Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a613030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a613030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          8I0GJbhVMJM/HO84eXLAL6t8Ge3IInfkzR0cBwRV4mU=
Subject key identifier:   1E:E4:8F:1B:99:9D:38:4C:B3:81:28:93:E9:89:F3:87:B3:B1:8D:8B
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       64C4148FE2096089AC987AA7F8BE2F01F604C5B1
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a613030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:00 +0000
ROA not before:           Fri 21 Feb 2025 22:35:00 +0000
ROA not after:            Fri 20 Feb 2026 22:40:00 +0000
asID:                     52278
IP address blocks:        2803:e990:a000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:14:8f:e2:09:60:89:ac:98:7a:a7:f8:be:2f:01:f6:04:c5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:00 2025 GMT
            Not After : Feb 20 22:40:00 2026 GMT
        Subject: CN=1EE48F1B999D384CB3812893E989F387B3B18D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:ab:03:d5:47:35:61:e7:69:fb:9f:5e:d0:
                    ef:52:b4:36:c7:79:e4:ea:96:ce:6c:25:59:62:78:
                    9c:a8:f9:9c:ec:bc:d1:1e:3f:be:f4:05:f6:d2:5f:
                    6b:b3:9d:f2:64:8c:e6:66:dd:67:b8:39:cb:52:9c:
                    23:a3:f8:ab:98:d9:d8:49:78:c9:a5:62:48:8d:b5:
                    dd:84:59:bb:83:42:e2:9f:ee:0f:0c:af:3d:0b:83:
                    10:1c:fb:d6:de:71:32:36:97:b6:fe:b1:57:4d:c4:
                    fa:6b:6e:c9:c5:9b:78:b0:01:50:28:fd:ac:24:dd:
                    73:5c:86:48:a5:34:66:1c:7c:84:12:1e:f0:d5:59:
                    ec:f9:a2:f1:17:9c:c0:77:e7:f1:57:e9:d6:24:a9:
                    f3:e6:a8:22:8e:05:8e:fc:91:1c:9e:0b:b4:99:6f:
                    f8:05:bf:43:10:64:bc:f0:5b:68:25:2b:44:98:54:
                    39:b3:ad:46:e7:2d:a1:7f:6c:80:cd:c6:44:3f:c2:
                    2e:05:c5:ec:4a:76:cf:8b:94:5f:47:7a:ad:fc:15:
                    8c:dc:4a:b6:d1:d0:27:9c:36:b3:b1:8b:cd:2e:19:
                    b0:f6:0e:26:ff:31:d4:63:07:ec:e7:e8:25:c8:46:
                    b8:5e:3f:07:cb:b0:47:dd:2b:9e:38:80:4c:17:e3:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:8F:1B:99:9D:38:4C:B3:81:28:93:E9:89:F3:87:B3:B1:8D:8B
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a613030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         79:30:26:de:26:51:86:67:ce:45:84:bc:a2:81:24:0b:69:28:
         d3:87:6c:de:86:19:04:bd:d1:b3:23:59:f0:09:0f:6d:b3:49:
         44:a2:cf:ba:08:cf:68:d1:74:22:9e:9e:85:1e:53:88:43:93:
         7b:09:11:65:5b:0c:40:6e:2a:a7:ee:14:a5:18:ac:15:35:0e:
         13:47:95:af:73:bc:6c:89:a0:68:5d:ef:2b:1e:fa:d4:7f:35:
         1a:ce:63:cb:cf:82:5d:e4:d6:fc:7d:5f:c4:5d:fc:9d:fc:97:
         fa:8b:7f:b6:cc:97:a7:58:8a:6c:42:95:bc:07:c7:47:ea:c6:
         55:1f:b8:e6:7a:a9:1d:f8:91:43:eb:0c:f6:2c:05:d0:26:62:
         ac:13:27:9d:2b:2b:82:76:cc:64:f7:c8:4c:33:90:aa:cb:de:
         c8:59:fb:d4:32:43:6e:64:0c:1a:c2:27:d7:18:19:35:fc:e9:
         78:70:2c:85:6f:d4:66:e6:e8:ea:be:e6:f8:e6:31:26:c0:b0:
         51:bc:a3:3a:37:d6:c7:50:5d:de:70:3a:5c:b5:be:c7:29:91:
         51:3a:97:06:16:4b:66:72:f7:a5:79:61:f8:36:3e:21:2c:d7:
         c6:02:74:fe:29:fd:e7:2d:9e:dc:2d:cc:42:a3:7c:c4:b7:be:
         be:19:36:17
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUZMQUj+IJYImsmHqn+L4vAfYExbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNTAyMjEyMjM1MDBaFw0yNjAyMjAyMjQwMDBaMDMxMTAvBgNV
BAMTKDFFRTQ4RjFCOTk5RDM4NENCMzgxMjg5M0U5ODlGMzg3QjNCMThEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZKsD1Uc1Yedp+59e0O9StDbH
eeTqls5sJVlieJyo+ZzsvNEeP770BfbSX2uznfJkjOZm3We4OctSnCOj+KuY2dhJ
eMmlYkiNtd2EWbuDQuKf7g8Mrz0LgxAc+9becTI2l7b+sVdNxPprbsnFm3iwAVAo
/awk3XNchkilNGYcfIQSHvDVWez5ovEXnMB35/FX6dYkqfPmqCKOBY78kRyeC7SZ
b/gFv0MQZLzwW2glK0SYVDmzrUbnLaF/bIDNxkQ/wi4FxexKds+LlF9Heq38FYzc
SrbR0CecNrOxi80uGbD2Dib/MdRjB+zn6CXIRrhePwfLsEfdK544gEwX4yBZAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUHuSPG5mdOEyzgSiT6Ynzh7OxjYswHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMyMzgzMDMzM2E2NTM5MzkzMDNhNjEz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPpkKAwDQYJKoZIhvcNAQELBQADggEBAHkwJt4mUYZnzkWEvKKBJAtpKNOH
bN6GGQS90bMjWfAJD22zSUSiz7oIz2jRdCKenoUeU4hDk3sJEWVbDEBuKqfuFKUY
rBU1DhNHla9zvGyJoGhd7yse+tR/NRrOY8vPgl3k1vx9X8Rd/J38l/qLf7bMl6dY
imxClbwHx0fqxlUfuOZ6qR34kUPrDPYsBdAmYqwTJ50rK4J2zGT3yEwzkKrL3shZ
+9QyQ25kDBrCJ9cYGTX86XhwLIVv1Gbm6Oq+5vjmMSbAsFG8ozo31sdQXd5wOly1
vscpkVE6lwYWS2Zy96V5Yfg2PiEs18YCdP4p/ectntwtzEKjfMS3vr4ZNhc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:47 2025 by rpki-client