Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa
File:                     323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa (raw, json)
Hash identifier:          cRXIWgmlgTYp/81FizAb9s9e3T6TscyVcc4jpAEJCnw=
Subject key identifier:   E3:C2:C5:E7:89:32:96:8E:DA:DB:9A:D7:17:65:FC:DF:37:15:53:6B
Certificate issuer:       /CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
Certificate serial:       1DD93502C2C4217434CFC0D2F760116372C21FA6
Authority key identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa
Signing time:             Tue 04 Feb 2025 20:06:13 +0000
ROA not before:           Tue 04 Feb 2025 20:01:13 +0000
ROA not after:            Tue 03 Feb 2026 20:06:13 +0000
asID:                     272821
IP address blocks:        2801:1d4:640::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d9:35:02:c2:c4:21:74:34:cf:c0:d2:f7:60:11:63:72:c2:1f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
        Validity
            Not Before: Feb  4 20:01:13 2025 GMT
            Not After : Feb  3 20:06:13 2026 GMT
        Subject: CN=E3C2C5E78932968EDADB9AD71765FCDF3715536B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:c9:b7:80:5e:4d:98:90:8c:e1:be:95:3b:
                    fa:eb:49:ff:fe:a6:b9:0e:35:3c:19:13:e1:6f:6d:
                    1c:31:fb:69:b8:d9:04:d3:cb:db:62:fa:b9:f4:7c:
                    cb:37:23:09:89:95:79:62:df:cc:03:15:7e:68:64:
                    3b:b4:69:b4:99:a2:ba:70:ac:0c:a8:0c:90:79:9e:
                    52:39:b4:70:e1:10:2a:b4:25:fd:03:e3:51:77:10:
                    5d:43:73:7d:33:32:26:a2:cb:04:32:57:4b:86:c9:
                    e2:43:5a:27:05:4e:a1:9a:3c:6f:1a:bc:87:4b:53:
                    06:b0:cd:9a:65:ec:1d:68:09:7e:5e:56:30:e5:03:
                    47:86:19:eb:ac:33:79:fe:c1:53:0d:5c:aa:54:ab:
                    3b:2c:b6:50:63:17:12:df:fa:47:55:43:80:93:44:
                    56:99:e0:2a:94:96:fc:1b:07:a7:d3:92:9d:ee:21:
                    0b:97:68:2f:a2:9c:38:99:72:8d:77:9a:6d:b5:f2:
                    90:91:db:71:87:14:f2:1c:5e:aa:d1:93:b8:1e:99:
                    10:80:6e:a4:92:d4:41:8a:86:67:72:53:0a:ad:eb:
                    90:e4:f4:2f:54:57:2b:ba:56:18:aa:e9:94:a6:10:
                    6d:de:ac:36:13:d2:fa:2d:60:47:d0:fc:4b:fc:73:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:C5:E7:89:32:96:8E:DA:DB:9A:D7:17:65:FC:DF:37:15:53:6B
            X509v3 Authority Key Identifier:
                keyid:A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:33:97:9f:05:de:c2:ec:91:89:a9:be:5d:c7:a1:2d:b6:e2:
         6d:d1:be:4f:68:b0:51:0e:b7:e1:52:90:3a:f1:52:59:88:fd:
         92:80:b3:78:98:b7:5c:bf:7d:2f:8e:53:d8:1a:d7:ba:4e:c8:
         12:cc:76:c5:09:d5:c4:f2:e0:56:cb:e0:7e:d2:1c:e7:71:03:
         cd:bb:1a:6f:38:c3:67:99:76:6d:ed:03:5c:ad:2f:14:10:a2:
         fe:7a:0d:2d:86:c1:d7:7c:b7:4b:87:95:6a:04:7a:b6:02:3a:
         d9:c8:db:32:03:35:6d:11:49:48:2e:79:4a:87:8c:34:3f:8d:
         10:aa:d8:13:58:c9:9f:b3:6b:99:a4:4a:04:03:fc:7f:4d:65:
         78:18:59:55:d9:ce:a2:c5:ba:d8:a9:97:9c:87:e5:ba:71:7f:
         df:ec:1e:e2:0c:da:ce:d1:5d:1b:7c:aa:72:e9:5f:af:90:76:
         a4:94:ee:a4:23:93:e1:0d:bb:38:a9:4a:01:8d:7b:e5:3e:4d:
         d6:23:b0:27:78:08:46:51:95:e5:f3:36:f4:a9:b8:5d:85:e8:
         fc:fb:8b:09:15:48:93:f0:2a:e0:9b:13:06:19:ae:54:40:0e:
         ab:44:49:d3:52:83:80:77:ec:89:03:97:87:08:2f:7c:26:c9:
         02:db:a4:a7
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUHdk1AsLEIXQ0z8DS92ARY3LCH6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA2QkFFMjE0QTBCNjgxMUQzNkFCMThCM0Q0ODgyRUY1
NTAxM0E5MTAeFw0yNTAyMDQyMDAxMTNaFw0yNjAyMDMyMDA2MTNaMDMxMTAvBgNV
BAMTKEUzQzJDNUU3ODkzMjk2OEVEQURCOUFENzE3NjVGQ0RGMzcxNTUzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ncm3gF5NmJCM4b6VO/rrSf/+
prkONTwZE+FvbRwx+2m42QTTy9ti+rn0fMs3IwmJlXli38wDFX5oZDu0abSZorpw
rAyoDJB5nlI5tHDhECq0Jf0D41F3EF1Dc30zMiaiywQyV0uGyeJDWicFTqGaPG8a
vIdLUwawzZpl7B1oCX5eVjDlA0eGGeusM3n+wVMNXKpUqzsstlBjFxLf+kdVQ4CT
RFaZ4CqUlvwbB6fTkp3uIQuXaC+inDiZco13mm218pCR23GHFPIcXqrRk7gemRCA
bqSS1EGKhmdyUwqt65Dk9C9UVyu6Vhiq6ZSmEG3erDYT0votYEfQ/Ev8cy9hAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU48LF54kylo7a25rXF2X83zcVU2swHwYDVR0j
BBgwFoAUoGuuIUoLaBHTarGLPUiC71UBOpEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjUxQzA4QjRENTE5MUM3RjAxOTU3NDkyNjQzM0UxMTI2
ODhDRUE5MjE2NkFFREFEMkVGRUQwRUI4NjQxMjY2LzAvQTA2QkFFMjE0QTBCNjgx
MUQzNkFCMThCM0Q0ODgyRUY1NTAxM0E5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDZCQUUyMTRBMEI2ODExRDM2
QUIxOEIzRDQ4ODJFRjU1MDEzQTkxLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY1MUMwOEI0RDUxOTFDN0YwMTk1NzQ5MjY0MzNFMTEyNjg4Q0VBOTIx
NjZBRURBRDJFRkVEMEVCODY0MTI2Ni8wLzMyMzgzMDMxM2EzMTY0MzQzYTM2MzQz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzIzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAdQGQDANBgkqhkiG9w0BAQsFAAOCAQEAnjOXnwXewuyRiam+XcehLbbibdG+
T2iwUQ634VKQOvFSWYj9koCzeJi3XL99L45T2BrXuk7IEsx2xQnVxPLgVsvgftIc
53EDzbsabzjDZ5l2be0DXK0vFBCi/noNLYbB13y3S4eVagR6tgI62cjbMgM1bRFJ
SC55SoeMND+NEKrYE1jJn7NrmaRKBAP8f01leBhZVdnOosW62KmXnIflunF/3+we
4gzaztFdG3yqculfr5B2pJTupCOT4Q27OKlKAY175T5N1iOwJ3gIRlGV5fM29Km4
XYXo/PuLCRVIk/Aq4JsTBhmuVEAOq0RJ01KDgHfsiQOXhwgvfCbJAtukpw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:01 2025 by rpki-client