Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa
File:                     323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa (raw, json)
Hash identifier:          F4uHTw72eWGX+XaI25EAk7D1VFg1uedCZvkINYTHJSg=
Subject key identifier:   C4:70:00:F5:5C:35:89:0B:A7:F0:8C:D1:9D:B5:F6:61:DA:A7:0E:35
Certificate issuer:       /CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
Certificate serial:       61FF3849257805C54049622FD4C2D9305C08401C
Authority key identifier: C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa
Signing time:             Tue 04 Feb 2025 18:23:27 +0000
ROA not before:           Tue 04 Feb 2025 18:18:27 +0000
ROA not after:            Tue 03 Feb 2026 18:23:27 +0000
asID:                     273140
IP address blocks:        2803:8c50:8000::/33 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ff:38:49:25:78:05:c5:40:49:62:2f:d4:c2:d9:30:5c:08:40:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
        Validity
            Not Before: Feb  4 18:18:27 2025 GMT
            Not After : Feb  3 18:23:27 2026 GMT
        Subject: CN=C47000F55C35890BA7F08CD19DB5F661DAA70E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:e4:5c:13:62:66:21:e4:7a:e4:ed:de:f9:
                    30:86:87:27:a2:38:94:5a:9c:e1:ac:3f:c0:47:b1:
                    92:40:74:be:f2:91:39:0c:18:61:f5:54:01:f5:0c:
                    3f:9c:4e:50:e3:ce:be:71:10:a0:06:32:97:74:40:
                    e0:b8:90:e9:e9:83:9d:dd:3b:f7:05:fa:85:86:a5:
                    d4:08:1f:1f:1d:b4:ea:dc:74:ec:01:a6:35:c5:e1:
                    1f:8d:26:ad:54:a9:c7:91:a7:ba:66:bf:cc:9c:10:
                    de:74:6c:a6:aa:97:b7:9f:c4:41:3b:c2:33:d9:d4:
                    c2:19:c0:6c:5a:3f:63:70:6c:aa:5e:9f:45:22:62:
                    f0:ab:69:b6:6b:d9:3e:f2:72:53:8e:b0:93:a6:41:
                    e7:0f:21:a9:88:c6:fb:e7:e4:fc:ec:e5:a9:e0:b7:
                    b3:b4:26:06:16:65:30:cd:57:1e:1d:87:6f:a0:11:
                    39:45:8a:2a:db:1a:72:24:80:e1:95:44:79:4d:7f:
                    8b:f4:12:5e:c9:af:8d:58:8b:75:bd:0b:4b:08:39:
                    64:07:8f:6d:61:13:80:eb:59:cb:68:b7:a2:d6:88:
                    8e:9e:e1:88:f7:be:07:e6:a4:40:a9:42:d0:a1:fe:
                    60:38:47:c2:93:0f:4c:6f:fb:fb:96:03:c4:3e:9a:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:00:F5:5C:35:89:0B:A7:F0:8C:D1:9D:B5:F6:61:DA:A7:0E:35
            X509v3 Authority Key Identifier:
                keyid:C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:40:15:64:0f:33:28:c8:25:3f:13:87:34:f3:7e:61:5d:69:
         22:f0:fd:9a:99:85:96:f5:0a:92:0f:db:a0:55:24:31:f2:3c:
