Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
File:                     323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa (raw, json)
Hash identifier:          2tsAs5C2E++ha3WGN9RCt6mEJ6TphROnykDsE5X/5G4=
Subject key identifier:   FD:B8:F3:E4:6B:64:EA:F8:73:D0:1D:90:91:12:81:38:E9:8B:31:F0
Certificate issuer:       /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial:       10A96C3DCC467D09DDA721C11DD7B3EC84776C86
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
Signing time:             Tue 04 Feb 2025 18:42:14 +0000
ROA not before:           Tue 04 Feb 2025 18:37:14 +0000
ROA not after:            Tue 03 Feb 2026 18:42:14 +0000
asID:                     263217
IP address blocks:        2801:19:c000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a9:6c:3d:cc:46:7d:09:dd:a7:21:c1:1d:d7:b3:ec:84:77:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
        Validity
            Not Before: Feb  4 18:37:14 2025 GMT
            Not After : Feb  3 18:42:14 2026 GMT
        Subject: CN=FDB8F3E46B64EAF873D01D9091128138E98B31F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:89:39:f5:9c:b3:dd:e9:91:e3:93:bc:53:
                    73:e6:d5:9f:a2:c2:a8:8e:4c:11:ef:a2:93:13:ce:
                    9a:51:cb:82:a5:c5:78:d3:08:32:79:b8:e6:cf:b8:
                    2e:9b:30:f8:39:66:0a:d0:0d:5e:22:9d:ed:26:94:
                    e7:79:bb:67:7a:62:df:a4:a9:e7:c7:5b:7a:9d:0a:
                    68:ec:ab:5c:d6:71:61:d1:1e:4d:c8:dd:8b:0a:b2:
                    35:69:d1:0f:97:59:5b:0a:a4:6c:e3:3d:08:01:98:
                    0f:26:a8:91:d7:60:2c:60:b8:f9:cb:1d:40:88:c8:
                    b6:f6:05:f4:41:c9:63:b1:e7:3f:0d:4c:0e:e4:07:
                    79:f4:83:63:02:79:b2:29:54:c0:a1:7b:69:9e:a9:
                    23:22:02:d5:24:6e:20:0c:fd:c9:5b:81:8e:6d:a5:
                    93:78:6a:2d:13:09:6c:98:36:f1:bf:9c:3b:46:ad:
                    57:1e:40:d4:33:80:e5:34:21:9e:e6:81:8b:a1:45:
                    4a:04:f6:2c:4f:10:ca:c8:09:75:3d:a4:fe:63:f2:
                    f6:09:d7:1f:1b:40:7b:bb:e0:73:f5:18:3c:73:1e:
                    16:1a:20:df:41:06:2e:86:88:8a:ca:37:f7:c4:b5:
                    1f:e4:95:6e:41:4a:0b:98:65:ea:81:db:eb:ba:22:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:F3:E4:6B:64:EA:F8:73:D0:1D:90:91:12:81:38:E9:8B:31:F0
            X509v3 Authority Key Identifier:
                keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:fb:a8:fe:a2:f7:54:34:97:28:98:12:33:ce:18:ec:15:
         5d:fb:50:86:22:a2:92:b7:2b:29:4a:94:0d:2b:0e:6d:33:ce:
         14:b2:a5:58:ff:58:34:a6:7d:69:5f:75:7c:ac:ae:f0:8c:eb:
