Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          ILaTjdwm3M42CqqNv16miLrsXQRYfti0PHh1BWzocig=
Subject key identifier:   29:5F:46:69:30:75:3D:01:42:06:95:6A:3D:51:59:61:28:45:8F:1B
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       5E535F89870BC3FC70C3944D4F8F31FB61029F0D
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:53 +0000
ROA not before:           Tue 04 Feb 2025 18:09:53 +0000
ROA not after:            Tue 03 Feb 2026 18:14:53 +0000
asID:                     61461
IP address blocks:        2803:d700:9400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:5f:89:87:0b:c3:fc:70:c3:94:4d:4f:8f:31:fb:61:02:9f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:53 2025 GMT
            Not After : Feb  3 18:14:53 2026 GMT
        Subject: CN=295F466930753D014206956A3D51596128458F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:89:c9:e3:ad:4d:ec:90:b8:a6:cc:c1:3b:
                    47:06:0e:ef:ae:6b:58:83:82:8b:87:73:13:77:ea:
                    23:bb:01:59:9e:4c:e3:bd:1d:bc:71:6d:de:42:2d:
                    25:b9:a9:2f:a9:16:90:23:9b:9c:d8:d4:b4:b5:da:
                    86:89:66:11:7a:39:c2:bc:76:a9:c9:36:85:8c:4b:
                    b9:14:a7:11:8a:e9:6d:f3:25:56:93:d8:ae:e7:8b:
                    54:52:1f:d1:6a:a9:4d:bc:9f:27:a0:6b:21:15:03:
                    a5:41:a8:f1:df:51:04:49:c1:fc:68:e5:7e:1e:ab:
                    2a:8f:f2:6b:88:70:f4:f0:3c:61:19:66:94:7d:57:
                    22:dd:11:97:06:72:0a:9a:42:5d:3d:e5:34:49:b4:
                    d3:c0:55:79:f9:03:4a:08:20:44:38:1b:d4:b9:ab:
                    c7:44:2f:6a:5f:01:2b:4e:3b:b0:2e:60:11:24:30:
                    e3:b8:36:11:df:a5:16:e8:d1:38:dc:f7:6e:0c:bf:
                    85:c5:ef:82:5d:f7:36:ac:b9:84:b9:65:14:ca:ee:
                    e8:49:db:f6:3e:fa:16:7f:a7:c0:42:bd:65:db:19:
                    16:14:b0:b2:4d:a3:80:eb:96:2e:16:19:b9:07:78:
                    4e:0a:1b:ba:80:ea:55:0c:44:9b:07:53:4c:8e:3a:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:46:69:30:75:3D:01:42:06:95:6A:3D:51:59:61:28:45:8F:1B
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:be:7f:b9:bd:74:f1:28:f8:6b:1a:09:a1:08:10:65:d5:63:
         2d:a9:1c:67:97:88:41:6a:cd:2e:2d:3b:01:c5:9f:5e:95:86:
         49:48:67:23:ea:45:07:51:41:d6:3b:c0:f3:3c:4f:06:11:d1:
         31:da:ba:fa:fd:4b:f1:2c:cd:fe:91:99:e0:8c:e2:71:bb:eb:
         7d:ec:63:fd:53:5b:2c:9a:9f:b5:bd:67:69:81:09:a4:9e:ee:
         2a:c2:f3:e8:39:2e:cf:be:cc:d3:e0:75:37:ba:09:57:ab:67:
         b3:d1:e3:75:9f:6d:7c:66:95:9d:a1:83:69:1b:64:6a:ef:d6:
         83:d1:03:2a:31:f5:ea:13:4a:07:0a:f5:d8:76:dc:b1:f8:b3:
         cd:3b:d3:f3:39:bb:cd:8d:2f:a4:d6:9a:19:26:68:32:ff:a4:
         29:dc:fe:cc:e0:58:c8:5e:24:c9:b4:94:be:84:d1:ca:d1:22:
         3e:db:56:e9:a9:87:4a:52:da:17:04:cf:96:da:a6:df:bf:cc:
         6a:95:98:3b:7e:df:c1:34:07:32:f9:6d:2d:dc:b9:d6:3f:81:
         fc:7e:e1:96:f2:29:e8:ee:8f:4d:a0:08:3f:64:1a:81:2f:9f:
         cc:a0:c7:df:97:78:71:8d:e5:7a:33:e1:a7:06:3e:70:b6:a1:
         1e:1e:f8:d4
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUXlNfiYcLw/xww5RNT48x+2ECnw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNTAyMDQxODA5NTNaFw0yNjAyMDMxODE0NTNaMDMxMTAvBgNV
BAMTKDI5NUY0NjY5MzA3NTNEMDE0MjA2OTU2QTNENTE1OTYxMjg0NThGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37onJ461N7JC4pszBO0cGDu+u
a1iDgouHcxN36iO7AVmeTOO9Hbxxbd5CLSW5qS+pFpAjm5zY1LS12oaJZhF6OcK8
dqnJNoWMS7kUpxGK6W3zJVaT2K7ni1RSH9FqqU28nyegayEVA6VBqPHfUQRJwfxo
5X4eqyqP8muIcPTwPGEZZpR9VyLdEZcGcgqaQl095TRJtNPAVXn5A0oIIEQ4G9S5
q8dEL2pfAStOO7AuYBEkMOO4NhHfpRbo0Tjc924Mv4XF74Jd9zasuYS5ZRTK7uhJ
2/Y++hZ/p8BCvWXbGRYUsLJNo4Drli4WGbkHeE4KG7qA6lUMRJsHU0yOOnyhAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUKV9GaTB1PQFCBpVqPVFZYShFjxswHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzkz
NDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAJQwDQYJKoZIhvcNAQELBQADggEBABO+f7m9dPEo+GsaCaEIEGXVYy2p
HGeXiEFqzS4tOwHFn16VhklIZyPqRQdRQdY7wPM8TwYR0THauvr9S/Eszf6RmeCM
4nG7633sY/1TWyyan7W9Z2mBCaSe7irC8+g5Ls++zNPgdTe6CVerZ7PR43WfbXxm
lZ2hg2kbZGrv1oPRAyox9eoTSgcK9dh23LH4s8070/M5u82NL6TWmhkmaDL/pCnc
/szgWMheJMm0lL6E0crRIj7bVumph0pS2hcEz5bapt+/zGqVmDt+38E0BzL5bS3c
udY/gfx+4ZbyKejuj02gCD9kGoEvn8ygx9+XeHGN5Xoz4acGPnC2oR4e+NQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client