Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          sVpNJPobYiTZhRBhpr9tTfOuDjVM7DRwRIoVlaCb2rc=
Subject key identifier:   13:CB:10:F7:E8:37:2F:C4:75:FC:85:AB:35:7C:D0:96:BC:7C:8E:DF
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       47B404FFB57E6352BC609705B38D32E89E39527C
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:14 +0000
ROA not before:           Tue 04 Feb 2025 18:40:14 +0000
ROA not after:            Tue 03 Feb 2026 18:45:14 +0000
asID:                     271891
IP address blocks:        2801:151:fb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b4:04:ff:b5:7e:63:52:bc:60:97:05:b3:8d:32:e8:9e:39:52:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:14 2025 GMT
            Not After : Feb  3 18:45:14 2026 GMT
        Subject: CN=13CB10F7E8372FC475FC85AB357CD096BC7C8EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:9e:c1:c7:b2:33:91:8a:7c:27:5e:91:64:
                    26:7f:d2:9b:fc:33:8a:ce:a9:a0:45:18:6c:a0:8f:
                    ea:8b:08:09:c5:35:1d:f5:5b:b4:d6:d7:58:96:f7:
                    c7:e1:e7:a9:9a:c2:29:10:9b:3f:2e:33:e4:55:33:
                    3f:3b:e0:25:4f:e2:f2:18:83:3c:45:8c:12:20:b5:
                    53:d8:72:3c:de:a9:6c:b0:53:6c:5d:09:83:0b:cf:
                    fa:b0:be:1c:39:d0:f5:f3:2c:00:a8:c8:81:fa:a4:
                    6a:b9:da:f1:90:21:74:b5:e3:b4:cc:fa:65:87:00:
                    6c:03:88:7b:ed:c2:a7:0a:84:b0:ae:a1:27:e4:85:
                    e4:ef:13:7d:e1:93:c5:b7:13:c4:fc:4c:90:a4:68:
                    b4:83:49:c5:02:91:63:0f:5c:0c:98:34:9c:62:17:
                    7d:c3:77:ea:0e:0f:fa:51:d6:2b:f9:4a:6c:b4:4a:
                    00:77:22:45:25:2e:27:6d:cd:19:9c:20:9a:d9:67:
                    1d:24:9b:ef:44:e2:3c:19:de:3d:dc:60:17:ca:29:
                    50:80:89:04:13:67:4c:47:b7:bc:60:7f:e7:84:2c:
                    ee:70:ef:c2:e1:fb:71:19:ef:b1:e9:3e:c3:77:ea:
                    d8:08:12:67:d6:15:a9:ff:b0:1e:59:68:b1:08:1e:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CB:10:F7:E8:37:2F:C4:75:FC:85:AB:35:7C:D0:96:BC:7C:8E:DF
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:03:f3:24:e2:a0:c5:d4:7a:bb:bd:2c:40:6c:0d:b7:9f:
         8a:05:5a:c9:a0:ce:83:63:d4:f2:48:82:ea:ea:be:fa:4e:ae:
         25:02:8e:fc:c8:1c:4e:eb:ff:d9:cf:fb:aa:94:ea:33:90:0a:
         14:8d:67:e8:0c:07:1e:5a:b5:d3:8e:68:0a:fb:36:19:09:13:
         54:7c:42:45:79:99:4b:d3:0c:17:d0:6a:ef:cf:90:3e:6d:0d:
         c4:ea:dc:26:52:5a:b7:16:76:5b:dd:aa:a3:84:ba:c9:f8:3b:
         8b:3b:be:30:98:75:2f:ac:86:5e:cf:9a:fa:73:7e:bc:fe:30:
         77:e7:bd:80:a9:c1:9b:56:33:90:46:4f:58:31:6b:db:93:36:
         df:4e:a9:6c:95:da:04:2c:86:74:6a:99:70:be:b3:a8:6b:9f:
         e1:54:b3:03:be:ca:36:c4:87:b6:83:c7:63:95:33:c0:ca:17:
         bc:77:77:31:8c:7c:68:de:8d:70:29:e2:72:2b:31:9d:a2:fc:
         d1:8c:32:37:2e:15:3b:37:ce:43:18:64:d2:20:2d:02:83:86:
         2f:0b:60:f0:7f:e1:c4:56:c5:b9:c5:ed:36:98:67:72:71:4b:
         12:32:49:82:ef:8a:3a:db:d0:c4:7a:52:a9:8c:b6:f6:c1:58:
         ce:f0:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:34:06 2025 by rpki-client