Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          r+PyO7WLHSrPgh6ZwlmKPP90RpTQdZ4gVOxDNIxV9xM=
Subject key identifier:   9D:AD:22:C7:45:30:4D:C2:E4:DC:46:34:CC:3B:ED:AA:6C:8A:92:A8
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       7BF7BC70176F5D76CC48984475AF37F5E0CFAE37
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:47 +0000
ROA not before:           Tue 04 Feb 2025 18:09:47 +0000
ROA not after:            Tue 03 Feb 2026 18:14:47 +0000
asID:                     61461
IP address blocks:        2803:d700:9200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f7:bc:70:17:6f:5d:76:cc:48:98:44:75:af:37:f5:e0:cf:ae:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:47 2025 GMT
            Not After : Feb  3 18:14:47 2026 GMT
        Subject: CN=9DAD22C745304DC2E4DC4634CC3BEDAA6C8A92A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:03:32:da:91:f7:01:81:d4:04:07:7a:c8:
                    ee:05:6a:46:9a:23:30:c6:b2:60:66:45:3a:96:2d:
                    4c:51:70:91:69:3d:e4:d5:5b:b2:b6:86:e8:04:0d:
                    36:12:f9:57:a9:44:6d:35:3a:fc:02:1c:d4:a9:6a:
                    fa:22:11:e9:dd:31:a0:3d:c8:06:81:a4:47:99:5f:
                    aa:6d:fd:b2:5a:43:cb:f2:be:89:cc:f9:d5:1d:7f:
                    f1:a3:4c:81:8a:b8:84:a9:b7:4e:d8:57:e4:c6:8d:
                    4a:bf:dc:6e:40:8b:7a:82:ca:2b:03:62:41:24:1a:
                    46:30:a4:c2:47:ba:93:94:5e:06:a4:2b:22:22:f7:
                    65:61:d0:32:fd:9c:4e:6d:5f:0d:f9:bc:12:cc:3c:
                    8f:12:aa:c7:9b:a2:ff:68:26:65:ee:d3:fc:64:ff:
                    87:98:13:74:7e:f7:e2:ca:fb:3d:fa:b5:9b:28:58:
                    85:5b:85:73:a1:cf:11:4c:30:8c:b7:53:17:a0:01:
                    fb:1d:47:b4:5f:5a:88:23:df:6e:81:70:0a:fb:97:
                    a4:3f:81:59:2d:4d:b3:46:a3:bf:d5:a2:ee:4c:3a:
                    68:4e:49:f4:0a:82:2e:5f:0d:eb:3f:99:10:5b:84:
                    05:26:b9:5c:b0:20:f1:fe:62:35:af:3a:5e:ef:b3:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:22:C7:45:30:4D:C2:E4:DC:46:34:CC:3B:ED:AA:6C:8A:92:A8
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         db:c3:a4:19:bd:b8:a7:49:9e:b5:a0:1d:fa:4c:ab:fc:f9:3c:
         b1:31:ef:d9:1e:e4:5e:44:ee:59:4d:7c:4e:31:11:7d:9d:f7:
         7e:1e:7a:40:15:fa:56:98:ca:57:60:80:f4:83:d9:f0:30:db:
         33:aa:9a:95:84:f4:d7:87:27:1b:e8:e8:64:b6:ca:0f:bf:a0:
         c9:e4:59:e7:1a:a9:60:d7:be:c9:8e:76:52:0c:97:8b:1d:2c:
         05:ef:5b:ba:6a:18:6e:51:23:a9:26:93:f0:3b:ff:58:51:ce:
         83:8b:1b:93:e0:f4:de:ba:d5:c4:31:17:97:0a:b4:77:42:4e:
         bf:1c:e3:c3:4f:d2:67:61:c1:ef:2c:e0:76:d3:9e:e7:61:b8:
         73:32:1c:68:4d:95:52:db:a8:68:69:fe:68:78:4c:89:92:63:
         ff:8c:0b:2b:c6:b8:85:d4:bd:14:b8:20:98:60:82:40:29:71:
         d1:1a:4f:fb:65:3b:09:2a:87:23:42:1f:31:c2:2c:2c:3f:e9:
         31:83:2b:93:88:b9:cf:24:74:89:97:c9:1f:56:82:82:5e:b2:
         b9:7b:be:53:47:50:c5:77:19:0f:01:99:a4:af:1d:e1:f4:54:
         c9:5d:91:a8:aa:16:de:79:0f:b5:1e:e2:d8:19:17:2e:4d:73:
         4b:07:96:de
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUe/e8cBdvXXbMSJhEda839eDPrjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNTAyMDQxODA5NDdaFw0yNjAyMDMxODE0NDdaMDMxMTAvBgNV
BAMTKDlEQUQyMkM3NDUzMDREQzJFNERDNDYzNENDM0JFREFBNkM4QTkyQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/AMy2pH3AYHUBAd6yO4Fakaa
IzDGsmBmRTqWLUxRcJFpPeTVW7K2hugEDTYS+VepRG01OvwCHNSpavoiEendMaA9
yAaBpEeZX6pt/bJaQ8vyvonM+dUdf/GjTIGKuISpt07YV+TGjUq/3G5Ai3qCyisD
YkEkGkYwpMJHupOUXgakKyIi92Vh0DL9nE5tXw35vBLMPI8Sqsebov9oJmXu0/xk
/4eYE3R+9+LK+z36tZsoWIVbhXOhzxFMMIy3UxegAfsdR7RfWogj326BcAr7l6Q/
gVktTbNGo7/Vou5MOmhOSfQKgi5fDes/mRBbhAUmuVywIPH+YjWvOl7vs1lRAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUna0ix0UwTcLk3EY0zDvtqmyKkqgwHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzkz
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAJIwDQYJKoZIhvcNAQELBQADggEBANvDpBm9uKdJnrWgHfpMq/z5PLEx
79ke5F5E7llNfE4xEX2d934eekAV+laYyldggPSD2fAw2zOqmpWE9NeHJxvo6GS2
yg+/oMnkWecaqWDXvsmOdlIMl4sdLAXvW7pqGG5RI6kmk/A7/1hRzoOLG5Pg9N66
1cQxF5cKtHdCTr8c48NP0mdhwe8s4HbTnudhuHMyHGhNlVLbqGhp/mh4TImSY/+M
CyvGuIXUvRS4IJhggkApcdEaT/tlOwkqhyNCHzHCLCw/6TGDK5OIuc8kdImXyR9W
goJesrl7vlNHUMV3GQ8BmaSvHeH0VMldkaiqFt55D7Ue4tgZFy5Nc0sHlt4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:23 2025 by rpki-client