Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa
File:                     323830333a646536303a3a2f33322d3438203d3e20323637393234.roa (raw, json)
Hash identifier:          QZyRFbtl0zxrpWGiFQmj/Kve6Ulxsh7k9zxrRQCgA5M=
Subject key identifier:   FA:BB:1B:52:EA:6A:53:4F:08:81:A0:0B:B3:BD:AF:4E:55:48:5B:71
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       425FAD419D8D9461423FB52A1E3FF8F046483A02
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa
Signing time:             Tue 04 Feb 2025 18:09:56 +0000
ROA not before:           Tue 04 Feb 2025 18:04:56 +0000
ROA not after:            Tue 03 Feb 2026 18:09:56 +0000
asID:                     267924
IP address blocks:        2803:de60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5f:ad:41:9d:8d:94:61:42:3f:b5:2a:1e:3f:f8:f0:46:48:3a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Feb  4 18:04:56 2025 GMT
            Not After : Feb  3 18:09:56 2026 GMT
        Subject: CN=FABB1B52EA6A534F0881A00BB3BDAF4E55485B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:d5:ed:d3:aa:1e:71:eb:da:af:8a:78:17:
                    d1:3f:dc:28:58:67:cd:27:d9:02:3f:38:89:1f:c0:
                    74:0d:2e:50:75:0b:0c:80:65:77:44:4e:fb:5b:48:
                    b5:1b:65:34:3a:2b:fb:e8:e0:12:d4:bd:52:0c:f3:
                    a3:c5:75:2a:14:5b:d3:fd:31:76:c3:82:ab:3a:92:
                    71:e7:2f:a4:53:fd:ca:0c:30:94:87:84:51:f4:91:
                    d7:3d:8f:9d:39:37:89:f2:c6:01:19:35:9b:4b:8f:
                    a9:85:c4:6b:9d:a7:ce:60:f3:de:64:4a:12:a9:30:
                    9b:69:bb:ad:43:55:54:ff:3a:61:b6:d4:d3:51:b1:
                    7c:06:50:96:43:c7:46:fa:1e:82:e7:82:5a:e5:fb:
                    d3:f7:96:02:d4:85:de:b4:8c:f2:dc:21:64:51:d1:
                    1e:ca:e1:87:d8:c3:38:19:8e:da:3d:b0:8c:7d:46:
                    ff:6f:f1:d1:65:79:d9:0b:bc:e9:91:0e:59:72:80:
                    b1:5f:c2:06:28:f2:c6:d5:a1:c3:17:2d:1b:43:65:
                    ed:b0:ac:3c:25:06:64:d1:4f:46:5e:91:ec:19:da:
                    96:df:aa:b0:c3:2d:db:35:67:f9:9a:07:8c:52:5e:
                    65:80:c7:9d:e9:2e:35:02:63:f4:5d:fd:36:f7:85:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BB:1B:52:EA:6A:53:4F:08:81:A0:0B:B3:BD:AF:4E:55:48:5B:71
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de60::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:78:da:19:65:f8:41:77:52:d7:50:7c:40:5b:54:0d:b8:6e:
         4c:ec:f2:98:7f:c0:57:e6:6c:9d:a4:31:ae:35:3a:10:cf:b1:
         93:8f:31:ff:47:58:f9:98:fb:07:21:62:38:82:01:7e:fe:80:
