Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa
File:                     323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa (raw, json)
Hash identifier:          aYHedjIwhJ6iuOaou4Oiq1Xh32QPU/ggdE89C8kzmMQ=
Subject key identifier:   53:C8:D4:B0:3B:C0:19:A7:BF:64:16:E4:24:80:13:5B:3C:DC:48:25
Certificate issuer:       /CN=9767DA01D4E417990C5243FE751DECE478F14B27
Certificate serial:       7F9C1B71C81413E7CEA90E0D371F2FB7A452DC34
Authority key identifier: 97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa
Signing time:             Tue 04 Feb 2025 18:25:19 +0000
ROA not before:           Tue 04 Feb 2025 18:20:19 +0000
ROA not after:            Tue 03 Feb 2026 18:25:19 +0000
asID:                     272080
IP address blocks:        2801:11:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9c:1b:71:c8:14:13:e7:ce:a9:0e:0d:37:1f:2f:b7:a4:52:dc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9767DA01D4E417990C5243FE751DECE478F14B27
        Validity
            Not Before: Feb  4 18:20:19 2025 GMT
            Not After : Feb  3 18:25:19 2026 GMT
        Subject: CN=53C8D4B03BC019A7BF6416E42480135B3CDC4825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:fa:8a:ff:27:72:7a:8b:ed:e4:9c:23:76:
                    99:96:38:f4:14:09:5f:56:31:5e:20:de:e8:30:e4:
                    06:6d:e9:d2:ef:41:5e:99:26:a8:10:91:9e:ef:f6:
                    3c:70:45:c5:10:6d:76:41:b5:af:aa:41:58:e2:4a:
                    6f:5b:b4:57:67:66:ac:c1:84:f8:30:be:84:40:d9:
                    2f:27:a1:fd:cf:fe:b7:bb:ea:16:7e:f8:ed:dc:79:
                    d8:28:7c:06:6d:15:01:12:9e:59:98:0f:01:4e:a5:
                    74:45:81:97:95:9e:b6:13:46:44:6d:37:f1:ef:ec:
                    b6:af:d5:7e:25:67:c3:a8:48:07:1a:11:01:a9:91:
                    ff:5a:65:b4:88:3e:33:52:16:ca:72:fe:c2:44:e2:
                    0d:48:b3:f4:38:62:5a:f2:01:b6:00:cc:5d:9a:e6:
                    9e:56:18:8b:61:9e:51:86:b5:8a:a4:33:6e:78:9f:
                    a7:33:13:6d:76:0f:31:f4:1c:f5:52:0f:cf:68:06:
                    8e:09:ea:1a:ed:2c:be:70:39:64:6f:7f:07:8f:22:
                    d5:86:1c:e1:8b:a9:8f:09:08:e9:fd:fd:bd:0b:c6:
                    31:7c:ff:6f:5e:f0:0e:32:77:5b:55:41:3b:9b:7a:
                    e2:eb:5b:81:52:d1:0a:16:bc:fc:b2:c4:22:4f:31:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:D4:B0:3B:C0:19:A7:BF:64:16:E4:24:80:13:5B:3C:DC:48:25
            X509v3 Authority Key Identifier:
                keyid:97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:60:19:ec:a9:78:6f:dc:99:52:34:fd:86:65:81:57:83:21:
         95:c0:d9:1e:93:51:35:9a:81:38:4b:c2:74:6f:44:fa:43:9b:
         e0:1a:49:39:17:38:61:18:98:6b:18:6e:b9:5b:92:54:42:03:
         e0:25:46:2b:d8:42:a5:cd:11:3b:a4:00:1a:76:f8:56:d1:16:
         be:92:50:ef:d4:0d:25:84:f6:6a:0a:35:9a:73:1f:2a:e3:4c:
         81:1c:59:50:20:91:e6:c0:33:0d:b1:5e:f4:b7:ab:94:78:c1:
         7c:a5:a9:0e:5f:02:8e:d3:91:6e:77:79:8e:c9:f6:fc:ea:0b:
         f9:23:2b:9e:6c:70:3e:25:2b:5b:af:bf:4c:7e:ee:8f:dc:96:
         b3:03:93:2a:dc:ad:f8:4a:74:63:1f:8c:7c:23:d1:be:44:3c:
         e2:31:ea:71:f1:d0:39:79:7a:63:59:8f:b2:e1:30:7e:4b:ca:
         94:88:de:1c:d8:6f:26:6e:a9:43:71:f1:ff:42:9c:bd:7b:45:
         bf:4d:5e:7c:b7:65:94:be:d5:50:f2:d0:74:aa:f9:9f:6b:1e:
         7e:fd:4f:46:1d:fd:0f:3b:0e:16:1a:cc:90:e1:52:44:41:1b:
         9e:83:30:8e:03:62:e0:5f:44:49:07:c2:7a:49:db:dc:5e:54:
         b8:8c:80:54
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUf5wbccgUE+fOqQ4NNx8vt6RS3DQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc2N0RBMDFENEU0MTc5OTBDNTI0M0ZFNzUxREVDRTQ3
OEYxNEIyNzAeFw0yNTAyMDQxODIwMTlaFw0yNjAyMDMxODI1MTlaMDMxMTAvBgNV
BAMTKDUzQzhENEIwM0JDMDE5QTdCRjY0MTZFNDI0ODAxMzVCM0NEQzQ4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelvqK/ydyeovt5JwjdpmWOPQU
CV9WMV4g3ugw5AZt6dLvQV6ZJqgQkZ7v9jxwRcUQbXZBta+qQVjiSm9btFdnZqzB
hPgwvoRA2S8nof3P/re76hZ++O3cedgofAZtFQESnlmYDwFOpXRFgZeVnrYTRkRt
N/Hv7Lav1X4lZ8OoSAcaEQGpkf9aZbSIPjNSFspy/sJE4g1Is/Q4YlryAbYAzF2a
5p5WGIthnlGGtYqkM254n6czE212DzH0HPVSD89oBo4J6hrtLL5wOWRvfwePItWG
HOGLqY8JCOn9/b0LxjF8/29e8A4yd1tVQTubeuLrW4FS0QoWvPyyxCJPMX8dAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUU8jUsDvAGae/ZBbkJIATWzzcSCUwHwYDVR0j
BBgwFoAUl2faAdTkF5kMUkP+dR3s5HjxSycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjdDMjZCNEM5ODU3QzA2MUZENEM0RDk4MENGNkExQ0FE
MTdGNDQyQjk2QTYzMEMyNzk3OEMyQTlCNTc3RkNBLzAvOTc2N0RBMDFENEU0MTc5
OTBDNTI0M0ZFNzUxREVDRTQ3OEYxNEIyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzY3REEwMUQ0RTQxNzk5MEM1
MjQzRkU3NTFERUNFNDc4RjE0QjI3LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Y3QzI2QjRDOTg1N0MwNjFGRDRDNEQ5ODBDRjZBMUNBRDE3RjQ0MkI5
NkE2MzBDMjc5NzhDMkE5QjU3N0ZDQS8wLzMyMzgzMDMxM2EzMTMxM2EzOTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzgzMC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABGYADANBgkqhkiG9w0BAQsFAAOCAQEAYGAZ7Kl4b9yZUjT9hmWBV4MhlcDZ
HpNRNZqBOEvCdG9E+kOb4BpJORc4YRiYaxhuuVuSVEID4CVGK9hCpc0RO6QAGnb4
VtEWvpJQ79QNJYT2ago1mnMfKuNMgRxZUCCR5sAzDbFe9LerlHjBfKWpDl8CjtOR
bnd5jsn2/OoL+SMrnmxwPiUrW6+/TH7uj9yWswOTKtyt+Ep0Yx+MfCPRvkQ84jHq
cfHQOXl6Y1mPsuEwfkvKlIjeHNhvJm6pQ3Hx/0KcvXtFv01efLdllL7VUPLQdKr5
n2sefv1PRh39DzsOFhrMkOFSREEbnoMwjgNi4F9ESQfCeknb3F5UuIyAVA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:46:30 2025 by rpki-client