         86:f6:f2:08:b6:3c:92:0c:5c:15:6c:02:20:1b:ed:c7:8a:21:
         5e:69:b2:84:4c:dc:cd:66:5a:87:44:70:6c:60:67:ef:3c:bd:
         f3:01:90:14:88:d3:a5:81:44:78:c2:df:98:cc:79:cb:2c:df:
         76:15:b5:32:fe:29:c1:93:b1:1d:08:22:90:9b:1b:9d:04:ac:
         75:41:91:df:48:9c:4f:3a:3b:ec:7e:ed:6d:7e:33:6f:9a:3b:
         96:13:38:e6:a4:68:d2:7d:22:37:85:40:6b:6f:1f:fa:b6:a2:
         63:18:37:e6:52:40:f0:1b:f1:5c:58:bc:50:15:b4:b4:be:e3:
         98:6f:b9:ce:b9:3b:a7:6e:d2:b0:83:45:3d:f3:7c:06:16:4c:
         5a:f2:76:69:79:60:d8:65:5c:94:04:d1:c6:dc:4b:c5:82:86:
         2d:3c:2e:d5:eb:80:49:a9:f2:6f:16:cb:f1:85:62:84:27:d9:
         fb:72:08:f1:59:53:7e:7f:a6:5c:06:49:b1:8c:14:c8:bb:d1:
         67:54:b6:cf:20:45:a5:f1:08:d2:4b:00:8e:39:09:4c:44:94:
         be:d8:d7:6b
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUYf84SSV4BcVASWIv1MLZMFwIQBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg1ODVGNjk3MzJEMzM2MzIwQ0MxNTg4REM2QjE2RDlG
NTREREU5QjAeFw0yNTAyMDQxODE4MjdaFw0yNjAyMDMxODIzMjdaMDMxMTAvBgNV
BAMTKEM0NzAwMEY1NUMzNTg5MEJBN0YwOENEMTlEQjVGNjYxREFBNzBFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkORcE2JmIeR65O3e+TCGhyei
OJRanOGsP8BHsZJAdL7ykTkMGGH1VAH1DD+cTlDjzr5xEKAGMpd0QOC4kOnpg53d
O/cF+oWGpdQIHx8dtOrcdOwBpjXF4R+NJq1UqceRp7pmv8ycEN50bKaql7efxEE7
wjPZ1MIZwGxaP2NwbKpen0UiYvCrabZr2T7yclOOsJOmQecPIamIxvvn5Pzs5ang
t7O0JgYWZTDNVx4dh2+gETlFiirbGnIkgOGVRHlNf4v0El7Jr41Yi3W9C0sIOWQH
j21hE4DrWctot6LWiI6e4Yj3vgfmpECpQtCh/mA4R8KTD0xv+/uWA8Q+mjaNAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUxHAA9Vw1iQun8IzRnbX2YdqnDjUwHwYDVR0j
BBgwFoAUyFhfaXMtM2MgzBWI3GsW2fVN3pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUNDRUM3MEMxREE4MjUzRTc2OUQ4OTMwNjQ3QURFOTBE
ODQ1QzFERkMzNEQyM0MxNkQ3Nzk4REM3OTkzOUVFLzAvQzg1ODVGNjk3MzJEMzM2
MzIwQ0MxNTg4REM2QjE2RDlGNTREREU5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODU4NUY2OTczMkQzMzYzMjBD
QzE1ODhEQzZCMTZEOUY1NERERTlCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlDQ0VDNzBDMURBODI1M0U3NjlEODkzMDY0N0FERTkwRDg0NUMxREZD
MzREMjNDMTZENzc5OERDNzk5MzlFRS8wLzMyMzgzMDMzM2EzODYzMzUzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzNDMwMjAzZDNlMjAzMjM3MzMzMTM0MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgcoA4xQgDANBgkqhkiG9w0BAQsFAAOCAQEAIUAVZA8zKMglPxOHNPN+YV1p
IvD9mpmFlvUKkg/boFUkMfI8hvbyCLY8kgxcFWwCIBvtx4ohXmmyhEzczWZah0Rw
bGBn7zy98wGQFIjTpYFEeMLfmMx5yyzfdhW1Mv4pwZOxHQgikJsbnQSsdUGR30ic
Tzo77H7tbX4zb5o7lhM45qRo0n0iN4VAa28f+raiYxg35lJA8BvxXFi8UBW0tL7j
mG+5zrk7p27SsINFPfN8BhZMWvJ2aXlg2GVclATRxtxLxYKGLTwu1euASanybxbL
8YVihCfZ+3II8VlTfn+mXAZJsYwUyLvRZ1S2zyBFpfEI0ksAjjkJTESUvtjXaw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:26 2025 by rpki-client