Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/323830333a366639303a3a2f33322d3334203d3e20323733303736.roa
File:                     323830333a366639303a3a2f33322d3334203d3e20323733303736.roa (raw, json)
Hash identifier:          MsZDOYOI8eyvD0XdMCjRG1sGSPKvuWyS7zK4VRFxE/w=
Subject key identifier:   58:41:32:BC:32:F2:87:00:B6:8B:04:75:04:E8:64:8D:D5:FB:FB:55
Certificate issuer:       /CN=EFDD44A2C82FE99A65FB11ADF256599AFD91056F
Certificate serial:       2F6A3527F6AB9D252411F2D2CA42BA701A1111BD
Authority key identifier: EF:DD:44:A2:C8:2F:E9:9A:65:FB:11:AD:F2:56:59:9A:FD:91:05:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/323830333a366639303a3a2f33322d3334203d3e20323733303736.roa
Signing time:             Tue 04 Feb 2025 20:04:19 +0000
ROA not before:           Tue 04 Feb 2025 19:59:19 +0000
ROA not after:            Tue 03 Feb 2026 20:04:19 +0000
asID:                     273076
IP address blocks:        2803:6f90::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6a:35:27:f6:ab:9d:25:24:11:f2:d2:ca:42:ba:70:1a:11:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFDD44A2C82FE99A65FB11ADF256599AFD91056F
        Validity
            Not Before: Feb  4 19:59:19 2025 GMT
            Not After : Feb  3 20:04:19 2026 GMT
        Subject: CN=584132BC32F28700B68B047504E8648DD5FBFB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:04:b7:4a:75:a5:51:84:b6:0b:90:fa:98:
                    88:94:2f:25:e8:e5:82:48:40:5d:ff:65:c4:8d:0a:
                    e4:3d:3d:79:54:d0:be:ff:21:21:84:db:1c:0c:cf:
                    a7:ef:38:d9:41:2c:b7:68:17:eb:fd:aa:61:03:30:
                    5d:30:96:fd:3e:e1:b2:d8:d8:2a:98:23:91:4d:0e:
                    6d:c0:6f:ca:03:86:74:c4:9b:41:54:58:62:9d:72:
                    d6:79:b1:fe:9a:f3:87:0e:2c:16:c8:26:dc:7f:7b:
                    87:5c:7d:f4:b2:29:2a:76:81:83:f2:61:af:e1:b0:
                    82:e5:65:a2:c0:91:2e:4d:5a:82:ec:e2:45:0c:a3:
                    f8:99:09:a0:20:2c:12:8e:c2:c9:c6:50:20:a0:13:
                    3b:a5:c9:e5:0e:e6:ed:14:a8:d3:70:87:1b:74:5b:
                    bc:2a:27:dc:91:2b:04:88:f2:bd:d6:59:99:59:f7:
                    77:16:eb:d9:68:20:c2:95:73:ce:5f:91:57:e6:8b:
                    1e:ea:78:35:28:3f:21:6a:96:47:34:0c:2e:df:05:
                    0e:1e:fa:7b:ac:db:32:1c:61:48:19:eb:30:f7:d5:
                    1f:3f:07:a0:4e:2a:7e:cb:3e:0a:c1:8b:bd:e9:19:
                    a1:a0:35:14:ab:3e:4f:d5:ea:28:cb:57:c4:b5:e3:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:32:BC:32:F2:87:00:B6:8B:04:75:04:E8:64:8D:D5:FB:FB:55
            X509v3 Authority Key Identifier:
                keyid:EF:DD:44:A2:C8:2F:E9:9A:65:FB:11:AD:F2:56:59:9A:FD:91:05:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/323830333a366639303a3a2f33322d3334203d3e20323733303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:69:61:a6:29:83:7e:0d:52:3f:db:d8:b2:e1:41:33:7f:9a:
         eb:90:1e:ce:53:9f:58:6e:8a:c6:29:ca:6e:60:ed:db:79:a5:
         3a:75:76:64:07:34:67:2c:d2:c6:b7:5c:85:5e:54:b5:6d:07:
         3f:c4:51:d4:53:72:90:79:fc:15:80:4d:c8:b7:16:b3:05:ae:
         59:62:36:16:80:c6:33:cf:c7:1c:cc:14:b7:6d:49:73:38:22:
         65:7d:39:62:fa:31:2c:43:f9:d8:90:cb:1a:28:f6:6a:e2:f7:
         25:62:39:f1:cf:07:18:91:76:c1:93:29:e5:d2:fb:86:a6:80:
         28:37:3d:c0:87:b2:23:28:e9:76:e4:8c:f5:40:3a:6f:26:c1:
         ea:db:2b:c5:f7:1a:bc:7b:18:1d:07:10:b0:a2:be:fb:24:83:
         29:6c:7c:ce:45:d0:de:c5:78:62:ea:25:91:63:68:20:df:a3:
         99:01:28:fd:d6:09:54:99:d3:fb:4f:73:dd:b1:fc:26:c1:d2:
         cf:5c:e7:ff:47:16:5d:10:60:32:13:95:d9:43:7d:b6:92:1b:
         0c:aa:d1:0f:31:d9:fc:c5:1d:2a:0e:03:53:f7:96:fb:3b:6a:
         63:03:c1:a6:87:e0:68:68:b6:43:5a:d1:6a:dc:d5:d1:78:d0:
         20:9e:83:95
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL2o1J/arnSUkEfLSykK6cBoREb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZERDQ0QTJDODJGRTk5QTY1RkIxMUFERjI1NjU5OUFG
RDkxMDU2RjAeFw0yNTAyMDQxOTU5MTlaFw0yNjAyMDMyMDA0MTlaMDMxMTAvBgNV
BAMTKDU4NDEzMkJDMzJGMjg3MDBCNjhCMDQ3NTA0RTg2NDhERDVGQkZCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UgS3SnWlUYS2C5D6mIiULyXo
5YJIQF3/ZcSNCuQ9PXlU0L7/ISGE2xwMz6fvONlBLLdoF+v9qmEDMF0wlv0+4bLY
2CqYI5FNDm3Ab8oDhnTEm0FUWGKdctZ5sf6a84cOLBbIJtx/e4dcffSyKSp2gYPy
Ya/hsILlZaLAkS5NWoLs4kUMo/iZCaAgLBKOwsnGUCCgEzulyeUO5u0UqNNwhxt0
W7wqJ9yRKwSI8r3WWZlZ93cW69loIMKVc85fkVfmix7qeDUoPyFqlkc0DC7fBQ4e
+nus2zIcYUgZ6zD31R8/B6BOKn7LPgrBi73pGaGgNRSrPk/V6ijLV8S147eLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWEEyvDLyhwC2iwR1BOhkjdX7+1UwHwYDVR0j
BBgwFoAU791Eosgv6Zpl+xGt8lZZmv2RBW8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEI0MkE2RTc2QTBGQTZFNUM2QjMyQTQwRTQ2NTBGNDU5
OTdENDQ1Q0JFMzJEODBGMTlENDdFOEY0MDYwNTAwLzAvRUZERDQ0QTJDODJGRTk5
QTY1RkIxMUFERjI1NjU5OUFGRDkxMDU2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkRENDRBMkM4MkZFOTlBNjVG
QjExQURGMjU2NTk5QUZEOTEwNTZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRCNDJBNkU3NkEwRkE2RTVDNkIzMkE0MEU0NjUwRjQ1OTk3RDQ0NUNC
RTMyRDgwRjE5RDQ3RThGNDA2MDUwMC8wLzMyMzgzMDMzM2EzNjY2MzkzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMzMwMzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDb5Aw
DQYJKoZIhvcNAQELBQADggEBAAJpYaYpg34NUj/b2LLhQTN/muuQHs5Tn1huisYp
ym5g7dt5pTp1dmQHNGcs0sa3XIVeVLVtBz/EUdRTcpB5/BWATci3FrMFrlliNhaA
xjPPxxzMFLdtSXM4ImV9OWL6MSxD+diQyxoo9mri9yViOfHPBxiRdsGTKeXS+4am
gCg3PcCHsiMo6XbkjPVAOm8mwerbK8X3Grx7GB0HELCivvskgylsfM5F0N7FeGLq
JZFjaCDfo5kBKP3WCVSZ0/tPc92x/CbB0s9c5/9HFl0QYDITldlDfbaSGwyq0Q8x
2fzFHSoOA1P3lvs7amMDwaaH4GhotkNa0Wrc1dF40CCeg5U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client