Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a653a3a2f34372d3438203d3e20323632313931.roa
File:                     323830303a6237303a653a3a2f34372d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          8k9UhDLb0mrdnvqxny0nERzL03ndHaNDRpWo9U/y0Vo=
Subject key identifier:   03:74:94:29:15:8A:4C:83:D9:47:A9:0D:42:10:A3:CB:AD:8A:73:F9
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       174D4913C54929233AAD72AF4B6D71FF5929F3D0
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a653a3a2f34372d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:44 +0000
ROA not before:           Tue 04 Feb 2025 19:59:44 +0000
ROA not after:            Tue 03 Feb 2026 20:04:44 +0000
asID:                     262191
IP address blocks:        2800:b70:e::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4d:49:13:c5:49:29:23:3a:ad:72:af:4b:6d:71:ff:59:29:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:44 2025 GMT
            Not After : Feb  3 20:04:44 2026 GMT
        Subject: CN=03749429158A4C83D947A90D4210A3CBAD8A73F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:18:4c:18:09:22:e0:33:dc:63:04:ef:d4:
                    67:5a:f0:7f:3f:53:21:82:f3:4e:13:4a:28:6b:43:
                    2a:94:94:d1:be:e5:63:0b:82:18:7c:fb:73:6d:35:
                    af:0c:6d:5f:13:fd:c5:3a:2b:de:45:94:5a:d7:57:
                    86:de:5b:09:0b:26:53:d1:85:96:2c:83:7a:cb:e0:
                    b0:65:31:9f:00:80:07:f0:bb:01:f0:a4:97:ad:ab:
                    2e:c6:0e:61:22:27:c3:26:f6:42:c9:8e:8c:ff:0b:
                    c8:ba:67:5f:e3:83:8f:e6:a4:f3:28:8c:2c:ec:1b:
                    82:79:e2:e4:5d:d3:57:36:c5:8e:ae:f0:9b:4d:c4:
                    c6:68:c8:96:f4:24:ae:34:4b:21:c3:52:83:f9:2f:
                    5f:b5:8d:22:c5:89:f7:70:cc:eb:e7:9b:a2:58:3b:
                    a3:4b:db:cb:d6:e0:63:d2:c0:56:62:35:dc:a9:6a:
                    0f:93:80:5d:b8:cf:53:a7:fb:c7:e4:40:9f:1f:e8:
                    b3:5f:71:f6:43:cc:11:cf:5c:8e:13:7c:eb:d9:43:
                    16:ef:2f:1e:21:6e:7f:b0:34:d6:79:93:15:24:ec:
                    5c:d7:87:30:4e:a8:76:c9:ad:57:68:92:ad:50:63:
                    d7:a3:5a:4a:77:45:95:7a:2f:94:6d:8a:03:b2:98:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:74:94:29:15:8A:4C:83:D9:47:A9:0D:42:10:A3:CB:AD:8A:73:F9
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a653a3a2f34372d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         6f:b9:34:a2:9b:89:e4:97:6c:4d:6e:76:db:ff:00:8b:87:4c:
         95:be:30:6d:fd:4f:c6:d2:a2:5d:69:51:f8:70:53:7e:13:26:
         8e:da:a7:26:94:96:09:50:d7:c4:16:2d:6d:6c:16:49:38:84:
         06:2a:d2:26:3e:90:68:ba:d6:de:34:cb:44:d6:34:cd:13:ca:
         2d:0e:e6:d0:16:b3:71:3b:43:11:b7:78:07:fd:dc:30:ac:d9:
         57:3b:4d:b3:47:e3:38:b2:29:a9:6e:f2:06:8b:d8:27:05:b7:
         83:18:95:02:77:66:9a:ed:e8:bc:12:35:b8:58:ae:99:e0:da:
         aa:06:28:ec:f2:2b:10:75:94:9d:c8:db:87:54:39:8b:2a:01:
         04:34:36:23:25:99:ca:e9:cb:1b:95:3a:6c:2a:33:4f:d9:7e:
         6d:a3:09:f7:c5:1b:46:b6:49:05:22:fc:aa:4d:75:06:6f:26:
         36:84:51:1d:e2:b3:cb:b1:1c:8f:8e:13:04:54:0d:22:b9:50:
         cf:1f:94:60:fe:b9:d4:ce:72:ec:99:f4:87:4b:f7:ec:e6:3c:
         03:d2:71:18:43:56:c1:f4:21:14:87:9f:3d:68:29:bf:90:c8:
         ff:cf:09:49:b5:a0:94:a3:33:b0:bb:9e:10:1a:d3:20:1f:6a:
         e4:ef:a9:3a
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUF01JE8VJKSM6rXKvS21x/1kp89AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTAyMDQxOTU5NDRaFw0yNjAyMDMyMDA0NDRaMDMxMTAvBgNV
BAMTKDAzNzQ5NDI5MTU4QTRDODNEOTQ3QTkwRDQyMTBBM0NCQUQ4QTczRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQUhhMGAki4DPcYwTv1Gda8H8/
UyGC804TSihrQyqUlNG+5WMLghh8+3NtNa8MbV8T/cU6K95FlFrXV4beWwkLJlPR
hZYsg3rL4LBlMZ8AgAfwuwHwpJetqy7GDmEiJ8Mm9kLJjoz/C8i6Z1/jg4/mpPMo
jCzsG4J54uRd01c2xY6u8JtNxMZoyJb0JK40SyHDUoP5L1+1jSLFifdwzOvnm6JY
O6NL28vW4GPSwFZiNdypag+TgF24z1On+8fkQJ8f6LNfcfZDzBHPXI4TfOvZQxbv
Lx4hbn+wNNZ5kxUk7FzXhzBOqHbJrVdokq1QY9ejWkp3RZV6L5RtigOymFD7AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUA3SUKRWKTIPZR6kNQhCjy62Kc/kwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTY1M2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNjMyMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAAL
cAAOMA0GCSqGSIb3DQEBCwUAA4IBAQBvuTSim4nkl2xNbnbb/wCLh0yVvjBt/U/G
0qJdaVH4cFN+EyaO2qcmlJYJUNfEFi1tbBZJOIQGKtImPpBoutbeNMtE1jTNE8ot
DubQFrNxO0MRt3gH/dwwrNlXO02zR+M4simpbvIGi9gnBbeDGJUCd2aa7ei8EjW4
WK6Z4NqqBijs8isQdZSdyNuHVDmLKgEENDYjJZnK6csblTpsKjNP2X5town3xRtG
tkkFIvyqTXUGbyY2hFEd4rPLsRyPjhMEVA0iuVDPH5Rg/rnUznLsmfSHS/fs5jwD
0nEYQ1bB9CEUh589aCm/kMj/zwlJtaCUozOwu54QGtMgH2rk76k6
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:48:47 2025 by rpki-client