Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa
File:                     323830333a353538303a3a2f33322d3634203d3e20323636383832.roa (raw, json)
Hash identifier:          HxANff2InLgRZu+pmNwVpWAY02xcWLc03JzykuEYRpg=
Subject key identifier:   B6:87:CA:04:5B:96:ED:2F:B0:04:F4:18:99:C3:B8:61:2C:AD:B3:DB
Certificate issuer:       /CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890
Certificate serial:       2D8A3B946499ACABC8B2A53E622BF5B2735948BD
Authority key identifier: DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa
Signing time:             Tue 04 Feb 2025 18:36:18 +0000
ROA not before:           Tue 04 Feb 2025 18:31:18 +0000
ROA not after:            Tue 03 Feb 2026 18:36:18 +0000
asID:                     266882
IP address blocks:        2803:5580::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:3b:94:64:99:ac:ab:c8:b2:a5:3e:62:2b:f5:b2:73:59:48:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890
        Validity
            Not Before: Feb  4 18:31:18 2025 GMT
            Not After : Feb  3 18:36:18 2026 GMT
        Subject: CN=B687CA045B96ED2FB004F41899C3B8612CADB3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:36:bf:2b:d6:90:93:65:c2:34:f7:95:de:48:
                    fc:55:4d:a1:c0:bd:88:09:17:85:37:ba:43:03:cc:
                    98:b0:07:ec:73:7e:34:7b:85:12:88:fb:68:96:23:
                    2c:65:7a:56:78:15:6c:b8:0c:b6:2e:3f:5d:47:f6:
                    08:77:66:d7:02:9f:f1:e6:00:4a:a9:14:ae:1b:3c:
                    db:a9:92:3a:a2:dc:75:53:0b:46:c8:13:0c:d9:de:
                    24:2b:d1:a5:3e:21:e4:46:e7:e8:73:d8:55:4d:c2:
                    a5:ef:32:1c:75:a9:51:e3:25:a7:5d:5b:5e:64:30:
                    66:92:52:88:a8:d1:48:5d:08:6b:71:7c:79:41:ea:
                    34:8b:1b:ff:73:f6:32:4d:ef:6f:37:3b:a9:d2:74:
                    35:9d:d3:cd:f7:aa:d5:e7:e8:40:b1:db:ed:73:dd:
                    70:8b:55:99:9f:a4:e6:02:de:55:da:3e:7c:34:4a:
                    8c:5f:b2:d5:ea:f8:d6:13:ce:34:93:7c:b7:26:30:
                    d7:f2:90:4a:f7:bc:03:ab:85:d2:37:9b:1b:e0:e1:
                    1b:65:bc:f7:4f:a4:67:fe:d0:b9:7b:0f:8f:17:db:
                    77:b0:69:24:82:a1:54:87:7c:20:23:40:23:3b:7d:
                    61:d2:5b:05:55:3c:81:70:0f:a2:cd:3b:b1:7f:c3:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:CA:04:5B:96:ED:2F:B0:04:F4:18:99:C3:B8:61:2C:AD:B3:DB
            X509v3 Authority Key Identifier:
                keyid:DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5580::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6c:a3:99:a6:2b:7d:f6:27:e3:16:0d:27:5e:cc:77:26:15:
         04:58:ab:e5:b3:59:30:52:5c:90:e7:db:5f:ef:63:2a:73:17:
         9b:ff:02:f4:32:4f:fb:39:da:c2:26:2d:d7:f6:9e:6e:74:71:
         6c:a9:4b:f2:12:8e:ab:4a:25:2e:21:f3:4f:80:ae:8a:e9:b4:
         f8:e0:27:ad:bc:0a:ae:50:d7:6a:e1:40:ba:bd:6e:4f:de:53:
         97:f8:e0:1a:7c:d5:8b:a4:cb:7c:44:0f:33:6c:71:a0:bb:9e:
         2c:c1:85:8b:a5:30:3c:71:00:b9:67:0c:de:13:e8:ed:48:5d:
         14:ba:03:55:01:da:e0:37:3b:81:72:67:81:10:17:a6:8e:c6:
         a5:aa:5f:ed:be:0d:3f:bc:6a:d4:86:7b:65:d7:66:02:54:37:
         58:ff:35:5f:bc:72:d3:78:d6:71:78:7f:19:9b:ba:9a:3d:0a:
         c9:57:66:5c:64:6f:1f:de:4a:88:c9:9e:74:6f:b1:73:87:ac:
         ec:fc:2a:14:3e:dd:e4:f1:07:23:04:dd:2c:8f:f5:d8:8e:ae:
         a5:16:fb:76:2e:44:1e:6c:c4:57:de:de:27:0a:c7:6c:31:81:
         92:66:76:82:d9:d6:78:86:0c:af:2b:da:34:37:c1:ec:50:1b:
         17:fc:63:94
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULYo7lGSZrKvIsqU+Yiv1snNZSL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEzMUU4QUQwN0FDQjBEMTIwMDdEQ0UzOUUwRjU0RDEz
RDQ3MDg5MDAeFw0yNTAyMDQxODMxMThaFw0yNjAyMDMxODM2MThaMDMxMTAvBgNV
BAMTKEI2ODdDQTA0NUI5NkVEMkZCMDA0RjQxODk5QzNCODYxMkNBREIzREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNr8r1pCTZcI095XeSPxVTaHA
vYgJF4U3ukMDzJiwB+xzfjR7hRKI+2iWIyxlelZ4FWy4DLYuP11H9gh3ZtcCn/Hm
AEqpFK4bPNupkjqi3HVTC0bIEwzZ3iQr0aU+IeRG5+hz2FVNwqXvMhx1qVHjJadd
W15kMGaSUoio0UhdCGtxfHlB6jSLG/9z9jJN7283O6nSdDWd0833qtXn6ECx2+1z
3XCLVZmfpOYC3lXaPnw0SoxfstXq+NYTzjSTfLcmMNfykEr3vAOrhdI3mxvg4Rtl
vPdPpGf+0Ll7D48X23ewaSSCoVSHfCAjQCM7fWHSWwVVPIFwD6LNO7F/wx+JAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUtofKBFuW7S+wBPQYmcO4YSyts9swHwYDVR0j
BBgwFoAU2jHorQessNEgB9zjng9U0T1HCJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTNENENGMUMwQkYyRjVDN0RCRDQ5QjZCMDc2RUE1NDM5
QTYxMkQ3NTcyNjJFQUI5RUVFRjQzMDE2OTUwNzRDLzAvREEzMUU4QUQwN0FDQjBE
MTIwMDdEQ0UzOUUwRjU0RDEzRDQ3MDg5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTMxRThBRDA3QUNCMEQxMjAw
N0RDRTM5RTBGNTREMTNENDcwODkwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0EzRDRDRjFDMEJGMkY1QzdEQkQ0OUI2QjA3NkVBNTQzOUE2MTJENzU3
MjYyRUFCOUVFRUY0MzAxNjk1MDc0Qy8wLzMyMzgzMDMzM2EzNTM1MzgzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNjM4MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDVYAw
DQYJKoZIhvcNAQELBQADggEBACNso5mmK332J+MWDSdezHcmFQRYq+WzWTBSXJDn
21/vYypzF5v/AvQyT/s52sImLdf2nm50cWypS/ISjqtKJS4h80+ArorptPjgJ628
Cq5Q12rhQLq9bk/eU5f44Bp81Yuky3xEDzNscaC7nizBhYulMDxxALlnDN4T6O1I
XRS6A1UB2uA3O4FyZ4EQF6aOxqWqX+2+DT+8atSGe2XXZgJUN1j/NV+8ctN41nF4
fxmbupo9CslXZlxkbx/eSojJnnRvsXOHrOz8KhQ+3eTxByME3SyP9diOrqUW+3Yu
RB5sxFfe3icKx2wxgZJmdoLZ1niGDK8r2jQ3wexQGxf8Y5Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:12:39 2025 by rpki-client