Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666663a3a2f34382d3438203d3e203634313334.roa
File:                     323830333a383931303a666666663a3a2f34382d3438203d3e203634313334.roa (raw, json)
Hash identifier:          DKexAYsYFkD9fogDQ9WQ4HTsTm9Pe08zZYu0rp28KZ0=
Subject key identifier:   D5:F3:74:64:52:4F:44:FD:66:DE:31:EC:B7:2F:6B:68:ED:4E:C2:A4
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       1F00C80366C669972F3B73AEBEE5801E9B864CA6
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666663a3a2f34382d3438203d3e203634313334.roa
Signing time:             Sat 25 Jan 2025 18:20:00 +0000
ROA not before:           Sat 25 Jan 2025 18:15:00 +0000
ROA not after:            Sat 24 Jan 2026 18:20:00 +0000
asID:                     64134
IP address blocks:        2803:8910:ffff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:00:c8:03:66:c6:69:97:2f:3b:73:ae:be:e5:80:1e:9b:86:4c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Jan 25 18:15:00 2025 GMT
            Not After : Jan 24 18:20:00 2026 GMT
        Subject: CN=D5F37464524F44FD66DE31ECB72F6B68ED4EC2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:9a:a3:da:76:f5:e4:36:d5:1d:2e:5c:d9:
                    1b:33:5f:e6:11:e4:ac:c6:c8:14:32:0a:79:5f:39:
                    38:62:d8:6b:86:74:bf:c5:b9:be:3c:56:ef:60:1c:
                    2d:25:0e:ba:46:da:49:86:56:f0:89:0d:7c:7e:00:
                    c8:96:05:d1:03:11:85:f0:74:f9:72:65:80:f4:e3:
                    cc:4e:fd:5b:10:7a:9a:09:9a:55:58:0a:04:79:84:
                    b3:f6:11:3c:f5:82:b4:66:41:7f:27:94:27:61:5a:
                    74:8f:82:37:7c:24:06:c1:db:30:85:1e:7b:5e:a8:
                    55:b6:1e:98:67:a7:fb:dd:56:f3:a5:84:a1:64:d7:
                    82:f3:6f:d7:57:63:86:99:df:75:a2:89:f3:1c:d1:
                    14:ef:d4:5f:16:bd:f3:d5:b6:e6:39:17:8e:d3:39:
                    09:f6:08:50:7f:f1:19:10:54:ed:f7:63:20:e5:7b:
                    57:5b:0b:be:09:3d:c4:f7:61:23:5d:2b:b3:ab:ee:
                    3c:c7:09:01:72:b7:ab:d8:0a:4a:02:d4:ae:f3:14:
                    ee:f0:3f:f5:f5:8f:37:b9:93:3a:11:5d:65:7a:50:
                    f8:a7:1a:c0:54:3a:1b:91:02:da:7d:89:e5:e9:12:
                    d2:70:2f:01:63:e1:15:3b:80:0d:85:ea:e6:83:c7:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:74:64:52:4F:44:FD:66:DE:31:EC:B7:2F:6B:68:ED:4E:C2:A4
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666663a3a2f34382d3438203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:e4:8e:ef:51:c2:2b:dd:df:24:e9:0c:7c:d9:7c:7a:c8:
         51:15:43:5d:6c:c1:b6:8c:de:63:a9:a4:e9:1a:80:05:fb:5b:
         0c:ec:e7:e5:dc:1e:69:bc:8a:8e:25:81:f7:ad:5e:e5:9b:e4:
         62:45:29:81:0d:0b:9a:95:09:61:2f:3c:aa:50:ca:6b:43:da:
         88:1c:d7:7e:f0:4f:70:db:cb:24:8c:72:b0:1c:c6:8f:17:cd:
         f1:77:cc:43:fc:63:89:e1:85:b7:44:a6:20:14:42:64:e0:c9:
         7e:55:13:bf:a7:de:a1:26:98:68:c1:4e:5f:b0:39:63:02:8e:
         9f:0a:05:f5:1d:86:66:4f:70:74:16:af:da:48:f8:54:b1:47:
         7d:a7:6b:ca:15:a5:bf:35:a3:97:c3:54:1e:6c:67:d2:08:bc:
         5e:27:c1:3a:d3:31:0a:a3:66:ee:36:23:03:42:a2:61:aa:fb:
         8c:86:d8:b4:f8:6e:1c:65:02:a2:2c:93:ac:7f:cf:5c:c7:19:
         e7:9b:58:60:0e:57:b8:37:72:2e:33:2f:80:72:78:6e:d3:f6:
         fb:c9:76:e0:21:1e:3d:9b:e6:50:f7:4d:0f:3a:2a:c6:dd:ef:
         d5:7e:53:5b:56:37:db:0f:c3:d6:d9:07:04:b7:2f:71:46:c1:
         a1:89:16:a3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHwDIA2bGaZcvO3OuvuWAHpuGTKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwNEZGMUQxNTAyQ0FBMDhBN0FEMjQ3ODNDMkUxMzdE
NkFGQzcwOTAeFw0yNTAxMjUxODE1MDBaFw0yNjAxMjQxODIwMDBaMDMxMTAvBgNV
BAMTKEQ1RjM3NDY0NTI0RjQ0RkQ2NkRFMzFFQ0I3MkY2QjY4RUQ0RUMyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlXZqj2nb15DbVHS5c2RszX+YR
5KzGyBQyCnlfOThi2GuGdL/Fub48Vu9gHC0lDrpG2kmGVvCJDXx+AMiWBdEDEYXw
dPlyZYD048xO/VsQepoJmlVYCgR5hLP2ETz1grRmQX8nlCdhWnSPgjd8JAbB2zCF
HnteqFW2Hphnp/vdVvOlhKFk14Lzb9dXY4aZ33WiifMc0RTv1F8WvfPVtuY5F47T
OQn2CFB/8RkQVO33YyDle1dbC74JPcT3YSNdK7Or7jzHCQFyt6vYCkoC1K7zFO7w
P/X1jze5kzoRXWV6UPinGsBUOhuRAtp9ieXpEtJwLwFj4RU7gA2F6uaDx6M9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU1fN0ZFJPRP1m3jHsty9raO1OwqQwHwYDVR0j
BBgwFoAUXgT/HRUCyqCKetJHg8LhN9avxwkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNUU2NkU2RTIwNTc5MTYzQjUwMjIyM0I3MUI5REEzNTEx
QUQ0MTdGRUM3RDA1NEM1QzlFODgyNUU3RENEN0VBLzAvNUUwNEZGMUQxNTAyQ0FB
MDhBN0FEMjQ3ODNDMkUxMzdENkFGQzcwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTA0RkYxRDE1MDJDQUEwOEE3
QUQyNDc4M0MyRTEzN0Q2QUZDNzA5LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjVFNjZFNkUyMDU3OTE2M0I1MDIyMjNCNzFCOURBMzUxMUFENDE3RkVD
N0QwNTRDNUM5RTg4MjVFN0RDRDdFQS8wLzMyMzgzMDMzM2EzODM5MzEzMDNhNjY2
NjY2NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjM0MzEzMzM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAOJEP//MA0GCSqGSIb3DQEBCwUAA4IBAQBdVeSO71HCK93fJOkMfNl8eshR
FUNdbMG2jN5jqaTpGoAF+1sM7Ofl3B5pvIqOJYH3rV7lm+RiRSmBDQualQlhLzyq
UMprQ9qIHNd+8E9w28skjHKwHMaPF83xd8xD/GOJ4YW3RKYgFEJk4Ml+VRO/p96h
JphowU5fsDljAo6fCgX1HYZmT3B0Fq/aSPhUsUd9p2vKFaW/NaOXw1QebGfSCLxe
J8E60zEKo2buNiMDQqJhqvuMhti0+G4cZQKiLJOsf89cxxnnm1hgDle4N3IuMy+A
cnhu0/b7yXbgIR49m+ZQ900POirG3e/VflNbVjfbD8PW2QcEty9xRsGhiRaj
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:44 2025 by rpki-client