Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa
File:                     323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa (raw, json)
Hash identifier:          SLmOXsQAz+Y6eTT1rCpJx8cfBuSzYasoltxqUKom0Ew=
Subject key identifier:   93:A7:2B:37:E5:04:B3:2F:7F:12:CF:61:72:86:89:D5:EF:13:85:CF
Certificate issuer:       /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Certificate serial:       2009308C572192987BEC70E37BCEA760BB5DB65C
Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa
Signing time:             Tue 04 Feb 2025 18:00:07 +0000
ROA not before:           Tue 04 Feb 2025 17:55:07 +0000
ROA not after:            Tue 03 Feb 2026 18:00:07 +0000
asID:                     264630
IP address blocks:        2801:0:190::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:09:30:8c:57:21:92:98:7b:ec:70:e3:7b:ce:a7:60:bb:5d:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
        Validity
            Not Before: Feb  4 17:55:07 2025 GMT
            Not After : Feb  3 18:00:07 2026 GMT
        Subject: CN=93A72B37E504B32F7F12CF61728689D5EF1385CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:de:9c:08:56:6a:d0:37:71:ad:0b:1b:4f:
                    74:dc:2b:95:a2:fc:a8:82:8a:1d:7a:1e:a3:dd:d7:
                    06:c5:1f:61:86:33:01:88:8a:ed:80:84:f8:e2:e5:
                    3a:99:2f:88:2b:77:fd:69:ed:db:75:99:db:67:fd:
                    c6:bb:b9:f9:19:83:e3:14:cf:4a:4b:43:f8:3b:71:
                    c6:2c:1e:b2:ff:dc:64:e8:f6:32:89:dc:cf:76:71:
                    69:99:00:7c:2d:cb:b8:f0:37:89:d4:6a:bf:39:95:
                    4e:4f:6b:d4:95:98:00:a2:43:a7:bb:3f:e6:33:85:
                    84:4b:10:8e:5f:61:3d:d9:74:e5:c8:25:8a:9f:7b:
                    a5:ba:b9:d1:7d:3c:1e:cc:cd:40:df:46:a5:a4:02:
                    3c:f5:66:c0:75:6e:21:6e:76:ad:81:e4:5e:9b:e6:
                    b2:24:96:64:5a:d8:39:05:15:9d:5a:df:ee:0a:20:
                    f8:b3:57:4c:7d:9f:6b:ce:ab:30:14:17:45:ff:03:
                    ff:a7:f3:8f:d4:b1:47:6a:89:dd:b0:7d:4f:ec:81:
                    f7:1b:f1:d8:7f:ef:43:b2:6d:ce:12:41:61:d8:64:
                    3d:79:48:80:98:f8:77:39:e9:aa:01:fe:13:d9:cc:
                    e4:0f:ab:9c:ac:0d:1a:24:96:73:9f:4d:5d:ae:20:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:2B:37:E5:04:B3:2F:7F:12:CF:61:72:86:89:D5:EF:13:85:CF
            X509v3 Authority Key Identifier:
                keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:b1:12:91:61:ac:17:36:3e:b8:af:c5:bc:6f:ae:04:20:28:
         da:1a:f9:0c:a8:57:73:7d:af:92:aa:f1:a8:42:78:75:0d:d8:
         2b:56:f2:14:83:b0:70:80:0f:b9:b7:69:90:12:55:4f:52:36:
         47:25:b8:7f:b2:8c:4c:f2:d9:3c:5a:4d:8a:6e:d8:2d:89:d2:
         fa:f2:52:ce:8b:be:78:4e:78:b8:5c:61:23:a2:f5:3f:bb:ae:
         9f:9d:be:42:85:dc:79:54:fe:d1:a3:3a:0c:26:f5:c9:9b:4e:
         71:79:59:c7:18:df:2f:da:64:f2:7a:64:7b:d3:f5:a0:08:11:
         8b:46:3e:ae:44:92:72:37:cc:b0:01:14:37:b9:18:83:8d:b5:
         ac:22:e1:87:47:f1:00:e4:80:e7:b7:06:61:fe:8b:18:28:e3:
         95:bf:cb:28:21:ee:ca:d2:fb:89:cd:94:64:37:53:b6:7c:bc:
         31:81:52:27:a4:fa:92:4a:bb:40:2d:30:92:72:9e:31:d1:2f:
         e3:39:a2:93:e9:67:04:a9:00:2a:5f:6b:63:d6:34:10:8e:28:
         6c:8b:8c:09:0c:b5:44:b0:67:63:13:2f:23:ef:f4:c6:73:aa:
         e4:59:0e:8c:30:0d:a2:bc:cd:95:e9:84:ca:23:76:e5:11:cb:
         59:db:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:54 2025 by rpki-client