Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          a9m4qMigX/itIuv+SaEM+NU1zWanBHQ1xGg9UhNGUxg=
Subject key identifier:   CC:C4:13:41:78:8F:11:04:06:89:C6:2F:11:D2:22:F3:2B:B2:51:1A
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       6FBEDF833391F50DA7CB9FD444F61585FD72B208
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:45 +0000
ROA not before:           Tue 04 Feb 2025 19:59:45 +0000
ROA not after:            Tue 03 Feb 2026 20:04:45 +0000
asID:                     262191
IP address blocks:        2800:b70:1b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:be:df:83:33:91:f5:0d:a7:cb:9f:d4:44:f6:15:85:fd:72:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:45 2025 GMT
            Not After : Feb  3 20:04:45 2026 GMT
        Subject: CN=CCC41341788F11040689C62F11D222F32BB2511A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:97:c9:0d:63:df:92:d4:65:b6:23:48:16:
                    de:ef:60:a6:ca:68:e5:eb:b7:c8:b2:ee:34:3e:47:
                    58:8e:f2:bc:16:1c:68:1a:03:8a:9e:0f:f5:0d:5a:
                    4d:ba:11:a6:1c:f0:68:84:6b:9d:39:77:4d:06:4a:
                    9d:d0:56:f1:99:2d:d4:8a:13:37:c7:d2:9d:62:ad:
                    80:e7:e3:28:50:03:4e:28:c9:40:28:be:41:1d:b8:
                    6a:1c:5a:2d:10:d9:55:e5:e8:8d:3a:94:02:5e:0d:
                    9b:ba:e3:f0:36:fa:5b:18:9e:8d:6c:60:34:3f:5c:
                    ac:51:e5:f1:3a:24:d6:68:66:13:7d:ab:b7:35:5a:
                    ed:0c:43:53:7a:5c:15:08:30:3d:d9:6a:f7:22:c2:
                    48:af:a2:3a:99:1d:61:a1:b1:e9:b5:8c:f0:9a:71:
                    23:e4:01:25:b8:bb:9e:9c:ad:aa:4a:77:e0:01:f8:
                    41:3d:2b:10:35:6a:f3:5e:0c:4c:4a:f6:ac:cd:b1:
                    d4:9d:04:6a:0d:33:eb:0a:b8:58:4b:bb:51:20:12:
                    8d:03:0c:1a:21:74:91:f3:7c:ae:a9:13:5c:28:52:
                    7d:ec:bf:e4:81:45:e7:eb:24:48:e0:cb:ea:b2:cb:
                    22:83:2d:19:9a:ae:e5:61:e6:e6:42:0e:26:7d:d4:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:13:41:78:8F:11:04:06:89:C6:2F:11:D2:22:F3:2B:B2:51:1A
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:7a:07:47:8b:0a:f2:6d:a7:d5:80:81:5c:fe:49:48:32:
         2a:50:c7:0a:75:b0:32:33:c2:23:db:be:e5:f5:da:c1:9d:75:
         44:4e:ae:89:cc:f5:28:2d:a7:c7:93:18:32:cd:2b:4c:52:12:
         b5:25:7e:55:ae:b0:cf:c4:7f:25:cc:f0:c1:7c:3a:3d:e5:14:
         76:5b:eb:c4:4a:74:47:e5:84:ad:27:cb:fa:6a:e8:64:20:ed:
         bf:7c:30:54:d2:b4:0f:57:f4:1f:43:a9:85:9c:83:87:ac:37:
         2d:de:cd:18:48:00:a2:a4:73:d5:de:8d:13:02:7f:8c:a5:63:
         10:12:f6:04:8a:2e:7c:a4:71:61:2b:f0:6f:3f:a6:e6:e9:28:
         dd:f6:41:74:e0:55:bc:37:24:2c:14:30:66:27:34:a6:23:22:
         32:5d:bd:dc:53:db:06:b5:b4:5a:cf:1d:dc:64:a3:1e:6b:80:
         7c:94:30:f6:05:b2:08:81:18:78:84:7c:66:bb:c5:82:bc:8c:
         5f:59:5a:b6:96:fe:29:54:d9:98:ee:4b:1a:0c:92:3f:47:20:
         6f:6d:7c:e3:b1:85:8c:af:f1:69:74:0e:95:a8:98:37:a7:29:
         71:7f:fa:e2:5d:dc:7f:de:48:1c:8f:31:1b:bb:80:ef:2c:66:
         14:a6:34:8d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUb77fgzOR9Q2ny5/URPYVhf1ysggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTAyMDQxOTU5NDVaFw0yNjAyMDMyMDA0NDVaMDMxMTAvBgNV
BAMTKENDQzQxMzQxNzg4RjExMDQwNjg5QzYyRjExRDIyMkYzMkJCMjUxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZJfJDWPfktRltiNIFt7vYKbK
aOXrt8iy7jQ+R1iO8rwWHGgaA4qeD/UNWk26EaYc8GiEa505d00GSp3QVvGZLdSK
EzfH0p1irYDn4yhQA04oyUAovkEduGocWi0Q2VXl6I06lAJeDZu64/A2+lsYno1s
YDQ/XKxR5fE6JNZoZhN9q7c1Wu0MQ1N6XBUIMD3ZavciwkivojqZHWGhsem1jPCa
cSPkASW4u56crapKd+AB+EE9KxA1avNeDExK9qzNsdSdBGoNM+sKuFhLu1EgEo0D
DBohdJHzfK6pE1woUn3sv+SBRefrJEjgy+qyyyKDLRmaruVh5uZCDiZ91Nc5AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzMQTQXiPEQQGicYvEdIi8yuyURowHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwABswDQYJKoZIhvcNAQELBQADggEBABe8egdHiwrybafVgIFc/klIMipQxwp1
sDIzwiPbvuX12sGddUROronM9Sgtp8eTGDLNK0xSErUlflWusM/EfyXM8MF8Oj3l
FHZb68RKdEflhK0ny/pq6GQg7b98MFTStA9X9B9DqYWcg4esNy3ezRhIAKKkc9Xe
jRMCf4ylYxAS9gSKLnykcWEr8G8/pubpKN32QXTgVbw3JCwUMGYnNKYjIjJdvdxT
2wa1tFrPHdxkox5rgHyUMPYFsgiBGHiEfGa7xYK8jF9ZWraW/ilU2ZjuSxoMkj9H
IG9tfOOxhYyv8Wl0DpWomDenKXF/+uJd3H/eSByPMRu7gO8sZhSmNI0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 08:25:01 2025 by rpki-client