Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/323830333a356234303a3a2f33322d3438203d3e20323634373136.roa
File:                     323830333a356234303a3a2f33322d3438203d3e20323634373136.roa (raw, json)
Hash identifier:          luH3ojEUCxVB72+1rPS4Q8LzNTopKMU+1Wz+8FGuM4s=
Subject key identifier:   7A:6D:79:85:25:E3:3F:16:44:2C:19:44:23:4D:55:5B:B8:72:48:26
Certificate issuer:       /CN=6DE888EFA2956802EC74153A5670BFB030384D0F
Certificate serial:       7489AD5FFD0E37EF86F2CFEED9BB152A0F06C23B
Authority key identifier: 6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/323830333a356234303a3a2f33322d3438203d3e20323634373136.roa
Signing time:             Tue 04 Feb 2025 18:24:43 +0000
ROA not before:           Tue 04 Feb 2025 18:19:43 +0000
ROA not after:            Tue 03 Feb 2026 18:24:43 +0000
asID:                     264716
IP address blocks:        2803:5b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:ad:5f:fd:0e:37:ef:86:f2:cf:ee:d9:bb:15:2a:0f:06:c2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE888EFA2956802EC74153A5670BFB030384D0F
        Validity
            Not Before: Feb  4 18:19:43 2025 GMT
            Not After : Feb  3 18:24:43 2026 GMT
        Subject: CN=7A6D798525E33F16442C1944234D555BB8724826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:89:6c:f5:d4:35:50:75:72:82:29:a8:8d:
                    60:fa:e4:1a:fb:6e:39:ea:58:f0:e2:9e:63:f9:90:
                    df:7e:a4:27:2a:49:03:78:2c:8a:a5:3e:f4:57:f8:
                    4f:f3:a3:ca:13:64:5a:4d:7e:a4:3a:4f:89:2d:79:
                    c3:71:24:9a:3c:c8:1f:4e:37:72:b4:f2:20:32:25:
                    66:69:ef:ca:95:3a:0f:2f:50:6c:32:e5:31:e0:12:
                    70:ac:f5:67:b9:45:68:e6:b2:6f:c6:49:2d:f3:44:
                    ec:71:6b:85:43:c2:7c:00:e4:8e:7e:41:64:77:a4:
                    60:0b:10:01:ca:81:6c:0f:ae:ed:f1:e7:36:c7:5c:
                    ed:59:cd:5a:c3:b0:2c:f5:db:17:44:7a:cd:44:07:
                    66:0a:7d:d8:de:21:00:c3:02:01:16:ce:67:8a:c0:
                    0a:9a:8a:72:d5:bb:16:bf:7a:e2:1a:63:40:41:44:
                    d4:83:36:10:ef:f6:7f:2d:fe:f4:d1:ac:d4:dc:d0:
                    5d:1d:8e:fa:7b:37:d7:78:b6:41:e4:e3:c3:dc:03:
                    53:b2:85:f3:43:f1:7b:59:ce:4b:ab:3d:09:76:8e:
                    19:2f:e0:92:4d:aa:d1:a2:64:94:78:0f:74:6f:7f:
                    1a:40:5f:c1:49:b2:84:b9:1c:c3:ba:32:98:27:63:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:79:85:25:E3:3F:16:44:2C:19:44:23:4D:55:5B:B8:72:48:26
            X509v3 Authority Key Identifier:
                keyid:6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/323830333a356234303a3a2f33322d3438203d3e20323634373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:55:64:12:d3:1b:b7:6e:ac:83:8d:a5:8d:f7:f1:72:df:ba:
