Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          U8ouU6nh0lQk72mEy/gqD6feai3Otcaq+EoV+1X4rW0=
Subject key identifier:   A7:4F:EB:B6:9F:80:50:4D:A2:BE:20:8F:18:43:8D:15:01:8A:C6:9A
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       583BF1946F110E0B5EF3A32B9B2731017774EE99
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 04 Feb 2025 18:13:48 +0000
ROA not before:           Tue 04 Feb 2025 18:08:48 +0000
ROA not after:            Tue 03 Feb 2026 18:13:48 +0000
asID:                     272952
IP address blocks:        2801:1b9:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:f1:94:6f:11:0e:0b:5e:f3:a3:2b:9b:27:31:01:77:74:ee:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Feb  4 18:08:48 2025 GMT
            Not After : Feb  3 18:13:48 2026 GMT
        Subject: CN=A74FEBB69F80504DA2BE208F18438D15018AC69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:45:20:9a:f5:8e:11:b0:3a:9d:44:34:f1:
                    a3:f6:e1:b1:c7:1a:45:b6:59:85:e3:39:28:ac:47:
                    f7:1c:b0:fb:cd:c6:fe:61:e7:81:00:02:34:ec:90:
                    86:35:39:88:ef:4b:4a:88:2c:81:61:33:ae:d3:8b:
                    36:3d:0c:3a:b6:be:e6:7a:39:09:9e:3e:fb:e2:a5:
                    89:4c:3f:cd:e7:d2:ef:3e:7e:38:b8:dd:31:5c:e6:
                    7f:bf:f7:5c:23:e4:86:31:55:fb:a1:ea:96:c6:13:
                    b3:d4:8b:e8:59:f6:24:45:43:b0:4c:9d:4f:4f:29:
                    1f:00:f4:17:5f:89:c9:1e:f0:ff:da:cb:46:62:af:
                    3d:3c:b6:8e:b8:bf:c7:ff:bb:57:33:61:3e:ae:36:
                    6e:98:80:c1:b9:16:f8:62:ca:49:ee:74:c2:f4:5a:
                    37:19:e2:ca:e6:42:85:ce:96:eb:42:df:e8:25:5f:
                    11:1d:7f:80:d4:7f:d3:39:fe:e5:58:cb:a8:40:46:
                    68:b8:c5:98:34:f4:f4:41:e7:92:59:c7:dd:60:37:
                    8b:b0:25:31:22:9c:2a:60:99:2d:7d:19:a0:09:ad:
                    67:90:49:ed:91:d0:0f:3f:7d:6c:e1:b7:96:dd:6c:
                    9f:ee:b2:68:f9:39:a9:34:29:04:e2:df:6f:cb:f0:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4F:EB:B6:9F:80:50:4D:A2:BE:20:8F:18:43:8D:15:01:8A:C6:9A
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:b4:3f:2b:fe:9a:03:8b:49:00:69:94:a8:b9:b6:97:43:
         5d:63:53:81:7d:5f:26:dd:2e:81:f1:ff:d3:96:f0:9a:88:51:
         ff:bb:ac:80:bc:dd:8a:c2:ba:a5:7f:92:f4:d1:b4:c2:19:24:
         5d:8d:b3:81:c7:59:c2:7c:a8:66:11:28:84:01:52:e2:e8:9c:
         a7:e2:0f:19:ba:a2:bd:97:38:8b:13:4d:ca:88:c3:da:8e:52:
