Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          FiSVnLOl4mfqZgu+c8iClGo/WesbnJkGOlE8ep+n/II=
Subject key identifier:   9F:4E:68:46:3D:19:16:53:68:41:3F:0A:1F:0B:0D:E7:95:73:9E:53
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6949D509B1BBBB4B38A8B40FF2950EA900BE12EF
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:09 +0000
ROA not before:           Tue 04 Feb 2025 18:40:09 +0000
ROA not after:            Tue 03 Feb 2026 18:45:09 +0000
asID:                     271891
IP address blocks:        2801:151:c4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:49:d5:09:b1:bb:bb:4b:38:a8:b4:0f:f2:95:0e:a9:00:be:12:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:09 2025 GMT
            Not After : Feb  3 18:45:09 2026 GMT
        Subject: CN=9F4E68463D19165368413F0A1F0B0DE795739E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:c1:22:f9:ff:c4:a4:8d:fe:2d:c6:bb:b3:
                    02:3a:ba:ed:3f:cc:28:46:6e:81:b0:08:e3:a9:c8:
                    f2:25:a7:c9:e0:88:a6:96:1e:66:d4:9d:26:46:5d:
                    12:de:b1:f7:45:7d:9f:cc:89:ad:f8:f6:ec:e9:34:
                    b7:19:79:cf:da:1f:50:8a:c2:c3:16:d3:e0:fb:98:
                    34:35:58:75:ea:5c:93:76:ed:8d:e8:57:cb:fe:73:
                    d9:ed:be:84:3c:22:42:c1:a0:cc:6c:03:30:78:bc:
                    22:0f:4e:2d:2c:c1:55:5a:73:e6:9a:bc:95:48:e1:
                    39:e2:53:13:48:2a:da:70:7d:f9:90:64:91:97:2c:
                    dd:e8:19:09:fc:7f:5f:a3:29:31:ae:89:e8:3c:b7:
                    02:9e:56:dd:41:72:de:7d:7f:62:cc:38:b8:55:4f:
                    3b:e7:f3:a8:59:e8:50:81:b5:4d:5c:ef:1d:b3:41:
                    60:06:66:d6:fb:e3:b5:a8:61:30:96:32:39:7d:62:
                    14:59:14:05:07:5a:5e:b3:15:ba:48:ab:78:18:d6:
                    2c:71:0c:b2:45:cb:01:5b:df:d6:94:2c:a9:59:99:
                    b1:8b:0f:7a:26:03:fc:2d:a2:ce:2a:2f:db:2b:c1:
                    a7:37:b1:5e:b6:2c:41:b9:67:89:03:a5:a2:33:80:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:68:46:3D:19:16:53:68:41:3F:0A:1F:0B:0D:E7:95:73:9E:53
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:f0:7e:8c:83:b9:3b:69:7b:28:4a:a5:6f:92:ba:ac:1a:
         58:e2:aa:99:9f:f1:5d:f4:68:c8:a4:ac:2d:a0:b3:bf:33:cd:
         0a:1a:f9:97:fa:e8:35:dc:32:af:17:f0:37:cf:ea:08:27:25:
         ae:a3:e3:51:07:d6:5f:93:34:fa:8d:45:74:25:d6:20:de:10:
         60:ce:0c:5e:52:a3:84:6c:92:3c:ca:93:53:0a:20:99:81:35:
         8c:f7:0c:39:de:0f:55:31:b6:4a:1c:e6:10:f3:4a:26:78:6e:
         cf:05:c5:e7:5d:55:44:5c:03:05:2b:8e:4e:be:5b:b1:3a:01:
         e4:24:4c:88:3f:4d:76:7b:5b:74:b3:af:0f:d0:72:8c:21:87:
         a5:27:92:94:e4:fe:6e:e3:1d:08:f2:d9:4a:87:84:5b:d4:a4:
         fe:f2:af:2f:a2:d7:af:94:a5:f5:47:d7:41:8e:ff:51:12:25:
         ef:6b:b8:51:02:ec:29:80:f1:f8:f1:13:6a:78:f6:39:42:e8:
         60:0d:57:8f:4d:ad:8a:75:5a:28:79:b7:e5:18:5e:cd:63:c3:
         69:ec:7e:7d:88:7e:c5:05:48:24:e5:03:03:fb:3a:6c:58:7c:
         87:58:18:4f:f7:c4:dd:56:a4:fb:8b:d4:45:f7:2a:04:f6:7f:
         47:a2:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:15 2025 by rpki-client