         a2:e1:86:fe:e0:7d:ba:3d:3f:50:3b:61:71:27:ab:a9:2e:db:
         ac:9c:62:cf:40:08:d5:95:35:86:6e:e6:63:f0:89:ac:e7:56:
         ce:75:1c:ac:14:eb:ea:01:d2:86:ac:8a:05:bd:ea:f2:79:97:
         85:4f:8a:53:6b:d3:a4:9b:7d:b2:72:1d:55:d8:cd:6f:48:be:
         fc:25:90:39:bf:5c:b4:9d:9f:d7:05:ef:94:50:61:f2:20:85:
         8f:17:ad:5b:4c:f2:cf:85:8a:ea:aa:d4:80:4b:4b:36:2c:87:
         ed:f8:2a:25:2a:27:ef:a4:bd:30:d0:40:5e:5f:39:18:a7:5c:
         ad:f2:73:42:88:3a:e0:b4:59:38:d1:a0:af:d9:e0:05:c1:1f:
         c9:80:7c:52:59:2e:23:82:fc:4d:eb:a8:41:70:9d:ff:f6:a1:
         ce:0a:aa:06:9b:81:a0:d4:05:a7:42:44:3d:08:9a:00:51:98:
         bf:d0:6a:b2:22:2f:7f:cf:00:5a:95:1f:96:8a:a2:41:ab:7c:
         0b:1d:bf:b9:04:0f:4e:a7:52:31:f7:f2:71:66:4a:b8:d8:88:
         66:4c:5a:59:dd:aa:64:35:af:61:c7:13:c1:3e:c9:a4:7e:fb:
         f6:a8:8a:ab
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdImtX/0ON++G8s/u2bsVKg8GwjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRFODg4RUZBMjk1NjgwMkVDNzQxNTNBNTY3MEJGQjAz
MDM4NEQwRjAeFw0yNTAyMDQxODE5NDNaFw0yNjAyMDMxODI0NDNaMDMxMTAvBgNV
BAMTKDdBNkQ3OTg1MjVFMzNGMTY0NDJDMTk0NDIzNEQ1NTVCQjg3MjQ4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxk4ls9dQ1UHVygimojWD65Br7
bjnqWPDinmP5kN9+pCcqSQN4LIqlPvRX+E/zo8oTZFpNfqQ6T4ktecNxJJo8yB9O
N3K08iAyJWZp78qVOg8vUGwy5THgEnCs9We5RWjmsm/GSS3zROxxa4VDwnwA5I5+
QWR3pGALEAHKgWwPru3x5zbHXO1ZzVrDsCz12xdEes1EB2YKfdjeIQDDAgEWzmeK
wAqainLVuxa/euIaY0BBRNSDNhDv9n8t/vTRrNTc0F0djvp7N9d4tkHk48PcA1Oy
hfND8XtZzkurPQl2jhkv4JJNqtGiZJR4D3RvfxpAX8FJsoS5HMO6MpgnY0R9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUem15hSXjPxZELBlEI01VW7hySCYwHwYDVR0j
BBgwFoAUbeiI76KVaALsdBU6VnC/sDA4TQ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODhGQ0YwNkNDQzBGQTVCMEQ5MjY3QTIxN0M4RTJGQzc0
QUIyNkNBNTUwODIzQzVGMEFFNkY4QUZGMTc2MjMwLzAvNkRFODg4RUZBMjk1Njgw
MkVDNzQxNTNBNTY3MEJGQjAzMDM4NEQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82REU4ODhFRkEyOTU2ODAyRUM3
NDE1M0E1NjcwQkZCMDMwMzg0RDBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg4RkNGMDZDQ0MwRkE1QjBEOTI2N0EyMTdDOEUyRkM3NEFCMjZDQTU1
MDgyM0M1RjBBRTZGOEFGRjE3NjIzMC8wLzMyMzgzMDMzM2EzNTYyMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDW0Aw
DQYJKoZIhvcNAQELBQADggEBAClVZBLTG7durIONpY338XLfuqLhhv7gfbo9P1A7
YXEnq6ku26ycYs9ACNWVNYZu5mPwiaznVs51HKwU6+oB0oasigW96vJ5l4VPilNr
06SbfbJyHVXYzW9IvvwlkDm/XLSdn9cF75RQYfIghY8XrVtM8s+Fiuqq1IBLSzYs
h+34KiUqJ++kvTDQQF5fORinXK3yc0KIOuC0WTjRoK/Z4AXBH8mAfFJZLiOC/E3r
qEFwnf/2oc4KqgabgaDUBadCRD0ImgBRmL/QarIiL3/PAFqVH5aKokGrfAsdv7kE
D06nUjH38nFmSrjYiGZMWlndqmQ1r2HHE8E+yaR++/aoiqs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:07 2025 by rpki-client