Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa
File:                     323830333a326538303a3a2f33322d3332203d3e203238313030.roa (raw, json)
Hash identifier:          o5cB8Z56COjlhvQ0CmFXwn8Xg7/9kY+qvpl7BEiMpFQ=
Subject key identifier:   A2:EF:9C:69:DA:EA:92:D8:57:8C:9A:88:2E:9E:B8:1D:CD:5C:35:6C
Certificate issuer:       /CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
Certificate serial:       2136C276E0CBCA5542FBD4CD2CBB73A78A55D669
Authority key identifier: 1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:53:09 +0000
ROA not before:           Tue 04 Feb 2025 18:48:09 +0000
ROA not after:            Tue 03 Feb 2026 18:53:09 +0000
asID:                     28100
IP address blocks:        2803:2e80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:36:c2:76:e0:cb:ca:55:42:fb:d4:cd:2c:bb:73:a7:8a:55:d6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
        Validity
            Not Before: Feb  4 18:48:09 2025 GMT
            Not After : Feb  3 18:53:09 2026 GMT
        Subject: CN=A2EF9C69DAEA92D8578C9A882E9EB81DCD5C356C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:5f:c1:9d:c8:a5:35:e4:a5:78:d3:e2:e3:
                    a6:b5:4a:29:db:99:eb:34:b9:e6:39:29:89:06:30:
                    59:40:e9:63:54:29:6e:b8:71:93:fd:b5:ba:2c:c4:
                    d7:64:e6:e8:fb:d8:f8:bd:e3:bc:fc:8a:30:93:27:
                    5a:db:56:b4:cc:2f:48:28:9f:19:5f:62:bc:d7:3a:
                    58:78:42:82:05:a0:8d:23:bc:62:f8:7c:8d:9c:26:
                    19:01:4e:44:55:8b:6f:49:45:5a:74:f0:08:41:99:
                    25:7e:79:ac:c3:48:d4:f5:92:42:12:fd:2c:67:44:
                    33:57:03:df:00:70:6d:48:45:a2:2a:a4:69:b3:1d:
                    dc:a9:86:0b:81:2d:74:d1:3b:6b:ef:5b:25:2d:27:
                    06:ab:b0:56:9f:22:9e:e5:a3:bc:3a:02:f9:2d:98:
                    7b:9d:93:b7:99:34:c6:b3:67:f0:f6:eb:90:7d:25:
                    2c:5a:83:1f:b3:09:14:b4:44:77:3e:a1:7a:0f:fd:
                    8f:c2:ab:c7:f4:fb:02:9c:71:6e:5b:1b:25:a3:e5:
                    6e:67:1d:36:52:24:ef:fc:9c:75:16:da:e6:fa:a6:
                    16:f5:1b:e3:37:19:c8:94:d8:e3:78:39:99:0a:24:
                    1f:68:51:b2:88:57:65:02:42:44:16:5d:5b:00:79:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:9C:69:DA:EA:92:D8:57:8C:9A:88:2E:9E:B8:1D:CD:5C:35:6C
            X509v3 Authority Key Identifier:
                keyid:1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:e5:be:61:44:ab:0e:50:8d:3a:b7:cb:7b:d6:52:1f:ff:
         a8:ff:9c:06:0a:ad:44:28:f7:31:88:5d:cf:c5:3d:8b:0a:a0:
         d9:ba:72:f4:6e:e0:d5:c3:67:9c:76:c3:18:6e:8c:f5:b1:39:
         24:f4:4a:23:e2:51:94:f3:6b:10:ed:ba:0b:55:b9:35:60:22:
         45:1b:3f:95:61:59:26:af:6c:9a:ba:00:6d:c6:55:ee:39:80:
         ff:2b:fd:3f:e1:a2:e1:d1:e2:80:46:b1:cf:4e:94:98:8c:35:
         f3:ec:4c:e8:6b:7b:16:82:79:25:36:72:47:3c:c1:fc:c7:4d:
         9f:2b:7c:ad:bb:8e:33:f8:26:8b:98:c9:62:e7:3b:3a:56:7e:
         7f:b0:f4:24:a1:fa:79:41:95:d3:f9:c6:c6:5b:8d:e1:70:84:
         5c:b0:41:b0:c3:1b:4e:9b:82:00:69:00:b2:97:72:6b:04:df:
         06:2b:72:ba:0f:b7:59:0d:1f:c3:e2:21:a1:c7:4d:aa:10:46:
         0d:20:eb:5c:58:d7:27:77:69:d2:e3:90:92:7e:eb:8a:50:dc:
         5e:e1:0d:8f:1e:1c:77:5b:0b:86:b0:f4:bb:74:c9:74:14:84:
         c0:25:4e:0b:b4:c5:c4:82:d8:72:c2:23:0f:b8:08:0a:da:21:
         cf:7a:e0:d0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUITbCduDLylVC+9TNLLtzp4pV1mkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMwQ0YxQzEwODE4MTc4QjQ5QjQ0RDlBMjZGRkJBRDND
MUY3NTI3MTAeFw0yNTAyMDQxODQ4MDlaFw0yNjAyMDMxODUzMDlaMDMxMTAvBgNV
BAMTKEEyRUY5QzY5REFFQTkyRDg1NzhDOUE4ODJFOUVCODFEQ0Q1QzM1NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpel/BncilNeSleNPi46a1Sinb
mes0ueY5KYkGMFlA6WNUKW64cZP9tbosxNdk5uj72Pi947z8ijCTJ1rbVrTML0go
nxlfYrzXOlh4QoIFoI0jvGL4fI2cJhkBTkRVi29JRVp08AhBmSV+eazDSNT1kkIS
/SxnRDNXA98AcG1IRaIqpGmzHdyphguBLXTRO2vvWyUtJwarsFafIp7lo7w6Avkt
mHudk7eZNMazZ/D265B9JSxagx+zCRS0RHc+oXoP/Y/Cq8f0+wKccW5bGyWj5W5n
HTZSJO/8nHUW2ub6phb1G+M3GciU2ON4OZkKJB9oUbKIV2UCQkQWXVsAeRElAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUou+cadrqkthXjJqILp64Hc1cNWwwHwYDVR0j
BBgwFoAUHAzxwQgYF4tJtE2aJv+608H3UnEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzc1Q0Q1QjAwNkQzRUY1MTMwNzQ2QUE1QkE5QUNGNjRF
RTM5OTNERDM3Rjc3OUZGOUEyNzY4NEI3MTAwOTY0LzAvMUMwQ0YxQzEwODE4MTc4
QjQ5QjQ0RDlBMjZGRkJBRDNDMUY3NTI3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQzBDRjFDMTA4MTgxNzhCNDlC
NDREOUEyNkZGQkFEM0MxRjc1MjcxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM3NUNENUIwMDZEM0VGNTEzMDc0NkFBNUJBOUFDRjY0RUUzOTkzREQz
N0Y3NzlGRjlBMjc2ODRCNzEwMDk2NC8wLzMyMzgzMDMzM2EzMjY1MzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAy6AMA0G
CSqGSIb3DQEBCwUAA4IBAQA+eeW+YUSrDlCNOrfLe9ZSH/+o/5wGCq1EKPcxiF3P
xT2LCqDZunL0buDVw2ecdsMYboz1sTkk9Eoj4lGU82sQ7boLVbk1YCJFGz+VYVkm
r2yaugBtxlXuOYD/K/0/4aLh0eKARrHPTpSYjDXz7Ezoa3sWgnklNnJHPMH8x02f
K3ytu44z+CaLmMli5zs6Vn5/sPQkofp5QZXT+cbGW43hcIRcsEGwwxtOm4IAaQCy
l3JrBN8GK3K6D7dZDR/D4iGhx02qEEYNIOtcWNcnd2nS45CSfuuKUNxe4Q2PHhx3
WwuGsPS7dMl0FITAJU4LtMXEgthywiMPuAgK2iHPeuDQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:30 2025 by rpki-client