Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323636373030.roa
File:                     323830313a31353a623030303a3a2f34382d3438203d3e20323636373030.roa (raw, json)
Hash identifier:          RIJwo+NkjKRbPKhevVXhejVShuEEiJLS/O3gIB8PvKU=
Subject key identifier:   9C:3B:D6:55:75:8D:BE:D2:FB:DA:25:57:F7:D8:C2:40:76:3E:33:EB
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       134A76F69860F9348394AFC025B4B17220D76914
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323636373030.roa
Signing time:             Tue 04 Feb 2025 20:04:26 +0000
ROA not before:           Tue 04 Feb 2025 19:59:26 +0000
ROA not after:            Tue 03 Feb 2026 20:04:26 +0000
asID:                     266700
IP address blocks:        2801:15:b000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4a:76:f6:98:60:f9:34:83:94:af:c0:25:b4:b1:72:20:d7:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: Feb  4 19:59:26 2025 GMT
            Not After : Feb  3 20:04:26 2026 GMT
        Subject: CN=9C3BD655758DBED2FBDA2557F7D8C240763E33EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:11:a9:50:99:81:1a:33:1b:80:7c:a7:6f:
                    fb:a1:4f:b6:aa:d8:88:30:12:dc:f7:0b:2d:fc:17:
                    96:d7:ab:d3:fd:f9:b5:df:1f:8e:40:db:3c:0b:f1:
                    db:16:33:62:3d:8c:2f:90:f8:26:94:1a:1b:e6:a7:
                    0a:7e:86:41:1a:ea:14:55:e0:ee:0e:04:04:16:4e:
                    a3:99:3b:4c:3b:34:85:ca:74:73:3e:46:89:8c:ea:
                    7b:89:bf:1c:b5:0b:f4:78:29:91:b9:ae:4b:0d:dd:
                    2e:da:63:2e:8e:37:0d:29:51:39:e2:2b:c4:bd:06:
                    14:04:f8:28:e4:89:d1:80:3a:6c:1d:1d:ec:92:6d:
                    df:80:4e:d1:fc:8b:2d:55:bc:ba:a9:f1:bf:0c:15:
                    b0:b9:8c:6c:2b:65:f8:5c:89:72:b5:06:44:4e:c1:
                    9f:b3:4b:37:d5:07:a0:ac:72:91:a3:c2:d6:3f:6c:
                    42:6a:ec:63:45:d3:28:1c:56:f9:46:0c:54:99:e7:
                    26:8e:a3:5f:a1:53:d3:1f:4d:27:0f:0f:d3:53:ac:
                    a5:7a:14:16:00:61:67:1c:25:f6:47:c6:94:09:7c:
                    41:85:3a:ef:ff:b8:d9:47:6a:fc:c8:70:03:bf:34:
                    56:20:b8:e4:e3:05:a7:17:92:03:bb:ca:4d:49:c4:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3B:D6:55:75:8D:BE:D2:FB:DA:25:57:F7:D8:C2:40:76:3E:33:EB
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323636373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:ca:26:48:3f:e5:3c:c0:3e:3e:6a:c0:d4:45:6c:35:34:
         86:a9:a3:7d:15:17:d8:d6:ed:ab:cf:bd:ec:1f:40:b2:8c:b4:
         3f:ba:f3:3c:e3:c9:93:a1:2b:e8:6b:5a:d2:22:ee:7d:73:cf:
         0a:29:15:c0:99:94:ba:f1:ba:60:44:b2:29:59:87:a8:c8:75:
         ab:ce:6e:a9:f0:a2:79:4a:42:68:cd:33:4b:b6:b9:d2:93:a3:
         f0:c6:ee:3f:f7:2a:24:11:de:60:2a:ee:c5:74:24:ab:6f:9c:
         b3:44:37:06:a6:4b:7a:6c:2a:65:92:50:01:b2:0b:00:ce:7a:
         2f:c2:15:3b:4e:e0:5d:9a:4a:2a:08:5c:b6:b3:e1:bf:13:0c:
         2e:4b:67:67:5c:79:e3:81:51:47:2d:7e:9d:7a:95:34:38:d2:
         b6:cc:24:e1:76:7f:7a:3f:96:28:2a:44:c2:27:d4:ed:53:e7:
         dd:12:f6:36:d6:27:28:41:8b:b8:57:a5:53:d8:e9:d3:9e:61:
         0b:78:7a:8e:07:69:0a:70:8f:b0:95:39:6a:90:a4:bc:1a:44:
         fc:cb:79:f9:e3:4d:cf:91:46:df:82:eb:e0:b7:8b:f8:77:4d:
         91:96:48:09:77:42:dd:01:cc:bc:e3:08:37:2f:96:10:59:e2:
         6c:df:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:33 2025 by rpki-client