         89:3a:e0:a6:f6:9d:c7:9d:56:5b:17:0a:70:b6:b6:f7:ab:8d:
         1a:87:26:57:a1:32:36:94:e3:c8:99:18:93:20:72:d2:54:31:
         1e:35:f6:f4:6b:cf:df:81:40:51:ca:85:35:38:00:c0:e0:2b:
         74:db:b5:72:9d:04:70:89:70:c5:17:2e:39:92:9f:42:72:e1:
         ff:62:0a:af:2f:74:61:8c:ac:19:5e:da:b1:a9:82:6c:82:ae:
         c3:38:d7:2f:f6:32:23:a2:2f:63:69:29:35:81:52:b2:c5:4c:
         a7:d1:50:85:9f:6a:af:88:65:56:f3:e8:96:55:82:07:a3:d2:
         e0:a3:d3:ed:5a:6e:f3:e5:1a:63:85:4a:a8:d6:df:d5:99:3a:
         38:52:35:8a:17:59:62:5e:cc:6e:cd:e7:bf:ae:45:a7:2c:b9:
         3a:5a:70:47:39:05:e7:30:db:d7:0a:01:ee:aa:4f:dd:50:f6:
         7a:a8:44:43:9a:90:59:2e:3d:2c:64:2d:e1:13:ca:ed:72:6e:
         9d:8a:df:d8
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUEKlsPcxGfQndpyHBHdez7IR3bIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3MDQ0NTRCRUVBQTU2MDdDMDE3RjJBNjg1MjYyRjBC
NTQ5QjY4QjAeFw0yNTAyMDQxODM3MTRaFw0yNjAyMDMxODQyMTRaMDMxMTAvBgNV
BAMTKEZEQjhGM0U0NkI2NEVBRjg3M0QwMUQ5MDkxMTI4MTM4RTk4QjMxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Q4k59Zyz3emR45O8U3Pm1Z+i
wqiOTBHvopMTzppRy4KlxXjTCDJ5uObPuC6bMPg5ZgrQDV4ine0mlOd5u2d6Yt+k
qefHW3qdCmjsq1zWcWHRHk3I3YsKsjVp0Q+XWVsKpGzjPQgBmA8mqJHXYCxguPnL
HUCIyLb2BfRByWOx5z8NTA7kB3n0g2MCebIpVMChe2meqSMiAtUkbiAM/clbgY5t
pZN4ai0TCWyYNvG/nDtGrVceQNQzgOU0IZ7mgYuhRUoE9ixPEMrICXU9pP5j8vYJ
1x8bQHu74HP1GDxzHhYaIN9BBi6GiIrKN/fEtR/klW5BSguYZeqB2+u6IkShAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU/bjz5Gtk6vhz0B2QkRKBOOmLMfAwHwYDVR0j
BBgwFoAU+XBEVL7qpWB8AX8qaFJi8LVJtoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTgzOTU0RDEwRjg1N0IzNTE0OUFGRkRGMDA5ODA5MUUz
ODg1RUZBRDU3RUJFMDg4NDc3QTRDNEIxOEU1RjhCLzAvRjk3MDQ0NTRCRUVBQTU2
MDdDMDE3RjJBNjg1MjYyRjBCNTQ5QjY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTcwNDQ1NEJFRUFBNTYwN0Mw
MTdGMkE2ODUyNjJGMEI1NDlCNjhCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU4Mzk1NEQxMEY4NTdCMzUxNDlBRkZERjAwOTgwOTFFMzg4NUVGQUQ1
N0VCRTA4ODQ3N0E0QzRCMThFNUY4Qi8wLzMyMzgzMDMxM2EzMTM5M2E2MzMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMzMyMzEzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABnAADANBgkqhkiG9w0BAQsFAAOCAQEAekX7qP6i91Q0lyiYEjPOGOwVXftQ
hiKikrcrKUqUDSsObTPOFLKlWP9YNKZ9aV91fKyu8IzriTrgpvadx51WWxcKcLa2
96uNGocmV6EyNpTjyJkYkyBy0lQxHjX29GvP34FAUcqFNTgAwOArdNu1cp0EcIlw
xRcuOZKfQnLh/2IKry90YYysGV7asamCbIKuwzjXL/YyI6IvY2kpNYFSssVMp9FQ
hZ9qr4hlVvPollWCB6PS4KPT7Vpu8+UaY4VKqNbf1Zk6OFI1ihdZYl7Mbs3nv65F
pyy5OlpwRzkF5zDb1woB7qpP3VD2eqhEQ5qQWS49LGQt4RPK7XJunYrf2A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:45 2025 by rpki-client