Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/323830363a3362643a3a2f34382d3438203d3e20323730313138.roa
File:                     323830363a3362643a3a2f34382d3438203d3e20323730313138.roa (raw, json)
Hash identifier:          DckXz5xiIHN4AkWDXVhIzEbH6yGS+1XAL/NUOFAHjsw=
Subject key identifier:   35:D9:28:E3:51:A6:A2:2F:9E:90:95:C1:2B:ED:6E:D8:17:29:E9:37
Certificate issuer:       /CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
Certificate serial:       345729ACA271AA7F006D44402325FB9E22C2BA32
Authority key identifier: 70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/323830363a3362643a3a2f34382d3438203d3e20323730313138.roa
Signing time:             Tue 04 Feb 2025 18:21:12 +0000
ROA not before:           Tue 04 Feb 2025 18:16:12 +0000
ROA not after:            Tue 03 Feb 2026 18:21:12 +0000
asID:                     270118
IP address blocks:        2806:3bd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:29:ac:a2:71:aa:7f:00:6d:44:40:23:25:fb:9e:22:c2:ba:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
        Validity
            Not Before: Feb  4 18:16:12 2025 GMT
            Not After : Feb  3 18:21:12 2026 GMT
        Subject: CN=35D928E351A6A22F9E9095C12BED6ED81729E937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:94:5c:7e:e0:74:2f:a8:0c:9f:ce:60:e8:
                    7c:6a:90:20:67:e9:7b:82:7a:48:01:76:21:ea:af:
                    5d:6a:ed:52:a4:2e:bd:60:6a:8a:7d:61:db:8a:b5:
                    a4:0a:60:c9:f7:e2:7d:67:98:ae:3b:81:d8:c1:3a:
                    ac:36:5e:0d:89:f9:15:d1:15:5c:9f:e9:13:6e:3f:
                    b4:a6:c0:79:4e:83:f0:ba:fa:38:1f:82:13:0f:58:
                    52:be:73:a0:db:8b:97:7f:f7:79:aa:21:5b:3b:18:
                    83:ea:f0:0d:20:26:53:e9:86:ff:b6:6c:ef:a1:53:
                    8e:96:76:3a:ea:e8:37:8d:2f:e9:63:5b:60:c8:77:
                    c5:0d:05:4e:9f:35:38:67:e5:26:82:db:66:68:14:
                    01:36:7c:60:92:4a:f0:46:07:a4:90:b9:64:40:ef:
                    d6:9c:78:ac:61:8f:9b:bb:78:1e:50:93:8b:ea:60:
                    ca:0b:e4:38:ac:a9:3d:3b:cb:11:ba:d5:3a:de:91:
                    03:cc:ce:41:3d:15:50:a3:2d:90:68:31:79:4a:c8:
                    d8:82:b3:bf:ea:da:09:99:46:6f:5d:65:43:f8:ab:
                    46:b9:d2:79:9d:bf:33:a0:60:9d:56:93:b4:8b:22:
                    bc:96:08:80:5c:c9:7f:b1:e2:6d:2b:29:1f:cd:1c:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:28:E3:51:A6:A2:2F:9E:90:95:C1:2B:ED:6E:D8:17:29:E9:37
            X509v3 Authority Key Identifier:
                keyid:70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/323830363a3362643a3a2f34382d3438203d3e20323730313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:93:50:05:db:a5:86:19:5e:61:15:45:2c:73:83:4f:5d:
         90:0f:10:49:3f:f3:db:fc:c8:c9:ea:b9:af:79:9e:f8:b3:d1:
         00:68:9c:d1:e8:1c:dc:a0:2c:1f:e0:4f:c6:c9:92:02:fa:0c:
         1f:9c:8c:16:e8:88:05:0f:ac:62:84:b4:fe:81:76:f0:9a:ca:
         57:0c:7c:14:4d:c2:46:91:90:bb:1f:73:a2:77:5a:48:82:40:
         f0:d4:dc:55:f0:29:17:ec:4a:ff:03:dc:48:07:48:99:52:11:
         54:b1:dc:d3:6e:a6:3a:a3:b3:8b:85:2c:4a:50:1c:0b:2b:00:
         26:63:e9:e7:cf:d9:11:21:ac:a7:bc:21:8a:ea:c0:32:ac:90:
         b5:ba:21:a3:fb:e1:59:ec:77:63:36:8f:c1:39:ab:1f:93:6e:
         d2:bb:06:46:d5:ba:14:cc:0f:26:62:61:54:54:93:60:65:ea:
         8c:d2:48:2e:07:3c:80:04:46:ca:17:8d:6f:f7:46:d2:2a:8d:
         4b:5b:52:6c:b5:43:4e:dd:90:49:fe:ff:52:38:3e:aa:30:43:
         5f:fa:80:59:c9:23:e0:e1:59:a6:35:1e:cc:ba:c6:78:f1:da:
         6e:25:2e:f8:51:0e:4a:7b:95:e2:8b:c2:22:f0:e6:cc:5e:89:
         c9:a6:40:58
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNFcprKJxqn8AbURAIyX7niLCujIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA2NkQ1OThCQkJBQjQyQTk2NTA5OEU2MjA4RDZBQjdC
RDA3NDBENjAeFw0yNTAyMDQxODE2MTJaFw0yNjAyMDMxODIxMTJaMDMxMTAvBgNV
BAMTKDM1RDkyOEUzNTFBNkEyMkY5RTkwOTVDMTJCRUQ2RUQ4MTcyOUU5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRJRcfuB0L6gMn85g6HxqkCBn
6XuCekgBdiHqr11q7VKkLr1gaop9YduKtaQKYMn34n1nmK47gdjBOqw2Xg2J+RXR
FVyf6RNuP7SmwHlOg/C6+jgfghMPWFK+c6Dbi5d/93mqIVs7GIPq8A0gJlPphv+2
bO+hU46Wdjrq6DeNL+ljW2DId8UNBU6fNThn5SaC22ZoFAE2fGCSSvBGB6SQuWRA
79aceKxhj5u7eB5Qk4vqYMoL5DisqT07yxG61TrekQPMzkE9FVCjLZBoMXlKyNiC
s7/q2gmZRm9dZUP4q0a50nmdvzOgYJ1Wk7SLIryWCIBcyX+x4m0rKR/NHPTVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUNdko41Gmoi+ekJXBK+1u2Bcp6TcwHwYDVR0j
BBgwFoAUcGbVmLu6tCqWUJjmII1qt70HQNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzJGMDkyQTc1QkQwODQ2NTM2RDNCRUU1MzI0QkNCNjk0
NjcwQUQ4OUQ5MEM4NDY2MzU5MDU4MzUzNjhEMjMxLzAvNzA2NkQ1OThCQkJBQjQy
QTk2NTA5OEU2MjA4RDZBQjdCRDA3NDBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MDY2RDU5OEJCQkFCNDJBOTY1
MDk4RTYyMDhENkFCN0JEMDc0MEQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyRjA5MkE3NUJEMDg0NjUzNkQzQkVFNTMyNEJDQjY5NDY3MEFEODlE
OTBDODQ2NjM1OTA1ODM1MzY4RDIzMS8wLzMyMzgzMDM2M2EzMzYyNjQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzAzMTMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBgO9AAAw
DQYJKoZIhvcNAQELBQADggEBADsGk1AF26WGGV5hFUUsc4NPXZAPEEk/89v8yMnq
ua95nviz0QBonNHoHNygLB/gT8bJkgL6DB+cjBboiAUPrGKEtP6BdvCaylcMfBRN
wkaRkLsfc6J3WkiCQPDU3FXwKRfsSv8D3EgHSJlSEVSx3NNupjqjs4uFLEpQHAsr
ACZj6efP2REhrKe8IYrqwDKskLW6IaP74Vnsd2M2j8E5qx+TbtK7BkbVuhTMDyZi
YVRUk2Bl6ozSSC4HPIAERsoXjW/3RtIqjUtbUmy1Q07dkEn+/1I4PqowQ1/6gFnJ
I+DhWaY1Hsy6xnjx2m4lLvhRDkp7leKLwiLw5sxeicmmQFg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:48 2025 by rpki-client