Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a663030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a663030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          v3ezu3FsAdPlkqjmRAscxheOiLEPpklQfSETRNJAx6w=
Subject key identifier:   F7:8A:C1:AD:1B:DA:14:2F:B0:C7:FA:FA:04:49:C3:9E:4B:50:7D:14
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       622A24A2E5FECA41958E705945A16BDE996F162A
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a663030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:49 +0000
ROA not before:           Tue 04 Feb 2025 18:23:49 +0000
ROA not after:            Tue 03 Feb 2026 18:28:49 +0000
asID:                     61508
IP address blocks:        2803:f240:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:24:a2:e5:fe:ca:41:95:8e:70:59:45:a1:6b:de:99:6f:16:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:49 2025 GMT
            Not After : Feb  3 18:28:49 2026 GMT
        Subject: CN=F78AC1AD1BDA142FB0C7FAFA0449C39E4B507D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ce:5c:f1:a1:77:17:5f:63:9e:d7:4b:0d:da:
                    0c:0a:2c:82:a6:dc:29:07:6f:b6:85:c5:8b:1e:67:
                    0a:1e:bc:25:92:49:c6:59:4e:8e:62:4e:23:40:a9:
                    fb:55:6c:ce:4b:2b:80:ad:a0:81:39:9e:04:64:9b:
                    c9:5f:de:2e:b9:47:f9:47:c7:0f:7d:b0:4b:d3:db:
                    35:0e:4e:eb:65:1b:f4:78:37:2e:50:05:18:73:e3:
                    38:d1:cb:d7:44:09:f2:a3:90:b9:f1:1c:e2:d1:8c:
                    39:b7:17:de:40:9e:b1:0e:2f:89:04:a9:4d:e6:eb:
                    70:9d:b0:ba:a1:90:4e:ba:64:2f:0f:e0:70:83:85:
                    b8:d8:39:f3:8d:74:86:c9:f5:d9:bc:a0:9e:b6:ef:
                    84:88:c6:20:66:5e:7f:11:0d:0e:b1:50:7e:0b:af:
                    02:b5:b8:4f:5d:85:54:1d:fa:05:be:5e:59:f6:57:
                    f9:c1:17:82:20:f5:f9:fd:76:64:8d:f1:61:f5:d7:
                    d8:bd:0d:60:36:d3:13:76:14:2a:be:66:f7:7a:4e:
                    49:e7:a5:b3:36:ed:b0:31:37:22:dd:34:94:c5:f9:
                    65:6f:9a:d8:ff:d2:c5:fb:4a:2d:03:d5:b5:5a:73:
                    12:51:0c:d3:20:79:9b:e4:5a:fb:7c:56:b6:67:50:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8A:C1:AD:1B:DA:14:2F:B0:C7:FA:FA:04:49:C3:9E:4B:50:7D:14
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a663030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:05:04:3b:6b:63:6e:c6:11:f2:15:1c:5e:4a:8e:e3:5b:75:
         ca:78:e9:de:cd:d0:e6:5e:46:3b:f2:47:f9:4f:c5:3d:8b:33:
         ea:5b:c5:8b:2b:73:3c:b9:9c:33:a3:54:64:26:7d:8c:84:08:
         d3:e4:3d:c6:1d:eb:8a:e2:8e:1f:5f:3e:93:1f:2f:84:56:7c:
         08:9f:87:08:98:5a:1b:81:e7:46:f8:31:6e:cc:6b:1a:2f:fa:
         fe:ab:5e:8c:0a:ac:cc:91:d3:1a:b0:b9:d8:31:4c:b9:5b:67:
         78:6a:f4:5a:04:ae:68:e3:22:f1:f0:b4:b3:4a:30:87:bd:c2:
         00:ec:07:ed:cc:f3:3b:35:4f:6a:11:2b:23:16:c8:77:cf:ed:
         7a:38:a4:1e:3f:dc:84:32:c2:68:8a:c7:8f:4d:83:a5:d5:37:
         fd:76:1d:b5:97:c9:56:6f:8b:59:48:5a:e9:29:f0:0e:b6:ac:
         24:b4:3c:d6:2b:f5:81:4c:73:14:42:7e:1a:33:46:7b:dd:6a:
         98:1e:5f:44:9f:5d:ac:99:c1:39:02:57:8e:c5:4d:2e:8f:22:
         72:d2:45:33:79:23:52:15:e7:ec:71:ac:47:68:ef:6c:f0:b5:
         29:98:e2:4b:f0:72:17:cc:b3:b4:01:a1:07:c3:26:4a:1f:fc:
         98:a0:e6:0c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUYiokouX+ykGVjnBZRaFr3plvFiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4RjVCNDRERDgxM0JBNEJDOEEwNEM3RDI1NTA0MkYx
QUU0QjJBRDAeFw0yNTAyMDQxODIzNDlaFw0yNjAyMDMxODI4NDlaMDMxMTAvBgNV
BAMTKEY3OEFDMUFEMUJEQTE0MkZCMEM3RkFGQTA0NDlDMzlFNEI1MDdEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzlzxoXcXX2Oe10sN2gwKLIKm
3CkHb7aFxYseZwoevCWSScZZTo5iTiNAqftVbM5LK4CtoIE5ngRkm8lf3i65R/lH
xw99sEvT2zUOTutlG/R4Ny5QBRhz4zjRy9dECfKjkLnxHOLRjDm3F95AnrEOL4kE
qU3m63CdsLqhkE66ZC8P4HCDhbjYOfONdIbJ9dm8oJ6274SIxiBmXn8RDQ6xUH4L
rwK1uE9dhVQd+gW+Xln2V/nBF4Ig9fn9dmSN8WH119i9DWA20xN2FCq+Zvd6Tknn
pbM27bAxNyLdNJTF+WVvmtj/0sX7Si0D1bVacxJRDNMgeZvkWvt8VrZnUDbHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU94rBrRvaFC+wx/r6BEnDnktQfRQwHwYDVR0j
BBgwFoAUgY9bRN2BO6S8igTH0lUELxrksq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzI0NjdDRDU4NTQ1REIzQzkxQjlGRDU5NzAzQTQ4QkEw
RjFCQUNGM0Q1QzU2QUE3QzkwQ0JFNjkxQ0M2RjQ0LzAvODE4RjVCNDRERDgxM0JB
NEJDOEEwNEM3RDI1NTA0MkYxQUU0QjJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MThGNUI0NEREODEzQkE0QkM4
QTA0QzdEMjU1MDQyRjFBRTRCMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyNDY3Q0Q1ODU0NURCM0M5MUI5RkQ1OTcwM0E0OEJBMEYxQkFDRjNE
NUM1NkFBN0M5MENCRTY5MUNDNkY0NC8wLzMyMzgzMDMzM2E2NjMyMzQzMDNhNjYz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMxMzUzMDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAPyQPAwDQYJKoZIhvcNAQELBQADggEBABIFBDtrY27GEfIVHF5KjuNbdcp4
6d7N0OZeRjvyR/lPxT2LM+pbxYsrczy5nDOjVGQmfYyECNPkPcYd64rijh9fPpMf
L4RWfAifhwiYWhuB50b4MW7Maxov+v6rXowKrMyR0xqwudgxTLlbZ3hq9FoErmjj
IvHwtLNKMIe9wgDsB+3M8zs1T2oRKyMWyHfP7Xo4pB4/3IQywmiKx49Ng6XVN/12
HbWXyVZvi1lIWukp8A62rCS0PNYr9YFMcxRCfhozRnvdapgeX0SfXayZwTkCV47F
TS6PInLSRTN5I1IV5+xxrEdo72zwtSmY4kvwchfMs7QBoQfDJkof/Jig5gw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:06 2025 by rpki-client