Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          fUbz0d8PcoGbDobTpz7mhJ7/w4+i0NmxKb5MF4Cw4Ug=
Subject key identifier:   CE:DA:46:7E:DA:46:10:3C:32:52:AC:23:2F:95:C6:85:FA:43:90:8C
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       7CA39F8FB3320C104427B63ACE3B559458778951
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 04 Feb 2025 18:13:48 +0000
ROA not before:           Tue 04 Feb 2025 18:08:48 +0000
ROA not after:            Tue 03 Feb 2026 18:13:48 +0000
asID:                     272952
IP address blocks:        2801:1b9:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a3:9f:8f:b3:32:0c:10:44:27:b6:3a:ce:3b:55:94:58:77:89:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Feb  4 18:08:48 2025 GMT
            Not After : Feb  3 18:13:48 2026 GMT
        Subject: CN=CEDA467EDA46103C3252AC232F95C685FA43908C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:17:48:fa:23:b9:c6:c0:e8:f7:8a:90:11:
                    e0:b7:72:f4:9f:b3:c5:8d:72:a2:fc:94:f9:3d:67:
                    53:da:2e:63:35:08:d0:dc:70:dd:a1:b9:fd:e7:a9:
                    b7:04:f7:cc:10:0c:9b:29:7c:e4:8a:73:42:d9:83:
                    d7:47:e0:61:fa:a6:4e:6a:0e:9c:3d:1f:ee:1b:ac:
                    8c:8c:e8:77:8f:0b:eb:c3:1f:31:2f:59:95:5f:1b:
                    99:85:17:31:ec:8a:69:6c:05:92:ff:dc:38:28:54:
                    2e:db:0c:e0:a5:59:eb:8f:a6:38:80:98:85:60:6d:
                    35:56:ba:69:9d:90:26:73:b7:f1:36:08:7e:4a:cc:
                    89:80:6b:8c:05:c2:2c:d6:62:2c:38:d0:d7:3f:9e:
                    8c:68:35:5a:36:e9:1c:7e:73:1b:86:2c:2d:29:4c:
                    39:09:e6:29:38:75:2a:99:2a:2e:e8:e2:0c:73:56:
                    27:8a:03:49:88:4e:58:4a:21:18:a6:a5:78:df:bd:
                    43:44:45:77:3e:15:1b:7b:43:03:20:be:51:65:f0:
                    6a:f3:79:9e:9a:08:3f:09:55:5b:9d:38:6b:0d:f1:
                    2f:d8:10:19:6f:5e:ea:f1:6d:bd:ce:9f:0c:ed:99:
                    65:e5:4d:15:f7:14:1d:a5:cc:de:68:8e:52:45:09:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:46:7E:DA:46:10:3C:32:52:AC:23:2F:95:C6:85:FA:43:90:8C
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:c8:ac:5e:bd:d5:1b:d8:cb:0a:76:0f:35:cd:5e:43:1f:
         91:82:04:50:57:ca:62:0f:bd:35:e2:7a:7b:4d:7b:d7:92:f2:
         86:6c:d5:47:0d:21:81:6a:84:63:31:06:11:fa:7a:2c:70:c5:
         8e:cf:2a:61:85:80:90:bc:ea:d2:3c:38:88:3a:f8:72:01:ee:
         8c:de:9e:bb:51:82:f6:9b:44:2d:ee:da:68:5b:26:61:b8:08:
         77:e2:44:22:83:7e:00:de:fe:83:3b:ae:db:51:b4:54:9f:d2:
         87:fa:86:d7:b8:d9:78:71:0e:55:62:f4:ea:b0:7b:c7:a9:cc:
         83:3c:ae:50:0d:0b:cc:bf:88:66:fb:f1:52:5d:6d:57:39:41:
         5c:9a:ed:a0:4c:89:84:cb:b5:ed:43:b0:96:95:dc:82:05:c8:
         72:28:71:f8:a3:a4:1e:b0:07:e6:c0:17:b1:3d:38:66:b2:2b:
         05:61:cb:1a:5b:00:95:e1:c3:1a:22:e4:7d:f8:7c:4a:30:94:
         ba:de:2b:26:1f:b5:22:24:0f:e5:74:d5:54:75:6b:84:64:90:
         40:c3:e2:32:89:ef:49:d9:09:9c:ab:f8:25:b0:80:42:af:a1:
         54:21:32:46:d1:7c:24:7a:c2:9c:b8:ab:81:c1:99:13:02:50:
         38:66:e2:4f
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUfKOfj7MyDBBEJ7Y6zjtVlFh3iVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIxNzIzRUU2Qzk2QkFFNjMyMjVDMTg2NTI5NzdGOEU0
MDREQkQyODAeFw0yNTAyMDQxODA4NDhaFw0yNjAyMDMxODEzNDhaMDMxMTAvBgNV
BAMTKENFREE0NjdFREE0NjEwM0MzMjUyQUMyMzJGOTVDNjg1RkE0MzkwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrwRdI+iO5xsDo94qQEeC3cvSf
s8WNcqL8lPk9Z1PaLmM1CNDccN2huf3nqbcE98wQDJspfOSKc0LZg9dH4GH6pk5q
Dpw9H+4brIyM6HePC+vDHzEvWZVfG5mFFzHsimlsBZL/3DgoVC7bDOClWeuPpjiA
mIVgbTVWummdkCZzt/E2CH5KzImAa4wFwizWYiw40Nc/noxoNVo26Rx+cxuGLC0p
TDkJ5ik4dSqZKi7o4gxzVieKA0mITlhKIRimpXjfvUNERXc+FRt7QwMgvlFl8Grz
eZ6aCD8JVVudOGsN8S/YEBlvXurxbb3OnwztmWXlTRX3FB2lzN5ojlJFCcsHAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUztpGftpGEDwyUqwjL5XGhfpDkIwwHwYDVR0j
BBgwFoAUchcj7myWuuYyJcGGUpd/jkBNvSgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QkEzN0E0NTlGMjkzQzMwMDM2MjE2QkI0NEZFOTlGQzE0
N0NEOEJGRkRFMkZGM0M1RTY3NTM3Mjg3NDgxRTYwLzAvNzIxNzIzRUU2Qzk2QkFF
NjMyMjVDMTg2NTI5NzdGOEU0MDREQkQyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjE3MjNFRTZDOTZCQUU2MzIy
NUMxODY1Mjk3N0Y4RTQwNERCRDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEJBMzdBNDU5RjI5M0MzMDAzNjIxNkJCNDRGRTk5RkMxNDdDRDhCRkZE
RTJGRjNDNUU2NzUzNzI4NzQ4MUU2MC8wLzMyMzgzMDMxM2EzMTYyMzkzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzkzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
uQAEMA0GCSqGSIb3DQEBCwUAA4IBAQCHC8isXr3VG9jLCnYPNc1eQx+RggRQV8pi
D7014np7TXvXkvKGbNVHDSGBaoRjMQYR+noscMWOzyphhYCQvOrSPDiIOvhyAe6M
3p67UYL2m0Qt7tpoWyZhuAh34kQig34A3v6DO67bUbRUn9KH+obXuNl4cQ5VYvTq
sHvHqcyDPK5QDQvMv4hm+/FSXW1XOUFcmu2gTImEy7XtQ7CWldyCBchyKHH4o6Qe
sAfmwBexPThmsisFYcsaWwCV4cMaIuR9+HxKMJS63ismH7UiJA/ldNVUdWuEZJBA
w+Iyie9J2Qmcq/glsIBCr6FUITJG0XwkesKcuKuBwZkTAlA4ZuJP
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client