Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          1Mw+2vKaErbRFTaNShOSEtjEiSG4bF+ktfwHBPl/Hrc=
Subject key identifier:   07:2D:A9:FA:F9:6A:81:6F:CE:AA:AA:BF:C9:98:74:25:5B:9B:2B:F3
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       2F60898EB8378FA7645F2D21D3EE23EDA264E352
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:52 +0000
ROA not before:           Tue 04 Feb 2025 18:09:52 +0000
ROA not after:            Tue 03 Feb 2026 18:14:52 +0000
asID:                     61461
IP address blocks:        2803:d700:9b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:89:8e:b8:37:8f:a7:64:5f:2d:21:d3:ee:23:ed:a2:64:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:52 2025 GMT
            Not After : Feb  3 18:14:52 2026 GMT
        Subject: CN=072DA9FAF96A816FCEAAAABFC99874255B9B2BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:49:bb:5b:5f:55:f1:63:d9:e2:9d:6b:89:
                    b1:97:9c:f5:0c:a3:85:2e:d1:a8:b5:29:8a:f5:8d:
                    cf:a0:ad:c3:1a:9e:2b:d9:73:b3:b2:c2:9b:34:af:
                    de:80:fd:b2:88:21:8b:f0:9a:4c:d6:77:2c:e5:19:
                    4c:d3:05:1a:40:3c:6b:8c:7f:5c:57:c2:f3:34:f1:
                    a6:18:3b:43:fd:d3:c2:f3:6f:50:b2:5a:53:03:aa:
                    b1:0d:cc:8b:59:ea:f6:de:35:ce:15:72:a3:f6:40:
                    bb:2e:44:92:c1:8d:54:e0:f1:c6:a3:14:82:51:a0:
                    69:83:e7:45:01:ed:32:7a:78:1b:52:77:e7:69:41:
                    59:6a:5a:1a:18:45:8d:7c:63:dd:b0:7a:95:60:90:
                    b4:7d:a1:9e:85:37:b8:cc:9a:a1:10:4a:cc:d2:a4:
                    a2:da:d3:d1:60:c3:52:1d:3d:6e:dd:8a:c3:a8:62:
                    e2:0b:12:5e:2b:5d:aa:ea:aa:cb:0c:c7:e0:bf:5a:
                    54:27:da:1b:fc:04:d5:6a:eb:c4:ff:27:b9:2f:f3:
                    ae:62:8a:18:ee:2a:c7:d4:95:bc:53:a2:ca:73:36:
                    0f:8c:bd:08:b2:79:6d:c3:0c:1e:c4:25:f2:a2:47:
                    1e:a8:00:60:53:f7:c5:47:a4:69:d4:ca:8c:95:c3:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2D:A9:FA:F9:6A:81:6F:CE:AA:AA:BF:C9:98:74:25:5B:9B:2B:F3
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:9e:72:3b:9b:c1:c9:ad:68:c5:fd:c9:e6:1a:5b:e8:b2:a2:
         99:da:cf:2c:e5:e1:4b:0e:85:ec:8c:a2:ab:41:d2:94:c5:2c:
         d9:54:02:1c:a4:9c:e2:a3:c6:a0:80:58:84:ee:88:50:fd:7c:
         7b:57:62:11:d1:b9:35:05:50:de:9d:e5:f0:71:eb:32:b5:a6:
         29:af:fe:20:f5:a9:b1:5a:c7:6d:36:9c:17:01:d3:ff:4b:57:
         a7:9c:69:67:58:dd:de:9a:bd:db:a8:f5:36:ea:33:3e:d9:3f:
         39:a1:f8:73:84:47:49:05:d4:d6:78:69:a2:a4:18:ed:a5:60:
         ba:96:ef:a5:e0:97:f9:cb:19:24:74:63:2f:39:c8:a1:ea:16:
         32:e2:15:7f:29:bc:01:8e:ef:92:8c:4e:d8:a4:fa:f9:d9:64:
         2d:57:48:f8:90:69:36:09:9b:9a:06:8a:c7:9e:65:23:24:95:
         da:43:2b:84:d9:cb:d7:24:d1:5b:2b:23:65:9c:15:25:1b:85:
         3b:85:e4:0c:77:f0:ba:9c:ad:30:76:80:2d:7a:5e:f9:be:f1:
         ff:3d:ef:e7:a5:29:9b:c6:1b:cf:ab:fd:65:5d:1d:8d:65:d9:
         33:84:a4:e1:1c:00:17:9d:bd:20:69:00:ad:9a:81:4b:38:ee:
         2e:c6:fd:36
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUL2CJjrg3j6dkXy0h0+4j7aJk41IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNTAyMDQxODA5NTJaFw0yNjAyMDMxODE0NTJaMDMxMTAvBgNV
BAMTKDA3MkRBOUZBRjk2QTgxNkZDRUFBQUFCRkM5OTg3NDI1NUI5QjJCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMUm7W19V8WPZ4p1ribGXnPUM
o4Uu0ai1KYr1jc+grcManivZc7Oywps0r96A/bKIIYvwmkzWdyzlGUzTBRpAPGuM
f1xXwvM08aYYO0P908Lzb1CyWlMDqrENzItZ6vbeNc4VcqP2QLsuRJLBjVTg8caj
FIJRoGmD50UB7TJ6eBtSd+dpQVlqWhoYRY18Y92wepVgkLR9oZ6FN7jMmqEQSszS
pKLa09Fgw1IdPW7disOoYuILEl4rXarqqssMx+C/WlQn2hv8BNVq68T/J7kv865i
ihjuKsfUlbxTospzNg+MvQiyeW3DDB7EJfKiRx6oAGBT98VHpGnUyoyVw4ajAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUBy2p+vlqgW/Oqqq/yZh0JVubK/MwHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzk2
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAJswDQYJKoZIhvcNAQELBQADggEBAMeecjubwcmtaMX9yeYaW+iyopna
zyzl4UsOheyMoqtB0pTFLNlUAhyknOKjxqCAWITuiFD9fHtXYhHRuTUFUN6d5fBx
6zK1pimv/iD1qbFax202nBcB0/9LV6ecaWdY3d6avduo9TbqMz7ZPzmh+HOER0kF
1NZ4aaKkGO2lYLqW76Xgl/nLGSR0Yy85yKHqFjLiFX8pvAGO75KMTtik+vnZZC1X
SPiQaTYJm5oGiseeZSMkldpDK4TZy9ck0VsrI2WcFSUbhTuF5Ax38LqcrTB2gC16
Xvm+8f897+elKZvGG8+r/WVdHY1l2TOEpOEcABedvSBpAK2agUs47i7G/TY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:13 2025 by rpki-client