Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a313a3a2f34382d3438203d3e20323634373633.roa
File:                     323830333a353063303a313a3a2f34382d3438203d3e20323634373633.roa (raw, json)
Hash identifier:          pQU3fKK9ilpLcRjmZxGhLyS8r5GTab6tTTeAwMug2b8=
Subject key identifier:   59:48:1C:72:B3:D6:19:9D:AF:39:D3:5D:C5:38:92:03:C4:5D:0E:4C
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       4BDD350998EFB674908FD190596983C5B0E4C891
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a313a3a2f34382d3438203d3e20323634373633.roa
Signing time:             Tue 04 Feb 2025 18:54:30 +0000
ROA not before:           Tue 04 Feb 2025 18:49:30 +0000
ROA not after:            Tue 03 Feb 2026 18:54:30 +0000
asID:                     264763
IP address blocks:        2803:50c0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:35:09:98:ef:b6:74:90:8f:d1:90:59:69:83:c5:b0:e4:c8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Feb  4 18:49:30 2025 GMT
            Not After : Feb  3 18:54:30 2026 GMT
        Subject: CN=59481C72B3D6199DAF39D35DC5389203C45D0E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:c8:24:ed:18:38:54:15:e5:5f:ed:22:0f:
                    62:29:f6:7b:45:97:d5:f2:40:cc:43:f2:92:cd:43:
                    08:db:41:06:52:47:29:6c:50:9d:f8:03:6c:8e:11:
                    76:8c:bf:aa:37:da:69:f9:12:1c:49:6b:98:8e:7c:
                    35:36:20:11:40:06:45:e0:23:3d:bc:23:13:33:b5:
                    f3:e1:5c:1e:5a:75:c0:88:0f:61:19:a1:0a:3a:10:
                    93:87:4c:8a:02:6c:90:ba:e2:ac:27:06:26:4d:da:
                    28:fd:e8:23:59:50:2d:b4:48:91:91:c6:39:c3:83:
                    58:97:9d:3d:e1:41:d5:9c:d8:7d:04:f9:b0:be:3b:
                    5f:19:fb:7e:bc:81:3f:6d:16:cb:a3:7e:1f:5c:07:
                    c0:5f:d6:2d:1d:4a:e4:21:78:a7:84:ac:21:cf:30:
                    3c:b3:74:92:75:ba:a4:f6:27:2e:f5:8e:b5:f0:21:
                    09:2a:46:65:f8:ee:ab:17:03:0c:30:8a:26:47:80:
                    d9:33:ac:ae:d4:dd:a7:d2:0c:d2:55:a1:3a:43:e7:
                    dd:4f:cc:40:56:ef:14:94:2a:5d:00:35:47:6a:ef:
                    00:ec:5d:0b:27:7e:e3:c6:13:e1:64:51:37:16:60:
                    db:5a:9f:ad:a7:3c:63:5a:30:1a:e8:9c:39:08:a3:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:1C:72:B3:D6:19:9D:AF:39:D3:5D:C5:38:92:03:C4:5D:0E:4C
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a313a3a2f34382d3438203d3e20323634373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:f7:8f:64:d7:a5:03:90:41:fc:ec:db:8d:04:b7:e4:c4:f9:
         3f:f9:07:49:3d:af:67:58:d1:f7:df:98:a6:78:b0:78:c2:42:
