Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa
File:                     323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa (raw, json)
Hash identifier:          pXcUltmPJX1mPRX60MEEtE51m78n1eywr0krDtE4BZE=
Subject key identifier:   AD:BD:F9:8A:D6:7D:86:0D:BA:BA:C7:C3:83:F5:0D:FC:80:FA:66:21
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       3D0C07D320F51903771CA193C9303C58CB913C4B
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:33:44 +0000
ROA not before:           Tue 04 Feb 2025 18:28:44 +0000
ROA not after:            Tue 03 Feb 2026 18:33:44 +0000
asID:                     52468
IP address blocks:        2803:4580:c000::/35 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0c:07:d3:20:f5:19:03:77:1c:a1:93:c9:30:3c:58:cb:91:3c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Feb  4 18:28:44 2025 GMT
            Not After : Feb  3 18:33:44 2026 GMT
        Subject: CN=ADBDF98AD67D860DBABAC7C383F50DFC80FA6621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:01:fb:99:4c:dd:cc:bc:94:cc:c8:b9:c1:
                    de:a9:95:d0:6f:20:a4:1a:dd:a5:e7:77:22:db:0d:
                    12:d4:58:0d:b7:c6:8b:57:74:49:e5:39:1c:12:44:
                    ec:61:7a:a6:26:d4:6c:65:ad:1e:31:c0:47:07:9a:
                    c1:60:00:97:62:76:30:b3:8b:f5:8c:a8:d8:cd:a2:
                    e6:24:ae:2d:95:6a:c4:86:d4:d2:bb:0f:62:04:08:
                    1c:fe:08:69:7c:1b:81:92:ad:7b:98:0d:cf:eb:53:
                    fd:a7:95:2c:6c:04:44:db:f3:77:9a:1f:4c:e0:4b:
                    12:02:1e:4d:f6:e0:0c:56:16:f2:38:1c:a8:60:91:
                    5b:b7:cd:14:64:e0:c8:99:90:83:85:a2:d8:cd:27:
                    ae:87:da:6f:7b:40:e1:d3:01:da:52:38:45:d7:4c:
                    10:e8:cb:e2:98:f2:b3:0a:f7:4a:82:f9:56:d4:dc:
                    29:af:81:a2:34:1a:6c:12:ab:fc:bd:d1:fc:c7:6e:
                    1a:76:72:da:6a:45:ce:75:6a:b5:33:6a:d2:a3:8c:
                    65:a9:f2:16:be:f3:4e:11:23:95:b7:72:28:95:ab:
                    00:96:45:da:be:af:60:1f:39:53:4f:4e:d8:e8:3e:
                    7c:b1:9d:b4:2f:67:3c:29:96:0f:40:fa:f2:92:60:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:F9:8A:D6:7D:86:0D:BA:BA:C7:C3:83:F5:0D:FC:80:FA:66:21
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:2d:5c:fd:60:2c:17:b8:4b:57:79:8a:e6:7f:86:9f:c6:
         c5:60:ff:de:f9:d0:99:8e:c6:e8:9b:bb:79:f4:a5:86:dc:b0:
         e7:7d:f2:fe:9c:bb:4e:43:29:2d:92:92:f4:a4:bb:17:38:0d:
         24:7a:3e:89:9c:9c:64:2e:9f:eb:98:6b:93:b8:3e:1c:a6:8f:
         c6:ca:f7:83:57:30:a4:75:0b:d3:51:a8:44:d5:25:5e:e6:d0:
         2c:f4:6f:a8:3e:20:56:3c:5b:97:1d:58:b8:c3:e2:36:f4:de:
         d6:71:a6:89:a8:69:c2:81:77:f0:0b:6b:6b:0a:bf:ac:7c:ac:
         6f:80:17:0d:be:cc:10:90:63:23:ff:df:16:2e:cd:a7:ec:af:
         0e:f3:a5:11:3b:d7:20:83:c2:c9:56:47:18:c0:ca:1b:b1:dd:
         37:d2:10:5c:1c:79:4a:8d:9d:1c:39:d1:8c:dd:af:86:17:0b:
         ea:75:e4:9d:6b:6f:91:ec:dc:c2:eb:c8:1b:3d:31:af:a8:75:
         1f:a8:a8:54:9f:e2:d4:6d:b2:cc:2e:7c:27:2d:86:6b:bc:f6:
         af:99:72:2e:d8:67:a4:6e:3c:fa:d4:25:65:3b:db:80:8d:78:
         33:01:81:3f:cd:f0:b7:b5:d4:c5:27:f5:ed:d1:5a:28:08:f6:
         1b:5f:ad:fc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUPQwH0yD1GQN3HKGTyTA8WMuRPEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx
Qzg5OUZEQzAeFw0yNTAyMDQxODI4NDRaFw0yNjAyMDMxODMzNDRaMDMxMTAvBgNV
BAMTKEFEQkRGOThBRDY3RDg2MERCQUJBQzdDMzgzRjUwREZDODBGQTY2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNwH7mUzdzLyUzMi5wd6pldBv
IKQa3aXndyLbDRLUWA23xotXdEnlORwSROxheqYm1GxlrR4xwEcHmsFgAJdidjCz
i/WMqNjNouYkri2VasSG1NK7D2IECBz+CGl8G4GSrXuYDc/rU/2nlSxsBETb83ea
H0zgSxICHk324AxWFvI4HKhgkVu3zRRk4MiZkIOFotjNJ66H2m97QOHTAdpSOEXX
TBDoy+KY8rMK90qC+VbU3CmvgaI0GmwSq/y90fzHbhp2ctpqRc51arUzatKjjGWp
8ha+804RI5W3ciiVqwCWRdq+r2AfOVNPTtjoPnyxnbQvZzwplg9A+vKSYNIrAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUrb35itZ9hg26usfDg/UN/ID6ZiEwHwYDVR0j
BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE
MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF
N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw
QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5
RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wLzMyMzgzMDMzM2EzNDM1MzgzMDNhNjMz
MDMwMzAzYTNhMmYzMzM1MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKANFgMAwDQYJKoZIhvcNAQELBQADggEBAD8KLVz9YCwXuEtXeYrmf4afxsVg
/9750JmOxuibu3n0pYbcsOd98v6cu05DKS2SkvSkuxc4DSR6PomcnGQun+uYa5O4
Phymj8bK94NXMKR1C9NRqETVJV7m0Cz0b6g+IFY8W5cdWLjD4jb03tZxpomoacKB
d/ALa2sKv6x8rG+AFw2+zBCQYyP/3xYuzafsrw7zpRE71yCDwslWRxjAyhux3TfS
EFwceUqNnRw50Yzdr4YXC+p15J1rb5Hs3MLryBs9Ma+odR+oqFSf4tRtsswufCct
hmu89q+Zci7YZ6RuPPrUJWU724CNeDMBgT/N8Le11MUn9e3RWigI9htfrfw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:00 2025 by rpki-client