         cd:4f:31:e4:5b:d3:9b:75:25:8e:1a:fd:e6:c4:12:7a:1a:a5:
         dd:b6:ac:97:1a:c1:63:67:e4:cf:b5:8e:9e:a0:8d:17:22:16:
         f4:59:ef:cd:1b:c4:2b:02:47:da:ce:21:74:8e:84:9d:7d:54:
         c7:35:64:74:7a:b2:d9:76:9a:6a:4d:08:98:05:82:f9:8f:7c:
         39:21:24:29:e7:fb:f4:34:2f:fe:bc:ac:d4:3b:22:66:ee:9c:
         60:5a:80:7c:6d:de:2b:d4:b7:37:8b:74:0e:b3:02:1f:69:c5:
         d1:3c:d5:78:77:b5:02:0b:b1:5b:2d:a2:eb:9b:02:2d:a6:31:
         fd:cc:ba:08:2e:40:47:bf:c9:aa:67:66:77:fc:47:9a:02:32:
         cf:c8:3e:db:a4:28:0e:9d:29:2a:ea:a8:32:17:b0:29:4a:6f:
         44:26:ef:2e:bb:0f:17:b0:f9:e7:95:ae:70:ff:21:b1:c7:28:
         5a:53:53:0b:3b:70:99:68:c5:dc:9c:e4:bc:5a:cf:43:49:17:
         10:aa:14:bd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQl+tQZ2NlGFCP7UqHj/48EZIOgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ1Q0VGNDA2QTcyNDMzNDQ1MTQ3RkVCMzREODI2ODIz
NDVBRjU2MzAeFw0yNTAyMDQxODA0NTZaFw0yNjAyMDMxODA5NTZaMDMxMTAvBgNV
BAMTKEZBQkIxQjUyRUE2QTUzNEYwODgxQTAwQkIzQkRBRjRFNTU0ODVCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/tXt06oecevar4p4F9E/3ChY
Z80n2QI/OIkfwHQNLlB1CwyAZXdETvtbSLUbZTQ6K/vo4BLUvVIM86PFdSoUW9P9
MXbDgqs6knHnL6RT/coMMJSHhFH0kdc9j505N4nyxgEZNZtLj6mFxGudp85g895k
ShKpMJtpu61DVVT/OmG21NNRsXwGUJZDx0b6HoLnglrl+9P3lgLUhd60jPLcIWRR
0R7K4YfYwzgZjto9sIx9Rv9v8dFledkLvOmRDllygLFfwgYo8sbVocMXLRtDZe2w
rDwlBmTRT0ZekewZ2pbfqrDDLds1Z/maB4xSXmWAx53pLjUCY/Rd/Tb3he0HAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU+rsbUupqU08IgaALs72vTlVIW3EwHwYDVR0j
BBgwFoAUHVzvQGpyQzRFFH/rNNgmgjRa9WMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMjQ2NTBBQTg2OTk1OUU1MDEwMUYwMDc0NjNFOEEwNENE
ODIxODdEMzQ4N0Q2RTk0NTM2QTRFODkyNkIzMEJCLzAvMUQ1Q0VGNDA2QTcyNDMz
NDQ1MTQ3RkVCMzREODI2ODIzNDVBRjU2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDVDRUY0MDZBNzI0MzM0NDUx
NDdGRUIzNEQ4MjY4MjM0NUFGNTYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTI0NjUwQUE4Njk5NTlFNTAxMDFGMDA3NDYzRThBMDRDRDgyMTg3RDM0
ODdENkU5NDUzNkE0RTg5MjZCMzBCQi8wLzMyMzgzMDMzM2E2NDY1MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM5MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3mAw
DQYJKoZIhvcNAQELBQADggEBAAB42hll+EF3UtdQfEBbVA24bkzs8ph/wFfmbJ2k
Ma41OhDPsZOPMf9HWPmY+wchYjiCAX7+gM1PMeRb05t1JY4a/ebEEnoapd22rJca
wWNn5M+1jp6gjRciFvRZ780bxCsCR9rOIXSOhJ19VMc1ZHR6stl2mmpNCJgFgvmP
fDkhJCnn+/Q0L/68rNQ7ImbunGBagHxt3ivUtzeLdA6zAh9pxdE81Xh3tQILsVst
ouubAi2mMf3MugguQEe/yapnZnf8R5oCMs/IPtukKA6dKSrqqDIXsClKb0Qm7y67
Dxew+eeVrnD/IbHHKFpTUws7cJloxdyc5Lxaz0NJFxCqFL0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:43 2025 by rpki-client