Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa
File:                     323830333a643038303a3a2f33322d3634203d3e203237393630.roa (raw, json)
Hash identifier:          oKAeg82/e7+kuaqWv1DklLAM+E7idmFEPoRR1ZqiRe8=
Subject key identifier:   38:D4:FA:7D:7C:63:6F:EE:6D:53:96:F3:50:B2:8C:01:5C:1E:E3:27
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       5F22AD87A5012FE84361F1FF28F4C2F1FD78840F
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa
Signing time:             Tue 04 Feb 2025 18:31:04 +0000
ROA not before:           Tue 04 Feb 2025 18:26:04 +0000
ROA not after:            Tue 03 Feb 2026 18:31:04 +0000
asID:                     27960
IP address blocks:        2803:d080::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:22:ad:87:a5:01:2f:e8:43:61:f1:ff:28:f4:c2:f1:fd:78:84:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Feb  4 18:26:04 2025 GMT
            Not After : Feb  3 18:31:04 2026 GMT
        Subject: CN=38D4FA7D7C636FEE6D5396F350B28C015C1EE327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:98:ce:98:77:df:98:97:26:2a:d7:63:ad:
                    e9:4e:44:92:8e:fd:9c:09:54:c9:5a:6a:73:4e:a2:
                    5c:77:d2:40:14:2a:48:a8:e2:37:76:a8:30:ba:64:
                    1c:e4:e5:41:9d:af:49:2e:5f:6c:a2:f7:75:07:f1:
                    1f:28:27:c9:9e:d7:ba:26:5f:36:01:7e:e8:2b:72:
                    57:3e:b2:f1:1a:e2:c9:87:3c:e5:90:bd:9c:0e:df:
                    d3:9d:52:83:2a:3a:ef:1f:65:c1:51:fb:ab:e2:8d:
                    1e:7b:1f:89:67:05:f9:1e:4e:0d:c5:4b:a9:0a:bf:
                    33:87:63:0f:5f:61:4f:7f:08:34:db:f2:88:7d:8a:
                    94:de:df:7c:f1:10:76:61:0f:2a:68:ac:9d:2e:15:
                    16:68:5a:35:b0:13:e9:2e:87:56:94:be:0b:da:db:
                    cd:48:30:4b:c4:f3:8e:c9:53:20:09:b3:38:25:6a:
                    f1:f6:e7:b4:6a:33:69:dc:b5:02:43:1f:aa:38:63:
                    8d:b6:3d:d7:21:40:12:d9:71:ec:41:66:3c:7f:d1:
                    95:19:da:c2:ba:47:f4:ab:73:d9:bb:4d:9f:57:55:
                    dc:78:dc:01:32:6c:6a:58:7c:50:65:e3:bd:05:bb:
                    af:af:fd:2f:e8:a2:4c:dc:90:98:75:94:3f:e8:86:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:FA:7D:7C:63:6F:EE:6D:53:96:F3:50:B2:8C:01:5C:1E:E3:27
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2d:95:37:f0:da:cf:b3:3e:fc:7e:96:6e:f5:1d:91:ab:b3:
         e9:ef:09:bd:ef:47:0a:ac:7b:24:77:58:18:5a:c3:36:0b:50:
         ec:47:1d:53:07:ac:fb:fe:f4:f2:bd:df:04:4e:12:8c:ee:8d:
         9f:f3:f1:32:a9:f6:27:ef:ed:17:37:ef:1b:5f:fa:a6:e5:05:
         e7:45:46:e4:7c:ce:36:f1:11:6f:e1:0d:04:11:01:8f:b9:40:
         0d:5e:28:01:7e:4b:04:dc:3f:d6:1c:4d:a6:9a:9e:95:6f:a9:
         c0:24:47:f7:8f:01:72:38:f9:a7:8b:9f:3c:e4:e6:3b:3e:4c:
         6c:b7:52:3e:3c:81:61:62:61:48:44:34:92:6e:7d:94:ee:b1:
         08:17:de:dc:25:4c:3c:4b:74:46:ea:6d:36:d0:66:3c:8e:35:
         53:3e:4d:8f:30:05:5d:cd:1c:12:9d:49:c1:d5:4d:29:fa:bc:
         de:9b:07:66:66:89:9c:18:f2:5f:d8:bf:9b:d0:7f:81:e2:95:
         f5:10:be:77:00:9f:c0:ba:ff:eb:0c:4a:43:81:db:bb:e8:c7:
         9f:42:76:bf:85:01:ab:42:73:b0:0b:2b:d7:7f:05:4a:73:3d:
         46:fe:68:c1:34:5a:17:04:c7:1c:7d:bf:6c:70:43:be:9f:5d:
         e6:8d:86:57
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUXyKth6UBL+hDYfH/KPTC8f14hA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNGMkYwRTQ4RTBB
NDYzMzY2NjAeFw0yNTAyMDQxODI2MDRaFw0yNjAyMDMxODMxMDRaMDMxMTAvBgNV
BAMTKDM4RDRGQTdEN0M2MzZGRUU2RDUzOTZGMzUwQjI4QzAxNUMxRUUzMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFoJjOmHffmJcmKtdjrelORJKO
/ZwJVMlaanNOolx30kAUKkio4jd2qDC6ZBzk5UGdr0kuX2yi93UH8R8oJ8me17om
XzYBfugrclc+svEa4smHPOWQvZwO39OdUoMqOu8fZcFR+6vijR57H4lnBfkeTg3F
S6kKvzOHYw9fYU9/CDTb8oh9ipTe33zxEHZhDyporJ0uFRZoWjWwE+kuh1aUvgva
281IMEvE847JUyAJszglavH257RqM2nctQJDH6o4Y422PdchQBLZcexBZjx/0ZUZ
2sK6R/Src9m7TZ9XVdx43AEybGpYfFBl470Fu6+v/S/ookzckJh1lD/ohsOZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUONT6fXxjb+5tU5bzULKMAVwe4ycwHwYDVR0j
BBgwFoAU25+nf35eXijMWVvPLw5I4KRjNmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4
REE3QzA5QzQxMUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUy
OENDNTk1QkNGMkYwRTQ4RTBBNDYzMzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjlGQTc3RjdFNUU1RTI4Q0M1
OTVCQ0YyRjBFNDhFMEE0NjMzNjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2RDUwMjZDMUYwOERBN0MwOUM0
MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzMyMzgzMDMzM2E2NDMwMzgzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczOTM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9CAMA0G
CSqGSIb3DQEBCwUAA4IBAQBfLZU38NrPsz78fpZu9R2Rq7Pp7wm970cKrHskd1gY
WsM2C1DsRx1TB6z7/vTyvd8EThKM7o2f8/EyqfYn7+0XN+8bX/qm5QXnRUbkfM42
8RFv4Q0EEQGPuUANXigBfksE3D/WHE2mmp6Vb6nAJEf3jwFyOPmni5885OY7Pkxs
t1I+PIFhYmFIRDSSbn2U7rEIF97cJUw8S3RG6m020GY8jjVTPk2PMAVdzRwSnUnB
1U0p+rzemwdmZomcGPJf2L+b0H+B4pX1EL53AJ/Auv/rDEpDgdu76MefQna/hQGr
QnOwCyvXfwVKcz1G/mjBNFoXBMccfb9scEO+n13mjYZX
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:38 2025 by rpki-client