         39:d3:42:18:70:14:8c:f7:64:5f:50:38:b6:27:33:57:88:10:
         83:35:aa:39:f7:4a:10:80:f8:48:3d:00:98:09:9f:43:03:fc:
         8c:69:5c:ca:5d:0d:9e:e9:c5:11:91:ce:65:c1:55:d9:89:8c:
         bd:f9:f5:1a:1f:09:41:c7:91:d4:28:5e:56:7a:7c:8d:30:d0:
         02:91:11:cb:95:04:34:45:84:78:6f:49:f5:f9:42:2d:02:f3:
         c4:c0:47:04:30:58:fb:e0:3a:9b:53:01:96:4d:4b:0b:2c:74:
         ae:54:15:df:a2:31:83:eb:4c:05:49:b5:43:2d:a3:d3:a4:b6:
         78:df:5b:e4:bd:2b:79:82:e8:de:75:26:a4:71:39:06:af:9c:
         cb:d0:1e:07:9c:bd:90:81:c9:18:82:2b:11:2f:82:38:f7:cf:
         ff:73:f3:26:a8:df:1c:66:c1:e9:b9:0a:98:99:6f:df:3d:90:
         84:f2:e3:7d:e9:83:a7:09:a2:43:88:0f:ff:e5:0c:f4:15:f4:
         c6:54:7e:3f:c5:39:7b:f5:c9:ad:b6:27:54:a2:7d:b8:0f:ba:
         67:ba:de:da
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUS901CZjvtnSQj9GQWWmDxbDkyJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ0MzI4QjU4OEQ3RTZBQjRGMDQ5RDI2RjlFNkZEQkIy
RkI1MTk3MDAeFw0yNTAyMDQxODQ5MzBaFw0yNjAyMDMxODU0MzBaMDMxMTAvBgNV
BAMTKDU5NDgxQzcyQjNENjE5OURBRjM5RDM1REM1Mzg5MjAzQzQ1RDBFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMMgk7Rg4VBXlX+0iD2Ip9ntF
l9XyQMxD8pLNQwjbQQZSRylsUJ34A2yOEXaMv6o32mn5EhxJa5iOfDU2IBFABkXg
Iz28IxMztfPhXB5adcCID2EZoQo6EJOHTIoCbJC64qwnBiZN2ij96CNZUC20SJGR
xjnDg1iXnT3hQdWc2H0E+bC+O18Z+368gT9tFsujfh9cB8Bf1i0dSuQheKeErCHP
MDyzdJJ1uqT2Jy71jrXwIQkqRmX47qsXAwwwiiZHgNkzrK7U3afSDNJVoTpD591P
zEBW7xSUKl0ANUdq7wDsXQsnfuPGE+FkUTcWYNtan62nPGNaMBronDkIoy3jAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUWUgccrPWGZ2vOdNdxTiSA8RdDkwwHwYDVR0j
BBgwFoAUBEMotYjX5qtPBJ0m+eb9uy+1GXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjAwQzBBMzI0NDg0QTBFNTMyMTg5RUU2OEI0MjZBQTIy
MDMzMTQzNUJBNDUwQ0ZGQ0YzODE2QkYxMDMxOTg5LzAvMDQ0MzI4QjU4OEQ3RTZB
QjRGMDQ5RDI2RjlFNkZEQkIyRkI1MTk3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNDQzMjhCNTg4RDdFNkFCNEYw
NDlEMjZGOUU2RkRCQjJGQjUxOTcwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYwMEMwQTMyNDQ4NEEwRTUzMjE4OUVFNjhCNDI2QUEyMjAzMzE0MzVC
QTQ1MENGRkNGMzgxNkJGMTAzMTk4OS8wLzMyMzgzMDMzM2EzNTMwNjMzMDNhMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzQzNzM2MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A1DAAAEwDQYJKoZIhvcNAQELBQADggEBAMn3j2TXpQOQQfzs240Et+TE+T/5B0k9
r2dY0fffmKZ4sHjCQjnTQhhwFIz3ZF9QOLYnM1eIEIM1qjn3ShCA+Eg9AJgJn0MD
/IxpXMpdDZ7pxRGRzmXBVdmJjL359RofCUHHkdQoXlZ6fI0w0AKREcuVBDRFhHhv
SfX5Qi0C88TARwQwWPvgOptTAZZNSwssdK5UFd+iMYPrTAVJtUMto9OktnjfW+S9
K3mC6N51JqRxOQavnMvQHgecvZCByRiCKxEvgjj3z/9z8yao3xxmwem5CpiZb989
kITy433pg6cJokOID//lDPQV9MZUfj/FOXv1ya22J1SifbgPume63to=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:07 2025 by rpki-client