5:34:
                    7d:78:85:9b:61:80:e1:7d:ff:d1:ce:7c:b8:ae:fe:
                    ab:3f:bd:61:6d:66:79:a8:7c:fb:9d:e6:af:5d:59:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:6A:CD:27:E2:FC:C9:0E:B4:FF:95:70:5F:34:58:93:C5:FB:99
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63333a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:1f:b3:dd:3f:bd:fb:c8:51:46:c4:44:fb:bd:19:96:8d:bf:
         a7:16:a3:3d:36:fe:a3:df:d2:bd:1b:6f:bf:2a:ac:21:85:f5:
         9b:a3:71:86:b9:c7:b8:e6:2d:32:8a:7e:6c:0b:c6:d3:8f:57:
         36:01:c9:f7:7b:b6:51:86:4a:50:e9:b8:13:e0:5a:ce:2f:d1:
         9c:02:30:99:f4:a2:aa:b3:9a:d1:ce:1a:1d:ff:ff:e4:5d:b3:
         59:f7:45:39:ec:aa:1d:0e:c8:64:3f:de:b2:c3:7a:c4:9c:d0:
         2c:7a:59:1e:0a:76:1c:dd:bb:4f:4f:4c:5c:c5:a1:b9:15:ff:
         ed:8d:fb:7b:b6:52:6d:a2:34:79:5a:eb:77:30:40:9a:54:8d:
         b3:ef:08:d5:3e:94:f9:1e:38:be:f5:d7:20:e4:74:c3:2a:66:
         6a:e6:a7:ac:c3:70:eb:59:ed:2c:91:b8:dd:4e:66:49:15:58:
         f2:dd:64:97:1c:4f:9e:9f:61:c7:2b:d4:2b:8a:03:12:55:f0:
         13:b6:60:b8:f2:05:a2:fb:95:dd:cf:30:6b:29:a1:6c:2b:67:
         71:95:21:5e:b5:48:38:7d:7c:f8:d9:5b:aa:29:44:dd:a5:67:
         2b:a7:c7:8e:6a:dd:ba:9b:bf:3e:22:b1:2a:6f:bf:0e:3c:62:
         11:1d:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:16 2025 by rpki-client