Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          bJ3XIDIaPNPnicBtt4OytFEw+3/H8ZZhxZ2ft7/tqAg=
Subject key identifier:   87:C9:D4:EB:7C:E0:6B:BD:D8:68:67:E4:BE:A0:D6:FA:F3:C2:28:27
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       159F8438C7F3495AC485CF79EBC7A59E3EFF464A
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:03 +0000
ROA not before:           Tue 04 Feb 2025 18:40:03 +0000
ROA not after:            Tue 03 Feb 2026 18:45:03 +0000
asID:                     271891
IP address blocks:        2801:151:ea::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9f:84:38:c7:f3:49:5a:c4:85:cf:79:eb:c7:a5:9e:3e:ff:46:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:03 2025 GMT
            Not After : Feb  3 18:45:03 2026 GMT
        Subject: CN=87C9D4EB7CE06BBDD86867E4BEA0D6FAF3C22827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:60:96:eb:b6:f1:23:d9:54:75:4e:fe:7c:
                    54:ad:a2:8e:4b:07:1c:ad:b4:dd:bb:51:68:8b:9f:
                    b5:34:74:8c:60:74:fc:15:11:05:b6:5c:54:6a:bf:
                    be:a4:1b:9f:a7:1b:b3:5c:ac:41:5b:87:f5:50:43:
                    90:c5:92:1c:00:85:36:f4:1a:19:c2:4a:1d:82:58:
                    25:cf:5f:aa:55:ca:bb:ee:fe:82:a6:6b:0b:bd:05:
                    8f:3f:b4:08:19:78:5d:7b:41:62:21:ee:e2:2d:c3:
                    ac:ea:55:e9:4c:8f:e3:84:74:fd:b5:31:4c:8f:6c:
                    fb:0b:be:30:52:6b:9a:a0:c4:d2:7a:52:99:b3:71:
                    f4:16:03:6c:64:15:9b:35:bf:5b:46:c0:96:7a:d7:
                    a9:8b:cd:b9:57:90:f4:f6:13:d4:8c:ac:6c:62:7c:
                    6d:f7:8f:6b:5e:ec:ef:00:57:fa:b2:70:bb:da:ec:
                    ea:c8:52:6f:59:e9:99:0d:c8:21:84:28:24:5c:5b:
                    46:aa:df:62:b8:8e:af:2b:42:08:7a:66:0b:c7:3c:
                    5b:a2:a6:0a:37:68:24:60:8f:06:75:30:64:8e:fc:
                    17:db:65:fa:44:bf:ad:b7:d7:96:ad:31:56:9e:56:
                    f2:57:45:5c:ac:38:bb:b8:f5:ad:02:78:30:50:f8:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:D4:EB:7C:E0:6B:BD:D8:68:67:E4:BE:A0:D6:FA:F3:C2:28:27
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:d6:8b:4f:74:a0:7d:1a:ce:67:fe:40:fa:38:8f:5d:14:
         76:bc:ed:b1:bb:40:c3:d9:b4:98:77:17:7f:33:41:37:a2:6d:
         3d:73:b3:72:db:57:5c:a0:4b:07:62:43:8b:f4:07:73:2c:23:
         b1:e0:50:f2:69:de:a8:7c:90:5a:05:e9:05:b2:8e:fb:e4:4e:
         ad:e8:5d:6b:dd:56:24:f8:aa:2a:a3:5e:49:0b:fa:5d:e5:97:
         98:76:66:a1:e1:e6:a8:43:ee:06:71:28:49:58:9f:71:a6:12:
         2b:18:0c:c0:39:88:a9:0d:0c:0d:d9:af:24:c1:9c:0d:4c:cc:
         19:dc:a4:76:39:6f:51:52:0f:1f:96:5a:a8:68:66:46:bf:df:
         d3:fb:dc:9c:8c:d6:a9:ef:ab:b7:7f:b0:c2:37:42:85:10:36:
         62:b2:e4:13:42:13:c6:16:b5:26:4d:3a:2f:63:af:ca:2b:ee:
         1e:de:4d:d8:3c:d4:4a:f7:69:1e:86:24:3f:a0:ac:31:97:ba:
         f9:f3:4b:62:ce:4c:eb:09:3b:d7:95:a3:f3:b0:ca:1c:2f:0f:
         dd:05:10:5d:23:4d:1a:6b:12:7f:d5:b8:8e:a4:4b:7e:ff:fa:
         14:2e:23:70:92:f4:f0:07:ab:ce:60:6f:03:5a:6d:c4:17:d8:
         82:35:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:57:20 2025 by rpki-client