Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa
File:                     323830333a343831303a3a2f33322d3332203d3e20323731383136.roa (raw, json)
Hash identifier:          1xEvJufL4G/ZIVYCmKS3ZZvs+pS64a8J/0s6MMwzs/U=
Subject key identifier:   AA:27:AD:1C:3F:F0:13:95:90:8B:43:A9:E0:5F:0A:28:56:5B:88:EA
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       72CD6EA628920868E1E3E35B4EE9AF1C3F742D91
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa
Signing time:             Tue 04 Feb 2025 18:32:24 +0000
ROA not before:           Tue 04 Feb 2025 18:27:24 +0000
ROA not after:            Tue 03 Feb 2026 18:32:24 +0000
asID:                     271816
IP address blocks:        2803:4810::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cd:6e:a6:28:92:08:68:e1:e3:e3:5b:4e:e9:af:1c:3f:74:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Feb  4 18:27:24 2025 GMT
            Not After : Feb  3 18:32:24 2026 GMT
        Subject: CN=AA27AD1C3FF01395908B43A9E05F0A28565B88EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:92:4c:6e:26:85:e8:2e:4d:d8:af:cb:ff:
                    b9:5e:8c:34:3f:07:55:7f:6a:ac:69:7f:1d:ed:72:
                    f7:57:4f:67:4f:6f:85:b0:7c:80:56:af:1a:13:1c:
                    6a:8a:b0:e5:b8:4e:b3:6f:09:e0:91:31:20:29:17:
                    f2:d1:ef:c4:46:32:0e:c5:d1:8f:a5:d9:d8:92:fd:
                    ee:40:0f:a6:8d:d3:1f:bc:dd:a3:0b:25:bf:9a:a4:
                    67:48:31:82:15:b3:31:84:a6:0f:47:41:43:9c:9d:
                    af:7c:a0:d9:7e:f1:b0:c3:dc:3a:68:2e:9d:25:62:
                    29:fc:57:b8:44:4f:61:29:46:45:ee:8e:79:2b:0f:
                    c7:bd:d0:0e:33:fa:2e:29:95:35:26:6b:04:72:9c:
                    b5:7f:66:cf:8e:79:b7:86:37:a9:ae:38:9a:3c:ab:
                    d0:94:b6:97:0b:d3:ab:69:fb:2d:eb:f2:2f:d4:8b:
                    c3:07:fc:65:68:4c:51:59:75:63:42:94:2f:60:b3:
                    ee:57:4f:51:d4:6c:e8:17:80:2d:f5:b0:f5:e7:47:
                    13:b9:5c:56:f1:c5:f7:33:27:31:c4:3a:8a:f5:7d:
                    98:42:a8:ac:53:15:63:ca:ef:a8:ec:fa:08:7c:f5:
                    09:be:3d:2d:8e:91:b6:91:45:f1:62:7d:0a:60:9d:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:AD:1C:3F:F0:13:95:90:8B:43:A9:E0:5F:0A:28:56:5B:88:EA
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4810::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:51:27:5a:99:41:d5:93:e2:07:21:50:70:3f:a5:44:64:
         2d:8c:f0:64:f5:68:26:91:1a:ef:b9:c0:c1:1f:80:91:85:b7:
         14:be:be:2a:c7:92:c7:c0:8d:70:64:65:74:4a:63:ab:a4:5e:
         ee:23:2b:48:3d:d0:72:15:23:8e:c1:d1:b4:fe:a4:8e:a4:74:
         37:00:35:6f:a5:a7:9b:6e:31:98:5e:a6:58:75:3a:56:bc:d8:
         bb:95:85:2f:ed:7f:f9:36:f3:3e:b8:5a:2c:b8:35:42:65:70:
         a0:bd:1d:91:80:ee:0c:2e:dc:42:10:25:b6:fa:9a:e6:11:6b:
         73:df:06:aa:fc:7e:5e:29:6d:d5:5b:a5:02:5e:67:c6:c2:3e:
         43:33:41:b3:3d:68:66:7d:2c:5d:44:de:a8:bc:72:0c:e7:35:
         04:a4:9e:09:59:8f:e8:11:89:98:eb:7f:29:7f:c1:13:dc:4d:
         dd:65:3a:ec:33:f0:b8:0e:f9:6c:58:25:59:7b:bc:8a:0f:de:
         60:5a:2c:fa:9a:25:be:d4:74:9f:5f:d7:82:ae:8b:53:99:59:
         2c:90:a5:1f:c7:31:9f:04:6a:01:f9:d9:07:da:75:a9:0f:dc:
         6a:b9:f8:a9:41:65:05:e0:24:b0:fc:bb:4c:16:6c:fa:d8:4c:
         91:a0:cd:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcs1upiiSCGjh4+NbTumvHD90LZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhCQzkxQTdGQkZEMzRFOEQyMzkxMUEyRDA1NjBDMkJE
MTg0REUxMTAeFw0yNTAyMDQxODI3MjRaFw0yNjAyMDMxODMyMjRaMDMxMTAvBgNV
BAMTKEFBMjdBRDFDM0ZGMDEzOTU5MDhCNDNBOUUwNUYwQTI4NTY1Qjg4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7ZJMbiaF6C5N2K/L/7lejDQ/
B1V/aqxpfx3tcvdXT2dPb4WwfIBWrxoTHGqKsOW4TrNvCeCRMSApF/LR78RGMg7F
0Y+l2diS/e5AD6aN0x+83aMLJb+apGdIMYIVszGEpg9HQUOcna98oNl+8bDD3Dpo
Lp0lYin8V7hET2EpRkXujnkrD8e90A4z+i4plTUmawRynLV/Zs+OebeGN6muOJo8
q9CUtpcL06tp+y3r8i/Ui8MH/GVoTFFZdWNClC9gs+5XT1HUbOgXgC31sPXnRxO5
XFbxxfczJzHEOor1fZhCqKxTFWPK76js+gh89Qm+PS2OkbaRRfFifQpgnSl7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqietHD/wE5WQi0Op4F8KKFZbiOowHwYDVR0j
BBgwFoAUCLyRp/v9NOjSORGi0FYMK9GE3hEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNTY0QTY3QkVEOUZBN0U2OThBREZCMzMyQ0JFMDYwOTJB
NzA5QUQyQkZCQzdBNjYzNDhBRTc5NzQ0MjhEQjVDLzAvMDhCQzkxQTdGQkZEMzRF
OEQyMzkxMUEyRDA1NjBDMkJEMTg0REUxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEJDOTFBN0ZCRkQzNEU4RDIz
OTExQTJEMDU2MEMyQkQxODRERTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzU2NEE2N0JFRDlGQTdFNjk4QURGQjMzMkNCRTA2MDkyQTcwOUFEMkJG
QkM3QTY2MzQ4QUU3OTc0NDI4REI1Qy8wLzMyMzgzMDMzM2EzNDM4MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSBAw
DQYJKoZIhvcNAQELBQADggEBADgcUSdamUHVk+IHIVBwP6VEZC2M8GT1aCaRGu+5
wMEfgJGFtxS+virHksfAjXBkZXRKY6ukXu4jK0g90HIVI47B0bT+pI6kdDcANW+l
p5tuMZheplh1Ola82LuVhS/tf/k28z64Wiy4NUJlcKC9HZGA7gwu3EIQJbb6muYR
a3PfBqr8fl4pbdVbpQJeZ8bCPkMzQbM9aGZ9LF1E3qi8cgznNQSknglZj+gRiZjr
fyl/wRPcTd1lOuwz8LgO+WxYJVl7vIoP3mBaLPqaJb7UdJ9f14Kui1OZWSyQpR/H
MZ8EagH52QfadakP3Gq5+KlBZQXgJLD8u0wWbPrYTJGgzZ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:04 2025 by rpki-client