Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa
File:                     323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa (raw, json)
Hash identifier:          60G0zugTY2flWDw6UYO3MzaplS2g35+UYNsIPuLIVyA=
Subject key identifier:   79:D2:2B:84:38:9C:9A:DD:72:1C:32:4B:90:C0:CB:15:92:09:AA:E3
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       204B5501E93DBE3712FFCB1F9CBAF32BBF332F35
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa
Signing time:             Tue 04 Feb 2025 18:24:24 +0000
ROA not before:           Tue 04 Feb 2025 18:19:24 +0000
ROA not after:            Tue 03 Feb 2026 18:24:24 +0000
asID:                     52458
IP address blocks:        2803:480:9::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:55:01:e9:3d:be:37:12:ff:cb:1f:9c:ba:f3:2b:bf:33:2f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Feb  4 18:19:24 2025 GMT
            Not After : Feb  3 18:24:24 2026 GMT
        Subject: CN=79D22B84389C9ADD721C324B90C0CB159209AAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:07:d9:9d:11:ca:38:a1:8e:b1:0f:80:7a:
                    a7:db:0a:a2:cd:6a:b0:01:c1:07:79:34:cb:be:d8:
                    7f:5e:a5:b7:c0:4f:28:3a:28:ff:8e:49:89:97:a4:
                    b8:bc:d2:36:1a:43:28:36:ef:be:e4:88:f4:21:3a:
                    d2:16:8d:a5:9b:20:cb:af:8b:a3:91:ac:8b:b4:65:
                    a9:6e:0f:ae:45:18:5c:e9:00:b4:3c:55:1c:69:b9:
                    01:7a:03:6b:c6:be:34:fa:cf:7b:5a:7b:16:1f:eb:
                    64:af:88:de:41:25:e7:a8:0e:8b:41:5b:de:19:24:
                    72:af:26:e5:46:5f:96:99:bc:47:a2:54:4b:31:13:
                    45:f2:4d:fa:fa:b0:9a:11:f5:58:23:ac:dc:97:ac:
                    38:12:8c:d6:70:4a:3d:12:21:c4:ca:8b:93:f0:53:
                    a9:1a:9e:a5:8c:6b:4d:11:56:c6:17:8c:7f:14:ea:
                    a3:99:55:3b:c5:d6:45:de:6b:19:38:d5:75:29:31:
                    47:39:16:ef:6d:4a:65:d2:a2:78:f9:f3:4e:60:72:
                    36:bb:f2:b3:6d:28:d6:fe:ba:85:79:d4:c7:21:72:
                    42:88:f3:d3:4a:da:46:80:a6:71:22:37:55:6a:76:
                    5f:48:be:26:95:53:82:00:d9:ae:3b:44:86:e1:24:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:2B:84:38:9C:9A:DD:72:1C:32:4B:90:C0:CB:15:92:09:AA:E3
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:23:11:51:f8:aa:70:5b:e4:b0:1f:38:90:1d:bc:9f:b5:
         55:80:c3:ce:6d:27:b2:2b:2a:3d:4a:33:e0:ac:06:45:56:16:
         9e:5a:02:f7:9e:86:82:06:1b:b9:54:5e:9b:5b:87:02:e7:68:
         94:94:3d:26:4a:4c:3b:8e:02:0c:a8:2e:2f:f9:fb:d8:0b:01:
         3a:43:c1:04:82:c9:d7:36:79:9a:9f:63:52:f8:67:13:0a:a1:
         83:fe:1c:5d:15:11:31:19:2f:26:24:d7:da:f0:3a:70:93:72:
         c5:25:c6:34:cc:e9:14:35:24:35:f9:2b:a8:82:b6:76:1f:2c:
         bf:c3:a8:7b:db:8d:2d:99:4d:a3:41:f3:c5:76:aa:c3:31:b0:
         1a:1c:04:4c:33:61:be:76:96:44:fb:52:19:48:ae:0c:f0:99:
         9e:9d:5f:17:54:93:8e:5c:d7:b6:36:37:f1:09:7d:8f:8d:30:
         36:dc:41:5f:81:50:10:b4:e7:27:42:c7:6c:0d:f4:67:d6:c8:
         61:86:5e:60:21:96:53:91:85:52:5b:93:51:a4:3a:4d:f4:93:
         0e:eb:10:85:f7:37:ff:6a:10:3d:27:b2:8c:07:9a:bd:74:fb:
         74:0a:30:ec:7f:00:aa:59:4a:2b:a8:23:fa:8e:5d:cc:e8:51:
         85:10:e0:c6
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUIEtVAek9vjcS/8sfnLrzK78zLzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNTAyMDQxODE5MjRaFw0yNjAyMDMxODI0MjRaMDMxMTAvBgNV
BAMTKDc5RDIyQjg0Mzg5QzlBREQ3MjFDMzI0QjkwQzBDQjE1OTIwOUFBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqQfZnRHKOKGOsQ+AeqfbCqLN
arABwQd5NMu+2H9epbfATyg6KP+OSYmXpLi80jYaQyg2777kiPQhOtIWjaWbIMuv
i6ORrIu0ZaluD65FGFzpALQ8VRxpuQF6A2vGvjT6z3taexYf62SviN5BJeeoDotB
W94ZJHKvJuVGX5aZvEeiVEsxE0XyTfr6sJoR9VgjrNyXrDgSjNZwSj0SIcTKi5Pw
U6kanqWMa00RVsYXjH8U6qOZVTvF1kXeaxk41XUpMUc5Fu9tSmXSonj5805gcja7
8rNtKNb+uoV51MchckKI89NK2kaApnEiN1Vqdl9IviaVU4IA2a47RIbhJGLlAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUedIrhDicmt1yHDJLkMDLFZIJquMwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTM5M2Ez
YTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzMjM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDBIAA
CTANBgkqhkiG9w0BAQsFAAOCAQEAIuMjEVH4qnBb5LAfOJAdvJ+1VYDDzm0nsisq
PUoz4KwGRVYWnloC956GggYbuVRem1uHAudolJQ9JkpMO44CDKguL/n72AsBOkPB
BILJ1zZ5mp9jUvhnEwqhg/4cXRURMRkvJiTX2vA6cJNyxSXGNMzpFDUkNfkrqIK2
dh8sv8Ooe9uNLZlNo0HzxXaqwzGwGhwETDNhvnaWRPtSGUiuDPCZnp1fF1STjlzX
tjY38Ql9j40wNtxBX4FQELTnJ0LHbA30Z9bIYYZeYCGWU5GFUluTUaQ6TfSTDusQ
hfc3/2oQPSeyjAeavXT7dAow7H8AqllKK6gj+o5dzOhRhRDgxg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:25 2025 by rpki-client