Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa
File:                     323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          1vHI2H8mAZBrBvHz6nWWgc5YE66/uZQWh2EBuZoaJjA=
Subject key identifier:   3C:2C:8F:DF:64:C9:A8:34:50:0F:91:21:F4:FE:71:D7:A9:73:05:2C
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       279EEDC6EBF0981F81A686E467343F960C677059
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:35 +0000
ROA not before:           Tue 04 Feb 2025 19:59:35 +0000
ROA not after:            Tue 03 Feb 2026 20:04:35 +0000
asID:                     262191
IP address blocks:        2800:b70:8::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9e:ed:c6:eb:f0:98:1f:81:a6:86:e4:67:34:3f:96:0c:67:70:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:35 2025 GMT
            Not After : Feb  3 20:04:35 2026 GMT
        Subject: CN=3C2C8FDF64C9A834500F9121F4FE71D7A973052C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:4f:9d:0a:7c:a2:d8:1f:d4:83:57:8c:cb:
                    85:d5:e8:18:4c:df:26:4c:72:2e:3f:01:26:40:31:
                    c0:09:6d:dc:7c:3c:27:d6:9a:3c:7c:25:61:e9:70:
                    24:87:1a:53:15:89:d0:2d:43:d7:1f:78:38:16:d2:
                    f7:ff:15:a0:79:ee:1a:b6:ab:59:d6:d5:aa:f3:de:
                    d0:0f:62:fe:cf:dd:0a:3b:75:8b:3d:69:94:64:58:
                    4e:14:df:ca:ba:f7:b9:37:25:93:c8:6b:86:97:c2:
                    01:08:e1:2b:48:9f:ae:68:52:7d:0e:88:4e:5e:ab:
                    33:4c:1c:14:ba:50:b1:2a:b4:32:c5:6a:dd:26:e3:
                    bc:f5:86:cc:2e:0d:4f:0d:de:5c:72:a7:1e:24:92:
                    94:cf:2c:5d:47:2a:a8:1e:9e:c5:57:09:55:0c:4a:
                    82:24:85:0b:9f:21:7e:66:a3:be:0c:a7:a0:91:32:
                    f5:bb:ab:6a:5d:98:02:90:66:b7:6c:3e:a7:2a:2b:
                    fc:64:d1:a8:0e:5a:d6:33:d7:46:7c:72:1b:5c:b3:
                    55:07:3a:d3:cd:5a:bd:fe:b3:c8:ff:74:d1:aa:f8:
                    fa:86:6c:dc:89:1a:6b:fa:48:f9:0b:6e:81:49:77:
                    12:f6:87:e7:95:43:c2:65:79:a9:77:48:b9:f2:3b:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:8F:DF:64:C9:A8:34:50:0F:91:21:F4:FE:71:D7:A9:73:05:2C
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:02:ea:d2:2c:4d:ef:8e:21:1f:ef:f8:7a:b6:16:41:07:
         73:30:e1:01:28:14:65:3a:9f:eb:9c:55:5e:cb:0e:8d:ec:31:
         3c:5f:ce:b5:b7:61:93:7d:cb:5e:07:25:73:d0:88:bb:eb:51:
         cc:9b:18:4a:e5:da:3e:07:6b:07:ea:e6:88:dd:af:05:f1:b9:
         c6:37:a4:a9:46:0f:09:a6:6a:ba:24:14:7a:88:ee:ad:32:90:
         f6:db:4a:ef:46:39:c6:87:e7:26:c7:e4:a2:0c:a9:cd:34:ff:
         1f:59:c3:e1:c4:2d:04:2b:82:20:bb:25:53:f6:8e:6d:86:ec:
         6e:b5:ca:3a:19:eb:cb:eb:86:ee:a5:c8:c6:44:e9:15:a2:3e:
         a0:a8:10:54:d2:a6:24:28:26:07:71:89:a2:e0:16:ad:1f:08:
         84:e2:93:5b:d8:22:36:9c:32:38:e1:c3:9e:3d:52:ff:9a:36:
         d7:f4:c2:df:84:d3:c3:71:6b:b7:4c:ed:5f:f6:e0:2f:6d:7c:
         c0:f7:0a:94:ea:19:ef:ff:6a:f8:7a:d8:87:bd:82:08:4a:88:
         df:26:31:49:df:6b:6f:69:64:f9:4a:87:e5:0d:67:7a:08:b2:
         a7:0e:ff:eb:46:e6:b9:eb:3d:79:cb:8c:58:12:91:27:c1:c9:
         ae:6f:db:bb
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUJ57txuvwmB+BpobkZzQ/lgxncFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTAyMDQxOTU5MzVaFw0yNjAyMDMyMDA0MzVaMDMxMTAvBgNV
BAMTKDNDMkM4RkRGNjRDOUE4MzQ1MDBGOTEyMUY0RkU3MUQ3QTk3MzA1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcU+dCnyi2B/Ug1eMy4XV6BhM
3yZMci4/ASZAMcAJbdx8PCfWmjx8JWHpcCSHGlMVidAtQ9cfeDgW0vf/FaB57hq2
q1nW1arz3tAPYv7P3Qo7dYs9aZRkWE4U38q697k3JZPIa4aXwgEI4StIn65oUn0O
iE5eqzNMHBS6ULEqtDLFat0m47z1hswuDU8N3lxypx4kkpTPLF1HKqgensVXCVUM
SoIkhQufIX5mo74Mp6CRMvW7q2pdmAKQZrdsPqcqK/xk0agOWtYz10Z8chtcs1UH
OtPNWr3+s8j/dNGq+PqGbNyJGmv6SPkLboFJdxL2h+eVQ8Jleal3SLnyO7shAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUPCyP32TJqDRQD5Eh9P5x16lzBSwwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTM4M2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNjMyMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAAL
cAAIMA0GCSqGSIb3DQEBCwUAA4IBAQAhxQLq0ixN744hH+/4erYWQQdzMOEBKBRl
Op/rnFVeyw6N7DE8X861t2GTfcteByVz0Ii761HMmxhK5do+B2sH6uaI3a8F8bnG
N6SpRg8Jpmq6JBR6iO6tMpD220rvRjnGh+cmx+SiDKnNNP8fWcPhxC0EK4IguyVT
9o5thuxutco6GevL64bupcjGROkVoj6gqBBU0qYkKCYHcYmi4BatHwiE4pNb2CI2
nDI44cOePVL/mjbX9MLfhNPDcWu3TO1f9uAvbXzA9wqU6hnv/2r4etiHvYIISojf
JjFJ32tvaWT5SoflDWd6CLKnDv/rRua56z15y4xYEpEnwcmub9u7
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:05 2025 by rpki-client