Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/323830333a386131303a3a2f33322d3438203d3e203634313230.roa
File:                     323830333a386131303a3a2f33322d3438203d3e203634313230.roa (raw, json)
Hash identifier:          qU1tDCreH+NqZUjYuGkZblNpQCcvWVUXAHNZkD1Rz00=
Subject key identifier:   DF:BF:2E:41:B4:EE:C1:D5:BF:E8:B0:4D:82:68:BB:5F:F2:2D:0A:B8
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       419B703FA073EF4420587BCE4A63A1878E16A445
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/323830333a386131303a3a2f33322d3438203d3e203634313230.roa
Signing time:             Tue 04 Feb 2025 18:03:46 +0000
ROA not before:           Tue 04 Feb 2025 17:58:46 +0000
ROA not after:            Tue 03 Feb 2026 18:03:46 +0000
asID:                     64120
IP address blocks:        2803:8a10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:70:3f:a0:73:ef:44:20:58:7b:ce:4a:63:a1:87:8e:16:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Feb  4 17:58:46 2025 GMT
            Not After : Feb  3 18:03:46 2026 GMT
        Subject: CN=DFBF2E41B4EEC1D5BFE8B04D8268BB5FF22D0AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:6e:03:71:38:11:26:49:3b:58:1d:2e:bc:
                    2e:7d:cd:f8:4a:63:ac:ed:27:2e:0e:bf:07:90:e5:
                    12:99:a4:37:1c:97:71:19:bb:e2:36:ce:de:e6:89:
                    48:60:90:46:6f:61:57:6a:78:c9:5e:8e:42:b4:6b:
                    08:83:44:06:0c:e8:63:7b:d3:7e:e0:b1:5a:26:2e:
                    4a:29:ec:aa:68:e8:1e:05:50:45:a1:f0:3b:d3:aa:
                    e3:d6:90:95:13:e4:98:3a:77:77:e9:83:11:f3:24:
                    e8:da:a6:58:58:6f:5d:d1:d9:14:39:bc:e1:aa:1d:
                    a2:28:00:e1:3b:ff:fe:a5:f6:36:5f:9c:bb:64:95:
                    6c:3f:8b:a3:65:ce:a6:02:28:24:3a:ab:b9:d5:6f:
                    92:ed:2b:7a:eb:66:52:1e:19:90:2a:99:89:b2:6a:
                    08:46:72:51:9e:d9:3b:55:02:95:e8:f1:e0:1c:ad:
                    95:95:dd:74:84:f8:0f:b7:66:1a:5f:48:d7:45:fc:
                    b8:2d:56:37:ec:c1:c1:f4:e3:d0:65:b2:5f:83:4d:
                    66:a4:91:5b:b6:79:28:fe:d1:d4:1b:ae:fb:03:4f:
                    26:69:e5:24:aa:ed:25:23:bf:33:fb:24:35:90:e3:
                    09:13:b0:6a:f2:e0:f3:9c:9a:f9:a1:d8:2c:cf:8d:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:2E:41:B4:EE:C1:D5:BF:E8:B0:4D:82:68:BB:5F:F2:2D:0A:B8
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/323830333a386131303a3a2f33322d3438203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:12:95:a1:65:7f:af:7e:c1:6d:72:e2:48:57:63:75:b7:d0:
         7d:36:bb:f9:28:05:38:34:6e:3d:4a:27:21:35:2f:90:bf:c7:
         3d:ca:f2:89:c0:57:13:9b:8a:d1:af:27:60:7c:df:be:0b:ae:
         9a:da:3d:75:80:e5:7f:9d:0f:04:96:76:40:80:0c:8e:04:68:
         09:43:c8:86:20:37:bd:a7:9e:e9:4b:e7:ea:bc:f1:aa:9e:0c:
         a4:a1:f1:08:33:3a:fd:11:83:0f:85:ab:cc:40:fa:51:d9:18:
         1c:d2:43:79:c8:31:8b:83:12:75:7b:b6:bf:fd:34:88:19:45:
         b9:e9:9a:c6:e4:64:b5:39:9b:04:f3:93:83:c3:de:32:cf:93:
         81:16:49:51:60:d6:d9:cd:dd:07:a4:21:e1:3b:1c:96:64:ce:
         f9:2f:5e:3e:b4:0e:ba:f9:79:a8:7e:20:cf:7f:8c:49:da:09:
         82:67:73:b2:f4:a8:05:dd:fe:fe:cd:20:4a:0b:90:ba:b4:5e:
         70:04:7d:ca:d6:bd:1f:05:04:06:31:e4:66:12:4d:b7:2d:86:
         a9:4e:ee:a1:a5:7e:80:57:ea:74:c9:54:a2:93:8f:20:df:9b:
         99:c1:a3:c3:b6:b5:75:74:38:8f:e4:83:a1:cd:84:3c:5e:a2:
         88:7c:e6:9b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQZtwP6Bz70QgWHvOSmOhh44WpEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNTAyMDQxNzU4NDZaFw0yNjAyMDMxODAzNDZaMDMxMTAvBgNV
BAMTKERGQkYyRTQxQjRFRUMxRDVCRkU4QjA0RDgyNjhCQjVGRjIyRDBBQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU1m4DcTgRJkk7WB0uvC59zfhK
Y6ztJy4OvweQ5RKZpDccl3EZu+I2zt7miUhgkEZvYVdqeMlejkK0awiDRAYM6GN7
037gsVomLkop7Kpo6B4FUEWh8DvTquPWkJUT5Jg6d3fpgxHzJOjaplhYb13R2RQ5
vOGqHaIoAOE7//6l9jZfnLtklWw/i6NlzqYCKCQ6q7nVb5LtK3rrZlIeGZAqmYmy
aghGclGe2TtVApXo8eAcrZWV3XSE+A+3ZhpfSNdF/LgtVjfswcH049Blsl+DTWak
kVu2eSj+0dQbrvsDTyZp5SSq7SUjvzP7JDWQ4wkTsGry4POcmvmh2CzPjaxPAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU378uQbTuwdW/6LBNgmi7X/ItCrgwHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzgzMDMzM2EzODYxMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzQzMTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4oQMA0G
CSqGSIb3DQEBCwUAA4IBAQCWEpWhZX+vfsFtcuJIV2N1t9B9Nrv5KAU4NG49Sich
NS+Qv8c9yvKJwFcTm4rRrydgfN++C66a2j11gOV/nQ8ElnZAgAyOBGgJQ8iGIDe9
p57pS+fqvPGqngykofEIMzr9EYMPhavMQPpR2Rgc0kN5yDGLgxJ1e7a//TSIGUW5
6ZrG5GS1OZsE85ODw94yz5OBFklRYNbZzd0HpCHhOxyWZM75L14+tA66+XmofiDP
f4xJ2gmCZ3Oy9KgF3f7+zSBKC5C6tF5wBH3K1r0fBQQGMeRmEk23LYapTu6hpX6A
V+p0yVSik48g35uZwaPDtrV1dDiP5IOhzYQ8XqKIfOab
-----END CERTIFICATE-----