Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa
File:                     323830333a383931303a3a2f33392d3339203d3e203634313334.roa (raw, json)
Hash identifier:          u4vfq3U2AoPUtcWr3/Mz3ExnzYMUaP/vJXskXtkdMuw=
Subject key identifier:   89:FE:FB:BE:4B:74:0D:0E:A6:5D:C3:3B:D3:3C:58:64:A3:30:B5:52
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       33B5F50EFA2748F4E69E07BD541FC216FDD19A69
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa
Signing time:             Sat 25 Jan 2025 18:20:00 +0000
ROA not before:           Sat 25 Jan 2025 18:15:00 +0000
ROA not after:            Sat 24 Jan 2026 18:20:00 +0000
asID:                     64134
IP address blocks:        2803:8910::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:f5:0e:fa:27:48:f4:e6:9e:07:bd:54:1f:c2:16:fd:d1:9a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Jan 25 18:15:00 2025 GMT
            Not After : Jan 24 18:20:00 2026 GMT
        Subject: CN=89FEFBBE4B740D0EA65DC33BD33C5864A330B552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:7d:e2:d2:46:8f:af:d5:a4:2e:0c:61:02:
                    32:35:d0:35:fe:e4:ee:01:d8:e0:1f:fe:1d:dd:86:
                    57:f7:ba:dc:13:a9:07:c6:e0:c6:d4:fd:ba:d3:21:
                    ec:31:8f:f9:6f:5d:75:77:bf:94:70:e1:94:bd:e9:
                    54:f0:8e:8d:d7:c5:fc:b5:76:45:d9:34:d5:ab:f7:
                    2a:01:ba:a5:3c:88:28:b1:6f:af:55:f9:a4:6e:75:
                    6b:4c:b0:b4:37:54:4a:6f:18:b8:34:0d:e2:99:16:
                    eb:9a:da:42:67:9d:44:3d:43:b9:ab:52:79:b1:95:
                    5a:dc:df:b0:9b:5b:82:28:11:70:39:db:b0:39:68:
                    96:a2:4d:f0:ed:54:f8:00:5c:99:6b:87:9e:99:aa:
                    a5:3b:1b:10:5a:09:83:71:62:ef:2a:dc:27:b2:27:
                    01:d6:ee:64:92:02:57:e0:a8:6e:3e:9b:69:c2:41:
                    2f:5f:f5:68:ed:e5:88:19:78:ec:43:04:5b:2c:6d:
                    bb:6a:25:60:93:49:f0:06:04:2a:28:84:30:c8:ef:
                    01:a0:18:b1:9a:91:32:39:50:fe:8c:dd:73:ed:de:
                    17:71:ab:2a:a9:59:6e:bd:8d:41:6a:e5:a6:e8:fc:
                    d2:23:04:76:f7:e3:c3:a3:9e:ec:dd:80:5f:4c:ab:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:FB:BE:4B:74:0D:0E:A6:5D:C3:3B:D3:3C:58:64:A3:30:B5:52
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910::/39

    Signature Algorithm: sha256WithRSAEncryption
         40:38:3d:5c:a6:3b:ca:80:e3:1c:f6:54:a6:23:3a:f2:2e:0d:
         68:d8:5e:84:dc:b9:64:f8:c2:c2:41:9f:cf:3c:91:37:86:8f:
         06:66:47:ef:2b:53:49:75:16:85:ff:39:a5:b6:36:14:39:87:
