Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32333a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a32333a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          OAsggY7d3vS52L2+XE+nnNYy6o5xi9TFCXMXdqqDmRw=
Subject key identifier:   C5:51:85:DF:B8:1C:86:5E:FC:D4:58:1A:85:E9:6D:4E:18:75:40:53
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       7626CA11AF462451483A6236D0E1BDF3A53F68A9
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32333a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:27 +0000
ROA not before:           Tue 04 Feb 2025 18:19:27 +0000
ROA not after:            Tue 03 Feb 2026 18:24:27 +0000
asID:                     52458
IP address blocks:        2803:480:23::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:ca:11:af:46:24:51:48:3a:62:36:d0:e1:bd:f3:a5:3f:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:27 2025 GMT
            Not After : Feb  3 18:24:27 2026 GMT
        Subject: CN=C55185DFB81C865EFCD4581A85E96D4E18754053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:58:3c:7c:69:dc:ff:9f:fd:8f:89:55:83:
                    cf:1d:53:d8:06:07:75:7b:af:b9:3b:17:8a:0d:cb:
                    ee:4e:d5:42:c6:2c:be:7d:44:43:8c:50:5f:32:c3:
                    7f:a0:a4:8b:68:ce:bf:1f:0e:33:56:c3:03:3b:81:
                    28:4d:d6:06:cb:c7:2a:b8:be:e6:84:9f:d5:af:52:
                    76:39:50:f5:d1:cf:b2:06:7b:c4:f3:d0:88:87:14:
                    1d:ab:2e:09:ce:5f:f2:e4:4d:90:12:d2:e3:fa:8f:
                    9e:92:17:6e:a8:d5:3b:16:a3:3d:34:ce:31:25:05:
                    90:36:ae:b5:c7:9a:72:5a:b0:1d:5f:de:11:23:14:
                    7e:1e:d4:3d:02:72:fb:d0:fa:d6:d4:88:b6:69:91:
                    7d:12:8d:9a:27:88:d5:0c:e5:6e:23:7c:79:7b:72:
                    3c:79:e8:9f:c7:91:22:b2:11:68:e6:d8:42:e3:13:
                    cf:2f:61:60:4f:39:f8:d0:3d:db:f7:37:ef:d3:cd:
                    ef:cf:d8:57:5b:f1:17:82:9f:a2:2d:75:a1:1c:bb:
                    c3:db:f5:1d:5c:4b:27:2e:f7:6c:58:d5:68:56:39:
                    79:27:80:bb:be:88:54:83:24:14:1b:29:ff:ee:ef:
                    e9:66:fe:05:d0:b9:6d:30:5d:55:5a:ad:e5:f7:41:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:51:85:DF:B8:1C:86:5E:FC:D4:58:1A:85:E9:6D:4E:18:75:40:53
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32333a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:23::/64

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:63:10:0a:97:b0:ea:3a:4c:e8:a2:be:69:d4:3f:aa:c3:
         49:bc:7b:de:b1:19:1e:a3:80:2b:ba:e4:2a:45:10:aa:73:1a:
         88:23:53:eb:9e:3e:dd:76:ab:07:03:ae:2c:08:4a:88:a1:22:
         cf:c4:7c:52:8f:6f:ca:e9:44:a9:1c:51:ea:42:66:b6:54:7e:
         91:f7:9e:fc:29:02:f0:06:ea:2e:5a:e7:26:d0:f4:8d:d4:01:
         de:47:ba:b8:6a:f6:ed:00:6e:a8:c5:ee:1c:76:58:39:c0:26:
         e8:71:0d:2c:05:06:71:0d:63:db:65:c0:90:aa:78:a4:21:4b:
         be:cf:b1:a4:53:44:cc:ba:3c:42:35:b3:ec:d1:11:08:d5:67:
         15:d1:c1:f9:2d:07:f4:88:ec:51:9f:1b:53:6e:56:7b:3f:b0:
         ee:6c:1b:00:73:82:a4:e5:99:c3:33:9e:fc:5b:5d:58:f2:4f:
         63:70:88:6e:db:b7:4c:b8:8f:16:cb:f9:8c:46:6b:ae:b6:1f:
         c1:07:4f:a1:74:9d:af:e3:6b:e7:48:bb:48:a3:35:2b:36:e0:
         82:29:9c:f6:23:ad:c1:0a:41:30:47:4c:db:e9:a9:a8:13:f6:
         f5:57:3f:c9:d2:fa:b9:b6:93:16:b1:69:d9:97:b8:83:b4:ca:
         13:d3:2d:aa
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdibKEa9GJFFIOmI20OG986U/aKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNTAyMDQxODE5MjdaFw0yNjAyMDMxODI0MjdaMDMxMTAvBgNV
BAMTKEM1NTE4NURGQjgxQzg2NUVGQ0Q0NTgxQTg1RTk2RDRFMTg3NTQwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8Fg8fGnc/5/9j4lVg88dU9gG
B3V7r7k7F4oNy+5O1ULGLL59REOMUF8yw3+gpItozr8fDjNWwwM7gShN1gbLxyq4
vuaEn9WvUnY5UPXRz7IGe8Tz0IiHFB2rLgnOX/LkTZAS0uP6j56SF26o1TsWoz00
zjElBZA2rrXHmnJasB1f3hEjFH4e1D0CcvvQ+tbUiLZpkX0SjZoniNUM5W4jfHl7
cjx56J/HkSKyEWjm2ELjE88vYWBPOfjQPdv3N+/Tze/P2Fdb8ReCn6ItdaEcu8Pb
9R1cSycu92xY1WhWOXkngLu+iFSDJBQbKf/u7+lm/gXQuW0wXVVareX3QbulAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUxVGF37gchl781FgaheltThh1QFMwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMyMzMz
YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAME
gAAjAAAwDQYJKoZIhvcNAQELBQADggEBAA/kYxAKl7DqOkzoor5p1D+qw0m8e96x
GR6jgCu65CpFEKpzGogjU+uePt12qwcDriwISoihIs/EfFKPb8rpRKkcUepCZrZU
fpH3nvwpAvAG6i5a5ybQ9I3UAd5Hurhq9u0AbqjF7hx2WDnAJuhxDSwFBnENY9tl
wJCqeKQhS77PsaRTRMy6PEI1s+zREQjVZxXRwfktB/SI7FGfG1NuVns/sO5sGwBz
gqTlmcMznvxbXVjyT2NwiG7bt0y4jxbL+YxGa662H8EHT6F0na/ja+dIu0ijNSs2
4IIpnPYjrcEKQTBHTNvpqagT9vVXP8nS+rm2kxaxadmXuIO0yhPTLao=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:19:24 2025 by rpki-client