         ab:51:59:1a:eb:4e:34:f5:25:1a:46:e0:84:b5:17:88:13:12:
         4c:d5:9f:c5:5c:47:14:af:4d:ce:bb:c3:0c:f5:35:3b:f1:7f:
         1f:b6:28:20:ac:4a:4f:bb:1b:e2:6d:35:ef:aa:a3:4c:41:f1:
         e4:e4:ff:f0:4b:61:8c:1a:e4:d6:0a:b7:7b:b9:b3:e6:0b:c4:
         9e:87:e6:78:d4:16:5d:50:21:9c:6f:ec:01:d3:3f:1e:40:ca:
         79:e9:76:da:6f:85:76:e9:dc:00:8b:ae:7c:b4:8c:ea:da:ec:
         23:25:8e:a4:47:37:11:1b:81:5e:6d:29:a1:ed:77:9b:c0:eb:
         1e:63:fe:01:5f:c9:fe:a9:bc:17:b8:7a:82:c8:a9:59:9b:ec:
         d6:34:c2:21:22:b2:44:62:b7:87:55:f4:34:87:33:f4:35:b2:
         8b:fe:af:af
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUWDvxlG8RDgte86MrmycxAXd07pkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIxNzIzRUU2Qzk2QkFFNjMyMjVDMTg2NTI5NzdGOEU0
MDREQkQyODAeFw0yNTAyMDQxODA4NDhaFw0yNjAyMDMxODEzNDhaMDMxMTAvBgNV
BAMTKEE3NEZFQkI2OUY4MDUwNERBMkJFMjA4RjE4NDM4RDE1MDE4QUM2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEw0UgmvWOEbA6nUQ08aP24bHH
GkW2WYXjOSisR/ccsPvNxv5h54EAAjTskIY1OYjvS0qILIFhM67TizY9DDq2vuZ6
OQmePvvipYlMP83n0u8+fji43TFc5n+/91wj5IYxVfuh6pbGE7PUi+hZ9iRFQ7BM
nU9PKR8A9Bdficke8P/ay0Zirz08to64v8f/u1czYT6uNm6YgMG5FvhiyknudML0
WjcZ4srmQoXOlutC3+glXxEdf4DUf9M5/uVYy6hARmi4xZg09PRB55JZx91gN4uw
JTEinCpgmS19GaAJrWeQSe2R0A8/fWzht5bdbJ/usmj5Oak0KQTi32/L8EwPAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUp0/rtp+AUE2iviCPGEONFQGKxpowHwYDVR0j
BBgwFoAUchcj7myWuuYyJcGGUpd/jkBNvSgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QkEzN0E0NTlGMjkzQzMwMDM2MjE2QkI0NEZFOTlGQzE0
N0NEOEJGRkRFMkZGM0M1RTY3NTM3Mjg3NDgxRTYwLzAvNzIxNzIzRUU2Qzk2QkFF
NjMyMjVDMTg2NTI5NzdGOEU0MDREQkQyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjE3MjNFRTZDOTZCQUU2MzIy
NUMxODY1Mjk3N0Y4RTQwNERCRDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEJBMzdBNDU5RjI5M0MzMDAzNjIxNkJCNDRGRTk5RkMxNDdDRDhCRkZE
RTJGRjNDNUU2NzUzNzI4NzQ4MUU2MC8wLzMyMzgzMDMxM2EzMTYyMzkzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzkzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
uQACMA0GCSqGSIb3DQEBCwUAA4IBAQBE9bQ/K/6aA4tJAGmUqLm2l0NdY1OBfV8m
3S6B8f/TlvCaiFH/u6yAvN2Kwrqlf5L00bTCGSRdjbOBx1nCfKhmESiEAVLi6Jyn
4g8ZuqK9lziLE03KiMPajlKrUVka60409SUaRuCEtReIExJM1Z/FXEcUr03Ou8MM
9TU78X8ftiggrEpPuxvibTXvqqNMQfHk5P/wS2GMGuTWCrd7ubPmC8Seh+Z41BZd
UCGcb+wB0z8eQMp56Xbab4V26dwAi658tIzq2uwjJY6kRzcRG4FebSmh7XebwOse
Y/4BX8n+qbwXuHqCyKlZm+zWNMIhIrJEYreHVfQ0hzP0NbKL/q+v
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client