Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EACF919A7118A0E632E83FDBB1D7B2706593C793D6F09629716C84C9057512D/0/323830333a333534303a3a2f33322d3438203d3e203631353139.roa
File:                     323830333a333534303a3a2f33322d3438203d3e203631353139.roa (raw, json)
Hash identifier:          115ntaCVH/rbz9yDFjB/33BlcW0Z+yzug2lXudCq/Ks=
Subject key identifier:   97:C3:75:CD:1D:28:E4:FB:CB:17:FC:33:E1:3B:72:9E:20:09:09:FE
Certificate issuer:       /CN=547207D9ECACF51F970303539CED29E97873F9AD
Certificate serial:       1F891A5EC5E8CE3D94B61B2288E38ECEA17A33AE
Authority key identifier: 54:72:07:D9:EC:AC:F5:1F:97:03:03:53:9C:ED:29:E9:78:73:F9:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/547207D9ECACF51F970303539CED29E97873F9AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4EACF919A7118A0E632E83FDBB1D7B2706593C793D6F09629716C84C9057512D/0/323830333a333534303a3a2f33322d3438203d3e203631353139.roa
Signing time:             Tue 04 Feb 2025 18:27:21 +0000
ROA not before:           Tue 04 Feb 2025 18:22:21 +0000
ROA not after:            Tue 03 Feb 2026 18:27:21 +0000
asID:                     61519
IP address blocks:        2803:3540::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:89:1a:5e:c5:e8:ce:3d:94:b6:1b:22:88:e3:8e:ce:a1:7a:33:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547207D9ECACF51F970303539CED29E97873F9AD
        Validity
            Not Before: Feb  4 18:22:21 2025 GMT
            Not After : Feb  3 18:27:21 2026 GMT
        Subject: CN=97C375CD1D28E4FBCB17FC33E13B729E200909FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:49:e9:08:4f:16:9d:2a:68:b8:31:42:ff:
                    9c:25:25:d0:57:97:cc:e2:74:bf:5c:de:02:ff:97:
                    ac:d4:71:2a:88:0f:e4:80:7f:10:c1:db:a3:28:77:
                    94:52:d3:3d:4b:d2:2c:fb:cc:ba:34:f1:e3:28:aa:
                    6c:90:8a:7c:f9:00:f8:f5:82:48:47:61:22:57:88:
                    7d:c6:d0:75:58:65:d9:e2:a9:67:fb:3c:09:9d:9c:
                    f7:45:3a:77:06:3e:4c:14:79:e0:d6:c1:4d:b2:32:
                    fa:84:5c:9c:43:c8:3c:ca:32:69:83:42:ca:2b:fd:
                    90:d0:4a:a4:0d:52:a8:03:06:d0:4a:2a:88:6c:39:
                    b3:6b:dd:e2:fc:7a:c4:df:bf:f3:f1:2e:3c:93:94:
                    8e:b6:23:bb:be:30:ff:e1:db:e7:a6:58:ea:2b:ed:
                    e4:3a:67:12:dd:f8:68:e5:37:bb:85:e8:f8:5d:ea:
                    ef:f6:0c:6e:ad:f4:48:7d:f8:ba:ce:6c:84:d1:7f:
                    fa:82:98:ed:63:dd:58:57:11:68:29:95:16:7b:23:
                    36:aa:96:22:15:a1:c5:2b:b2:8b:65:34:9f:7f:0a:
                    24:ef:f7:87:9f:20:69:e6:c6:5d:f7:3d:8f:d5:26:
                    1f:06:93:c0:51:4e:56:f3:ea:8f:f5:b4:de:23:a3:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:75:CD:1D:28:E4:FB:CB:17:FC:33:E1:3B:72:9E:20:09:09:FE
            X509v3 Authority Key Identifier:
                keyid:54:72:07:D9:EC:AC:F5:1F:97:03:03:53:9C:ED:29:E9:78:73:F9:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4EACF919A7118A0E632E83FDBB1D7B2706593C793D6F09629716C84C9057512D/0/547207D9ECACF51F970303539CED29E97873F9AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/547207D9ECACF51F970303539CED29E97873F9AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EACF919A7118A0E632E83FDBB1D7B2706593C793D6F09629716C84C9057512D/0/323830333a333534303a3a2f33322d3438203d3e203631353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:89:0c:83:85:30:48:9c:f4:5f:d0:44:2b:42:eb:aa:16:bd:
         bc:6e:1a:05:69:0c:3e:8f:1d:96:d2:e0:ec:4f:a3:9e:0f:e8:
         25:fc:ce:71:96:1e:d1:cd:4c:5d:99:9e:4b:3e:53:61:f5:b3:
         14:5f:98:9c:6c:6c:77:b1:3e:60:b3:1b:df:b4:c3:78:9f:3d:
         2b:42:26:5d:80:1b:af:2c:72:b4:b5:6c:19:56:1d:22:5d:7e:
         77:93:bb:d9:6e:4c:19:00:f4:19:51:82:59:a0:6a:68:0c:98:
         eb:00:65:3f:ff:f6:a8:dd:b0:1f:f3:18:9b:c7:b5:8d:4d:b5:
         53:cc:d3:2c:75:55:84:36:61:31:96:b8:f4:7e:24:99:fc:77:
         ae:88:30:3d:04:6d:cb:15:84:ea:66:57:5d:18:48:1e:54:58:
         29:91:8d:c6:1b:59:ef:0c:b5:5e:59:a5:74:3b:ba:19:24:62:
         bd:a0:ab:92:8e:8c:26:c7:89:c7:9d:48:6c:37:85:1b:d1:a7:
         b6:21:7b:c4:bb:c2:4b:eb:1e:31:24:ab:f4:01:02:36:0b:91:
         04:bf:47:fc:62:15:62:93:5b:67:03:68:90:e1:4a:5d:09:50:
         af:d1:60:b4:65:4d:ba:16:e1:e2:e7:3b:ea:07:8e:76:3e:c3:
         9c:f6:e6:0c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUH4kaXsXozj2UthsiiOOOzqF6M64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3MjA3RDlFQ0FDRjUxRjk3MDMwMzUzOUNFRDI5RTk3
ODczRjlBRDAeFw0yNTAyMDQxODIyMjFaFw0yNjAyMDMxODI3MjFaMDMxMTAvBgNV
BAMTKDk3QzM3NUNEMUQyOEU0RkJDQjE3RkMzM0UxM0I3MjlFMjAwOTA5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS0npCE8WnSpouDFC/5wlJdBX
l8zidL9c3gL/l6zUcSqID+SAfxDB26Mod5RS0z1L0iz7zLo08eMoqmyQinz5APj1
gkhHYSJXiH3G0HVYZdniqWf7PAmdnPdFOncGPkwUeeDWwU2yMvqEXJxDyDzKMmmD
Qsor/ZDQSqQNUqgDBtBKKohsObNr3eL8esTfv/PxLjyTlI62I7u+MP/h2+emWOor
7eQ6ZxLd+GjlN7uF6Phd6u/2DG6t9Eh9+LrObITRf/qCmO1j3VhXEWgplRZ7Izaq
liIVocUrsotlNJ9/CiTv94efIGnmxl33PY/VJh8Gk8BRTlbz6o/1tN4jo7znAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUl8N1zR0o5PvLF/wz4TtyniAJCf4wHwYDVR0j
BBgwFoAUVHIH2eys9R+XAwNTnO0p6Xhz+a0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RUFDRjkxOUE3MTE4QTBFNjMyRTgzRkRCQjFEN0IyNzA2
NTkzQzc5M0Q2RjA5NjI5NzE2Qzg0QzkwNTc1MTJELzAvNTQ3MjA3RDlFQ0FDRjUx
Rjk3MDMwMzUzOUNFRDI5RTk3ODczRjlBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NDcyMDdEOUVDQUNGNTFGOTcw
MzAzNTM5Q0VEMjlFOTc4NzNGOUFELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEVBQ0Y5MTlBNzExOEEwRTYzMkU4M0ZEQkIxRDdCMjcwNjU5M0M3OTNE
NkYwOTYyOTcxNkM4NEM5MDU3NTEyRC8wLzMyMzgzMDMzM2EzMzM1MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzVAMA0G
CSqGSIb3DQEBCwUAA4IBAQByiQyDhTBInPRf0EQrQuuqFr28bhoFaQw+jx2W0uDs
T6OeD+gl/M5xlh7RzUxdmZ5LPlNh9bMUX5icbGx3sT5gsxvftMN4nz0rQiZdgBuv
LHK0tWwZVh0iXX53k7vZbkwZAPQZUYJZoGpoDJjrAGU///ao3bAf8xibx7WNTbVT
zNMsdVWENmExlrj0fiSZ/HeuiDA9BG3LFYTqZlddGEgeVFgpkY3GG1nvDLVeWaV0
O7oZJGK9oKuSjowmx4nHnUhsN4Ub0ae2IXvEu8JL6x4xJKv0AQI2C5EEv0f8YhVi
k1tnA2iQ4UpdCVCv0WC0ZU26FuHi5zvqB452PsOc9uYM
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:59 2025 by rpki-client