Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632323036.roa
File:                     323830303a3836303a3a2f33322d3634203d3e20323632323036.roa (raw, json)
Hash identifier:          VkIKParescvw4XWwLDu6zBBwyKD7uKLxqoqT2yNlr0c=
Subject key identifier:   FC:3E:72:6E:0D:F2:E8:18:69:94:FD:ED:5E:64:FD:71:7B:42:27:07
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       7D6772783FDD46258AC03791572306356EA58BC2
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:14:31 +0000
ROA not before:           Tue 04 Feb 2025 18:09:31 +0000
ROA not after:            Tue 03 Feb 2026 18:14:31 +0000
asID:                     262206
IP address blocks:        2800:860::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:72:78:3f:dd:46:25:8a:c0:37:91:57:23:06:35:6e:a5:8b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:31 2025 GMT
            Not After : Feb  3 18:14:31 2026 GMT
        Subject: CN=FC3E726E0DF2E8186994FDED5E64FD717B422707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:a8:11:f2:a5:25:7a:e2:8a:7b:6b:9e:7d:
                    72:b3:59:a8:65:d2:70:bd:ea:af:fc:cc:01:12:8d:
                    25:b4:8c:b1:cf:de:48:4e:96:38:ab:2f:5e:bf:37:
                    56:8e:c6:18:25:83:2f:48:19:87:c0:e1:95:aa:17:
                    18:ec:ec:12:27:e4:63:4b:48:b9:96:b2:7f:14:0b:
                    e0:54:e8:60:8f:5f:26:62:f2:d2:9b:4d:60:e4:c9:
                    36:15:4a:6b:6f:41:15:45:27:c5:f6:b8:bd:e1:6a:
                    63:93:2c:56:49:e8:07:3a:47:b2:b5:3e:ef:fe:0a:
                    9a:eb:23:c6:61:26:b6:d4:e9:9c:67:32:c1:9c:8f:
                    02:8f:a4:e8:ea:9d:11:78:28:e3:52:11:d3:31:c9:
                    12:f8:74:14:b6:6b:ef:f8:5f:36:39:c3:83:94:96:
                    58:22:45:29:f1:0f:42:f6:fa:ce:8e:5c:63:79:76:
                    19:2e:2c:32:37:a1:21:31:fd:83:cf:ef:d4:ef:d7:
                    41:fb:4b:9a:44:02:67:98:d5:cf:f6:70:e4:2c:0d:
                    78:1f:3b:f3:fe:4d:18:52:65:15:d1:d7:9c:1b:e1:
                    24:96:75:dc:56:ae:3c:77:b0:4b:5e:0a:6a:cd:09:
                    44:d7:b0:37:cb:8f:5f:06:fe:d1:2e:70:4a:a8:74:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:72:6E:0D:F2:E8:18:69:94:FD:ED:5E:64:FD:71:7B:42:27:07
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:bb:af:e2:37:64:df:99:2a:2f:ed:84:84:05:86:b5:cf:ce:
         e1:ae:2b:7a:bf:1e:94:0d:b5:2d:c7:2a:d1:cc:66:00:7a:20:
         6a:d8:f0:03:5a:47:9e:c3:5d:b4:4f:0f:07:5d:c9:e9:06:ca:
         ec:a1:fe:36:eb:d8:82:fb:8d:7c:9e:e9:c9:f1:c0:