Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66373a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66373a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          fJYne9hMP+mCuIEsZEbETe0Q40s4sAcDeAUYlidbrt4=
Subject key identifier:   2C:F5:4C:C9:A2:E9:FF:11:93:F2:AF:45:10:CD:20:8B:35:91:83:20
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6839245583153F293869ADA93B4BD027C2E97BAE
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66373a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:44:57 +0000
ROA not before:           Tue 04 Feb 2025 18:39:57 +0000
ROA not after:            Tue 03 Feb 2026 18:44:57 +0000
asID:                     271891
IP address blocks:        2801:151:f7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:39:24:55:83:15:3f:29:38:69:ad:a9:3b:4b:d0:27:c2:e9:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:57 2025 GMT
            Not After : Feb  3 18:44:57 2026 GMT
        Subject: CN=2CF54CC9A2E9FF1193F2AF4510CD208B35918320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:b0:36:a3:87:c8:bc:19:58:72:d6:d4:e0:
                    8f:ad:39:2d:dd:2a:2c:e5:17:22:9b:86:b9:b1:86:
                    4b:bc:73:cc:b8:22:74:8a:b7:58:f3:1d:e8:96:30:
                    bc:eb:50:e2:d3:5a:a8:a7:c4:55:d3:9b:ae:34:61:
                    ff:3a:2d:d5:fe:60:17:ec:dd:8a:5d:a3:bf:46:67:
                    69:31:08:e4:fd:52:a1:c4:95:d1:76:39:cb:70:46:
                    83:98:47:da:81:09:82:b6:90:fd:b3:94:57:ee:49:
                    2c:a6:b0:7b:09:cb:9e:19:c2:23:79:b2:34:ee:7a:
                    27:5c:51:20:a6:1b:50:9c:3a:64:82:1e:98:21:fc:
                    13:d4:2e:c1:58:19:76:43:63:6a:05:ad:d2:0d:26:
                    c6:5e:72:14:5a:6d:a5:6a:6b:a0:dd:ef:f4:61:ec:
                    86:fa:f5:3b:e2:16:3d:84:4d:94:3f:44:4f:2e:1d:
                    b8:a4:f2:52:1e:57:5c:56:4a:49:02:7f:65:f0:30:
                    0a:cc:a5:01:a8:d6:05:16:c4:e1:ec:91:bd:6e:34:
                    b8:e6:3e:3b:65:41:01:c6:69:19:1f:65:4d:ed:3c:
                    75:93:a0:81:32:e3:9a:28:3d:ab:50:3e:f6:ca:ec:
                    7c:97:7f:a7:bc:ce:e7:72:13:12:80:56:47:23:82:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:4C:C9:A2:E9:FF:11:93:F2:AF:45:10:CD:20:8B:35:91:83:20
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66373a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:06:64:ed:f5:d0:3f:a1:58:e2:88:31:5e:b5:b9:ec:e6:0a:
         a1:40:63:2b:cc:b6:2b:18:06:69:f0:1c:31:bf:74:3e:09:ff:
         12:9d:57:2a:88:16:81:10:fa:3f:9e:a4:13:38:5e:91:92:f3:
         49:4e:19:2c:f0:8f:32:71:53:40:b7:ff:03:62:38:77:40:d8:
         00:e7:b5:2f:4c:44:84:94:91:ef:1c:a4:da:42:d0:31:b5:c9:
         78:7f:16:71:6b:3d:87:94:cc:5e:31:25:79:25:ac:79:ad:64:
         c0:47:3f:fe:a5:6d:67:01:48:6f:80:b9:49:e9:6d:01:a6:70:
         10:7d:76:bd:97:50:94:ae:6c:4b:b1:74:a6:c8:b7:dc:2c:35:
         93:ad:7c:89:38:87:f4:95:35:7e:11:72:2a:ce:13:36:02:51:
         83:41:7d:31:7a:28:f2:16:4d:e1:78:49:a1:46:95:cd:7f:40:
         64:08:c4:f6:4f:eb:ea:e3:a2:8e:89:94:11:ca:c3:47:f6:ee:
         b3:f9:95:10:7c:e0:f8:cc:49:51:70:49:3f:ff:7f:be:0a:3b:
         d9:af:9d:e7:00:65:3f:70:6e:3a:15:d3:4c:39:5e:b1:8c:6b:
         5f:6e:14:db:48:19:c3:b4:67:da:7f:8c:aa:d0:b5:8b:f8:eb:
         86:05:35:65
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUaDkkVYMVPyk4aa2pO0vQJ8Lpe64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNTAyMDQxODM5NTdaFw0yNjAyMDMxODQ0NTdaMDMxMTAvBgNV
BAMTKDJDRjU0Q0M5QTJFOUZGMTE5M0YyQUY0NTEwQ0QyMDhCMzU5MTgzMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIbA2o4fIvBlYctbU4I+tOS3d
KizlFyKbhrmxhku8c8y4InSKt1jzHeiWMLzrUOLTWqinxFXTm640Yf86LdX+YBfs
3Ypdo79GZ2kxCOT9UqHEldF2OctwRoOYR9qBCYK2kP2zlFfuSSymsHsJy54ZwiN5
sjTueidcUSCmG1CcOmSCHpgh/BPULsFYGXZDY2oFrdINJsZechRabaVqa6Dd7/Rh
7Ib69TviFj2ETZQ/RE8uHbik8lIeV1xWSkkCf2XwMArMpQGo1gUWxOHskb1uNLjm
PjtlQQHGaRkfZU3tPHWToIEy45ooPatQPvbK7HyXf6e8zudyExKAVkcjgjzJAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQULPVMyaLp/xGT8q9FEM0gizWRgyAwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTY2Mzcz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAPcwDQYJKoZIhvcNAQELBQADggEBAEUGZO310D+hWOKIMV61uezmCqFAYyvM
tisYBmnwHDG/dD4J/xKdVyqIFoEQ+j+epBM4XpGS80lOGSzwjzJxU0C3/wNiOHdA
2ADntS9MRISUke8cpNpC0DG1yXh/FnFrPYeUzF4xJXklrHmtZMBHP/6lbWcBSG+A
uUnpbQGmcBB9dr2XUJSubEuxdKbIt9wsNZOtfIk4h/SVNX4RcirOEzYCUYNBfTF6
KPIWTeF4SaFGlc1/QGQIxPZP6+rjoo6JlBHKw0f27rP5lRB84PjMSVFwST//f74K
O9mvnecAZT9wbjoV00w5XrGMa19uFNtIGcO0Z9p/jKrQtYv464YFNWU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:57:26 2025 by rpki-client