         8d:7a:fd:34:8a:b5:dd:9d:0f:c2:48:70:cc:51:25:84:63:de:
         ca:35:09:31:aa:1b:f6:d8:10:34:bc:5e:87:ac:77:ad:f4:de:
         3c:f0:ca:4f:e4:30:ff:d8:e9:0d:c7:2c:10:a5:ca:48:6b:78:
         83:87:c7:4e:70:e7:ab:d0:3e:0d:e8:19:ff:62:12:57:93:76:
         e3:f6:c0:2e:16:d6:d0:3e:dd:95:86:db:9b:43:6b:d7:3c:ce:
         a9:41:ca:f7:54:90:96:cc:3b:28:1f:90:b7:53:dc:53:d7:4d:
         df:9e:e3:f0:40:a7:c7:82:bb:46:d4:21:9e:f8:c3:ec:02:b5:
         b9:2a:e3:91:81:28:70:f7:1c:81:49:2b:58:af:50:2f:3f:40:
         c6:c0:e7:fe:48:9b:8e:f0:06:88:30:17:65:13:24:d5:d7:29:
         de:de:22:21:40:af:aa:b0:2e:3c:fc:da:33:a2:54:74:82:4a:
         1b:e4:f2:93:fa:a2:d0:66:10:8d:54:31:33:7b:24:70:93:16:
         8e:23:5a:55
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM7X1DvonSPTmnge9VB/CFv3RmmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwNEZGMUQxNTAyQ0FBMDhBN0FEMjQ3ODNDMkUxMzdE
NkFGQzcwOTAeFw0yNTAxMjUxODE1MDBaFw0yNjAxMjQxODIwMDBaMDMxMTAvBgNV
BAMTKDg5RkVGQkJFNEI3NDBEMEVBNjVEQzMzQkQzM0M1ODY0QTMzMEI1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCn3i0kaPr9WkLgxhAjI10DX+
5O4B2OAf/h3dhlf3utwTqQfG4MbU/brTIewxj/lvXXV3v5Rw4ZS96VTwjo3Xxfy1
dkXZNNWr9yoBuqU8iCixb69V+aRudWtMsLQ3VEpvGLg0DeKZFuua2kJnnUQ9Q7mr
UnmxlVrc37CbW4IoEXA527A5aJaiTfDtVPgAXJlrh56ZqqU7GxBaCYNxYu8q3Cey
JwHW7mSSAlfgqG4+m2nCQS9f9Wjt5YgZeOxDBFssbbtqJWCTSfAGBCoohDDI7wGg
GLGakTI5UP6M3XPt3hdxqyqpWW69jUFq5abo/NIjBHb348OjnuzdgF9Mqy+9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUif77vkt0DQ6mXcM70zxYZKMwtVIwHwYDVR0j
BBgwFoAUXgT/HRUCyqCKetJHg8LhN9avxwkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNUU2NkU2RTIwNTc5MTYzQjUwMjIyM0I3MUI5REEzNTEx
QUQ0MTdGRUM3RDA1NEM1QzlFODgyNUU3RENEN0VBLzAvNUUwNEZGMUQxNTAyQ0FB
MDhBN0FEMjQ3ODNDMkUxMzdENkFGQzcwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTA0RkYxRDE1MDJDQUEwOEE3
QUQyNDc4M0MyRTEzN0Q2QUZDNzA5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjVFNjZFNkUyMDU3OTE2M0I1MDIyMjNCNzFCOURBMzUxMUFENDE3RkVD
N0QwNTRDNUM5RTg4MjVFN0RDRDdFQS8wLzMyMzgzMDMzM2EzODM5MzEzMDNhM2Ey
ZjMzMzkyZDMzMzkyMDNkM2UyMDM2MzQzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEoA4kQADAN
BgkqhkiG9w0BAQsFAAOCAQEAQDg9XKY7yoDjHPZUpiM68i4NaNhehNy5ZPjCwkGf
zzyRN4aPBmZH7ytTSXUWhf85pbY2FDmHjXr9NIq13Z0PwkhwzFElhGPeyjUJMaob
9tgQNLxeh6x3rfTePPDKT+Qw/9jpDccsEKXKSGt4g4fHTnDnq9A+DegZ/2ISV5N2
4/bALhbW0D7dlYbbm0Nr1zzOqUHK91SQlsw7KB+Qt1PcU9dN357j8ECnx4K7RtQh
nvjD7AK1uSrjkYEocPccgUkrWK9QLz9AxsDn/kibjvAGiDAXZRMk1dcp3t4iIUCv
qrAuPPzaM6JUdIJKG+Tyk/qi0GYQjVQxM3skcJMWjiNaVQ==
-----END CERTIFICATE-----