Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
File:                     323830333a626238303a3a2f33322d3332203d3e20323633373031.roa (raw, json)
Hash identifier:          hDr3kfk9K6foITFRCqyzN/9fwBiIO/eqPtjI2KDKhrk=
Subject key identifier:   AD:48:56:FD:5C:2B:2B:F0:B9:E5:0B:3F:5E:6D:31:66:AE:40:E2:45
Certificate issuer:       /CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
Certificate serial:       1A6EC138518EAF176164E9401FC411B2F3BF97B2
Authority key identifier: 2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
Signing time:             Tue 04 Feb 2025 18:21:03 +0000
ROA not before:           Tue 04 Feb 2025 18:16:03 +0000
ROA not after:            Tue 03 Feb 2026 18:21:03 +0000
asID:                     263701
IP address blocks:        2803:bb80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6e:c1:38:51:8e:af:17:61:64:e9:40:1f:c4:11:b2:f3:bf:97:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
        Validity
            Not Before: Feb  4 18:16:03 2025 GMT
            Not After : Feb  3 18:21:03 2026 GMT
        Subject: CN=AD4856FD5C2B2BF0B9E50B3F5E6D3166AE40E245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:21:40:07:09:58:89:94:02:b2:fa:f4:46:
                    9e:af:d4:f7:ec:c5:6c:23:46:63:84:0c:2f:53:9f:
                    92:4d:d2:9d:49:06:29:96:47:cb:4d:2f:5c:fc:3b:
                    f2:33:9c:a4:70:e1:33:62:36:14:38:a7:2a:e2:54:
                    bc:d0:d5:1c:60:fb:26:ee:61:0b:83:26:42:d5:23:
                    79:fb:94:be:1b:c4:75:5b:36:9f:5f:f6:4d:43:f1:
                    42:af:3a:a8:7f:92:7b:07:3d:5d:66:39:36:c7:0d:
                    73:20:f7:f0:11:3b:eb:f9:de:d2:d1:a2:1d:5d:fa:
                    6c:67:c9:e0:81:c4:03:00:85:c7:7b:8c:06:d7:ed:
                    a4:b5:33:d3:1a:f2:26:68:1d:b9:ac:43:72:dd:88:
                    53:64:d1:8f:17:1a:2e:08:9d:51:ca:0c:61:e3:ce:
                    77:70:bc:28:ca:0c:70:43:d1:70:dc:f5:0e:87:a3:
                    5e:49:83:dd:2a:68:8f:94:a4:a3:a7:3e:76:fd:60:
                    10:0f:b2:ce:91:4f:d7:46:9e:5d:3c:14:df:40:cf:
                    ff:40:94:05:96:15:02:7f:ee:27:eb:0c:62:8a:f8:
                    da:34:5c:15:6c:dc:69:0a:57:bd:bb:06:7e:66:db:
                    ae:24:64:97:07:c8:9a:25:8a:04:cb:13:ea:a0:6d:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:48:56:FD:5C:2B:2B:F0:B9:E5:0B:3F:5E:6D:31:66:AE:40:E2:45
            X509v3 Authority Key Identifier:
                keyid:2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:53:68:2a:31:26:22:d8:ab:92:b3:cb:9e:da:ff:99:ce:
         b2:5b:ac:28:58:25:69:70:c4:45:7e:8e:54:af:ae:9a:d9:54:
         7e:d6:bb:53:16:10:d6:61:52:13:09:64:b8:9a:a7:2c:fd:bb:
         91:14:41:cc:0c:78:64:e5:3d:3e:65:af:2e:1e:55:0a:e7:a4:
         0e:bb:d5:5c:c2:d5:3a:ee:fa:38:4b:d7:93:50:97:f2:40:f5:
         c3:5c:26:bc:47:fb:a1:42:7c:74:49:e8:b9:fd:95:2c:90:c6:
         1e:47:64:84:4e:24:b6:9f:38:89:6f:78:b9:f1:4b:2f:98:f1:
         0b:a1:5d:f0:98:35:14:1c:62:0d:57:85:c6:78:06:cc:47:3f:
         9d:ef:36:93:20:05:98:1d:53:97:41:93:be:5b:b0:75:94:60:
         da:26:7b:2e:31:a4:25:4d:20:5d:01:78:b5:4d:98:cf:98:0f:
         5e:95:11:b3:15:70:d7:53:12:a5:a0:f4:91:d1:44:d4:67:0f:
         74:a8:78:53:02:c2:f3:5f:5e:3e:85:2e:5b:ff:69:05:d1:b0:
         59:a2:63:6c:57:97:56:2c:f8:4f:9d:81:5e:a1:5e:da:19:ad:
         9a:35:f9:0f:15:77:47:4d:95:94:aa:82:b5:fc:15:c2:35:a3:
         2a:4c:b6:47
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGm7BOFGOrxdhZOlAH8QRsvO/l7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ4QUIyODQ4NjU0RDUxNjY0QUM2RjQ1QTQ0RTU0MDdD
NkIzNTkxMjAeFw0yNTAyMDQxODE2MDNaFw0yNjAyMDMxODIxMDNaMDMxMTAvBgNV
BAMTKEFENDg1NkZENUMyQjJCRjBCOUU1MEIzRjVFNkQzMTY2QUU0MEUyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1iFABwlYiZQCsvr0Rp6v1Pfs
xWwjRmOEDC9Tn5JN0p1JBimWR8tNL1z8O/IznKRw4TNiNhQ4pyriVLzQ1Rxg+ybu
YQuDJkLVI3n7lL4bxHVbNp9f9k1D8UKvOqh/knsHPV1mOTbHDXMg9/ARO+v53tLR
oh1d+mxnyeCBxAMAhcd7jAbX7aS1M9Ma8iZoHbmsQ3LdiFNk0Y8XGi4InVHKDGHj
zndwvCjKDHBD0XDc9Q6Ho15Jg90qaI+UpKOnPnb9YBAPss6RT9dGnl08FN9Az/9A
lAWWFQJ/7ifrDGKK+No0XBVs3GkKV727Bn5m264kZJcHyJoligTLE+qgbQVfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUrUhW/VwrK/C55Qs/Xm0xZq5A4kUwHwYDVR0j
BBgwFoAULYqyhIZU1RZkrG9FpE5UB8azWRIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjYxNTIyQTdEMUIxNTk5NjAxRjBBMUFBQjgzOTFBN0Q2
RUEwQTVCREY5NUIwNDVBQkEwMDFFNzlERDRCNjMyLzAvMkQ4QUIyODQ4NjU0RDUx
NjY0QUM2RjQ1QTQ0RTU0MDdDNkIzNTkxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDhBQjI4NDg2NTRENTE2NjRB
QzZGNDVBNDRFNTQwN0M2QjM1OTEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDI2MTUyMkE3RDFCMTU5OTYwMUYwQTFBQUI4MzkxQTdENkVBMEE1QkRG
OTVCMDQ1QUJBMDAxRTc5REQ0QjYzMi8wLzMyMzgzMDMzM2E2MjYyMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDu4Aw
DQYJKoZIhvcNAQELBQADggEBAHjmU2gqMSYi2KuSs8ue2v+ZzrJbrChYJWlwxEV+
jlSvrprZVH7Wu1MWENZhUhMJZLiapyz9u5EUQcwMeGTlPT5lry4eVQrnpA671VzC
1Tru+jhL15NQl/JA9cNcJrxH+6FCfHRJ6Ln9lSyQxh5HZIROJLafOIlveLnxSy+Y
8QuhXfCYNRQcYg1XhcZ4BsxHP53vNpMgBZgdU5dBk75bsHWUYNomey4xpCVNIF0B
eLVNmM+YD16VEbMVcNdTEqWg9JHRRNRnD3SoeFMCwvNfXj6FLlv/aQXRsFmiY2xX
l1Ys+E+dgV6hXtoZrZo1+Q8Vd0dNlZSqgrX8FcI1oypMtkc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:48 2025 by rpki-client