Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a323030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a323030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          tIx40f/bWrLCc5565HQxneiB+02/jtFEjYgP1+GQbIE=
Subject key identifier:   D4:2C:23:9B:5B:D7:50:55:14:47:70:E2:89:49:15:B8:CF:B0:A3:CC
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       4D7014BDFBC49C891E32D6840A43F0E2257FD127
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a323030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:00 +0000
ROA not before:           Fri 21 Feb 2025 22:35:00 +0000
ROA not after:            Fri 20 Feb 2026 22:40:00 +0000
asID:                     52278
IP address blocks:        2803:e990:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:70:14:bd:fb:c4:9c:89:1e:32:d6:84:0a:43:f0:e2:25:7f:d1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:00 2025 GMT
            Not After : Feb 20 22:40:00 2026 GMT
        Subject: CN=D42C239B5BD75055144770E2894915B8CFB0A3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:29:2f:80:26:15:46:6b:d9:92:63:6f:11:
                    f2:82:77:7f:a5:fc:0a:c7:a0:1d:f1:09:67:76:5d:
                    a1:d9:83:87:42:f6:8e:95:aa:91:e2:68:36:55:f3:
                    57:c7:bd:1d:27:70:6e:60:d3:a6:7c:1e:90:67:53:
                    1a:e4:c4:59:47:1e:21:50:25:a7:44:f0:da:9f:d6:
                    0a:de:ec:d4:c1:0d:79:67:21:29:8c:c7:52:9b:69:
                    cf:bd:7b:d4:19:d9:d9:58:5f:5e:ac:cf:30:49:db:
                    b9:ef:d0:f9:6d:19:47:61:32:32:a1:94:56:f8:f5:
                    02:c9:26:4d:3c:64:91:a2:c3:b3:d7:c1:bd:56:19:
                    54:75:2f:bb:43:1a:8b:59:02:6b:26:b3:18:70:ef:
                    ba:ef:5f:8e:e6:72:15:40:29:f0:2e:93:62:f5:2d:
                    9c:70:3d:d9:1d:76:27:99:44:73:50:a3:b8:4f:cf:
                    9a:cb:83:83:7c:08:15:96:78:61:13:17:a9:4c:54:
                    49:f2:64:ea:03:fa:bc:cb:cc:a1:bb:16:64:e2:48:
                    2c:6e:2d:5a:d4:8b:b0:af:c8:67:4a:2a:0d:54:dd:
                    ee:d5:2f:8c:be:40:66:6c:bd:0d:7f:3f:57:45:db:
                    ab:30:ae:af:20:04:3f:bf:2c:72:af:71:e2:87:3d:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:23:9B:5B:D7:50:55:14:47:70:E2:89:49:15:B8:CF:B0:A3:CC
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a323030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         77:49:92:19:ad:6d:df:6f:26:b1:0f:42:64:91:0a:a4:ab:e0:
         2b:cf:26:a7:fe:24:74:1a:c9:55:74:23:c4:79:88:19:50:ea:
         40:f6:f5:61:31:81:4d:74:4c:c1:27:3d:f5:00:00:5a:4d:5c:
         15:40:6d:f2:79:bc:67:7b:3e:19:91:b9:87:82:c5:0d:01:0c:
         1e:77:2d:41:6f:65:56:83:31:ae:93:d3:46:73:d6:e4:8f:5c:
         32:bf:5a:f2:fb:40:3e:cf:48:08:ea:8b:ed:70:63:44:29:6f:
         fb:16:b7:83:53:80:86:0e:65:17:70:15:9d:4c:c7:af:3f:30:
         ec:34:60:87:5a:b6:fa:1a:6f:56:e4:03:13:a4:00:7c:62:65:
         c5:9f:92:15:f1:1f:0e:4b:74:f3:cf:c9:9a:5f:ea:84:b0:e9:
         d4:a5:ee:f4:33:ee:33:0b:de:84:26:2b:a7:ad:b2:82:c0:31:
         9c:ef:2e:04:c3:96:1c:df:06:6c:3e:85:9f:f5:d7:cb:e4:fa:
         56:3b:ea:bf:6d:97:48:a6:93:84:2e:06:45:87:be:28:30:ab:
         15:55:52:0b:09:52:25:20:e5:3b:84:89:b7:81:83:41:ba:f6:
         fc:6e:de:77:15:14:11:7c:f1:f2:7b:1b:bf:87:f4:1d:38:4e:
         99:7e:61:38
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUTXAUvfvEnIkeMtaECkPw4iV/0ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNTAyMjEyMjM1MDBaFw0yNjAyMjAyMjQwMDBaMDMxMTAvBgNV
BAMTKEQ0MkMyMzlCNUJENzUwNTUxNDQ3NzBFMjg5NDkxNUI4Q0ZCMEEzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oikvgCYVRmvZkmNvEfKCd3+l
/ArHoB3xCWd2XaHZg4dC9o6VqpHiaDZV81fHvR0ncG5g06Z8HpBnUxrkxFlHHiFQ
JadE8Nqf1gre7NTBDXlnISmMx1Kbac+9e9QZ2dlYX16szzBJ27nv0PltGUdhMjKh
lFb49QLJJk08ZJGiw7PXwb1WGVR1L7tDGotZAmsmsxhw77rvX47mchVAKfAuk2L1
LZxwPdkddieZRHNQo7hPz5rLg4N8CBWWeGETF6lMVEnyZOoD+rzLzKG7FmTiSCxu
LVrUi7CvyGdKKg1U3e7VL4y+QGZsvQ1/P1dF26swrq8gBD+/LHKvceKHPQQDAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU1Cwjm1vXUFUUR3DiiUkVuM+wo8wwHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMyMzgzMDMzM2E2NTM5MzkzMDNhMzIz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPpkCAwDQYJKoZIhvcNAQELBQADggEBAHdJkhmtbd9vJrEPQmSRCqSr4CvP
Jqf+JHQayVV0I8R5iBlQ6kD29WExgU10TMEnPfUAAFpNXBVAbfJ5vGd7PhmRuYeC
xQ0BDB53LUFvZVaDMa6T00Zz1uSPXDK/WvL7QD7PSAjqi+1wY0Qpb/sWt4NTgIYO
ZRdwFZ1Mx68/MOw0YIdatvoab1bkAxOkAHxiZcWfkhXxHw5LdPPPyZpf6oSw6dSl
7vQz7jML3oQmK6etsoLAMZzvLgTDlhzfBmw+hZ/118vk+lY76r9tl0imk4QuBkWH
vigwqxVVUgsJUiUg5TuEibeBg0G69vxu3ncVFBF88fJ7G7+H9B04Tpl+YTg=
-----END CERTIFICATE-----