Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa
File:                     323830303a313030303a3a2f32342d3438203d3e2038303438.roa (raw, json)
Hash identifier:          AnsvcvR0c9XDAZzOzciwdW3DofQCrTmhI6jI8AAxOG8=
Subject key identifier:   F6:75:D3:0F:D5:A0:50:4D:FC:BA:73:6A:73:6C:F8:C6:90:D6:C3:BD
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       5ACCA3A9AFED61739DCA7BBB0F985B2837CA9C92
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa
Signing time:             Tue 25 Feb 2025 12:00:00 +0000
ROA not before:           Tue 25 Feb 2025 11:55:00 +0000
ROA not after:            Tue 24 Feb 2026 12:00:00 +0000
asID:                     8048
IP address blocks:        2800:1000::/24 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cc:a3:a9:af:ed:61:73:9d:ca:7b:bb:0f:98:5b:28:37:ca:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb 25 11:55:00 2025 GMT
            Not After : Feb 24 12:00:00 2026 GMT
        Subject: CN=F675D30FD5A0504DFCBA736A736CF8C690D6C3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:f0:32:b6:ca:0a:a3:79:ee:38:ce:52:75:
                    81:c8:20:84:3b:b6:4b:94:fe:0c:62:3d:51:da:17:
                    fe:4b:2b:d4:4c:d3:a4:5d:b1:2e:e7:5a:a4:8e:1c:
                    0a:fd:ca:02:97:0b:f5:3a:87:11:11:42:92:9d:d2:
                    3e:c7:ce:b0:ba:e8:d7:8b:d3:1a:ea:77:bd:2c:8a:
                    3d:05:82:8f:96:92:f2:1b:a7:28:19:4b:de:15:a4:
                    05:f6:5c:df:78:09:4c:1c:73:12:3f:4e:9e:c7:76:
                    e3:73:73:0e:8f:89:b5:6a:a5:9a:ac:89:95:a1:a3:
                    80:2b:30:9d:b4:66:70:22:fe:7f:a7:66:56:ec:bc:
                    27:a3:5a:d3:6f:36:5c:23:3a:8b:52:8b:00:54:a5:
                    1e:1c:e4:fb:da:a1:c4:33:83:47:06:1e:8b:ca:9a:
                    44:e9:61:e6:e4:ff:ad:31:ed:2b:e3:58:d3:4c:a3:
                    a7:2c:57:48:eb:7c:75:cf:22:5b:36:59:a9:0f:cd:
                    f2:4c:f1:21:bb:cf:0f:55:33:80:92:5b:8f:91:13:
                    c2:8c:e7:9c:a7:a2:60:bc:f0:41:1a:91:4f:7c:f4:
                    bc:7b:2e:cd:f0:6c:35:9f:da:e0:a7:78:87:97:dd:
                    7d:70:56:ad:7a:cc:51:dc:01:aa:c1:87:4e:e0:aa:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:D3:0F:D5:A0:50:4D:FC:BA:73:6A:73:6C:F8:C6:90:D6:C3:BD
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1000::/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:37:b2:f9:56:b6:cf:3b:17:6e:94:25:06:80:44:65:2e:
         f3:fe:a9:75:97:39:6a:4a:30:b2:9a:04:68:3b:59:c5:20:a5:
         92:9b:04:6c:29:83:cf:e4:1b:f3:7f:ea:a1:f7:a4:1b:73:26:
         03:34:df:85:3b:6b:42:7d:43:a4:99:69:92:aa:e5:3a:7b:7b:
         8e:39:be:49:9b:5f:ff:a5:52:99:77:0a:6b:d5:c3:5e:de:4c:
         00:1b:b6:1e:ae:f8:90:0c:fb:14:f3:41:67:db:49:d6:84:14:
         59:a1:62:8a:36:a7:7b:26:59:65:34:0b:a3:ef:c5:56:32:45:
         0e:60:f2:0c:b5:10:72:32:82:08:0e:2a:81:3d:45:56:8d:e1:
         2c:1c:a8:ae:50:5a:a3:05:44:32:ea:f2:d2:8b:5b:71:f8:4e:
         49:a6:fd:ab:ca:65:25:20:5f:55:cb:a8:fb:10:18:ae:4f:36:
         8a:36:ea:14:b7:1b:14:99:28:1f:7f:a0:10:f6:f1:79:cf:4a:
         6b:ce:52:e3:ad:e5:bf:71:90:f7:55:8d:76:aa:1e:1d:7a:b1:
         8b:a2:c8:b3:e9:0d:74:d5:7e:17:e9:40:3e:55:9c:d9:de:d8:
         15:01:80:c5:ec:73:4b:2c:45:41:f6:c4:85:a5:0c:87:af:b1:
         80:56:13:56
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUWsyjqa/tYXOdynu7D5hbKDfKnJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkZDMjNBOEM1RkMwNjdCN0QwQkZENjA1QzBGNUEz
M0QwMzZCNDAeFw0yNTAyMjUxMTU1MDBaFw0yNjAyMjQxMjAwMDBaMDMxMTAvBgNV
BAMTKEY2NzVEMzBGRDVBMDUwNERGQ0JBNzM2QTczNkNGOEM2OTBENkMzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWfAytsoKo3nuOM5SdYHIIIQ7
tkuU/gxiPVHaF/5LK9RM06RdsS7nWqSOHAr9ygKXC/U6hxERQpKd0j7HzrC66NeL
0xrqd70sij0Fgo+WkvIbpygZS94VpAX2XN94CUwccxI/Tp7HduNzcw6PibVqpZqs
iZWho4ArMJ20ZnAi/n+nZlbsvCejWtNvNlwjOotSiwBUpR4c5PvaocQzg0cGHovK
mkTpYebk/60x7SvjWNNMo6csV0jrfHXPIls2WakPzfJM8SG7zw9VM4CSW4+RE8KM
55ynomC88EEakU989Lx7Ls3wbDWf2uCneIeX3X1wVq16zFHcAarBh07gqr13AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU9nXTD9WgUE38unNqc2z4xpDWw70wHwYDVR0j
BBgwFoAUn1b8I6jF/AZ7fQv9YFwPWjPQNrQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0NDNTcwNDIzRkFGODE2M0Q4NkNDMjFGMUJBMDNEODk1
MDJBRTlDMTI0RkVGODlBRjYxRjQwMkVBRUU4QjgzLzAvOUY1NkZDMjNBOEM1RkMw
NjdCN0QwQkZENjA1QzBGNUEzM0QwMzZCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU2RkMyM0E4QzVGQzA2N0I3
RDBCRkQ2MDVDMEY1QTMzRDAzNkI0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNDQzU3MDQyM0ZBRjgxNjNEODZDQzIxRjFCQTAzRDg5NTAyQUU5QzEy
NEZFRjg5QUY2MUY0MDJFQUVFOEI4My8wLzMyMzgzMDMwM2EzMTMwMzAzMDNhM2Ey
ZjMyMzQyZDM0MzgyMDNkM2UyMDM4MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAKAAQMA0GCSqG
SIb3DQEBCwUAA4IBAQBC4Dey+Va2zzsXbpQlBoBEZS7z/ql1lzlqSjCymgRoO1nF
IKWSmwRsKYPP5Bvzf+qh96QbcyYDNN+FO2tCfUOkmWmSquU6e3uOOb5Jm1//pVKZ
dwpr1cNe3kwAG7YerviQDPsU80Fn20nWhBRZoWKKNqd7JlllNAuj78VWMkUOYPIM
tRByMoIIDiqBPUVWjeEsHKiuUFqjBUQy6vLSi1tx+E5Jpv2rymUlIF9Vy6j7EBiu
TzaKNuoUtxsUmSgff6AQ9vF5z0przlLjreW/cZD3VY12qh4derGLosiz6Q101X4X
6UA+VZzZ3tgVAYDF7HNLLEVB9sSFpQyHr7GAVhNW
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:10 2025 by rpki-client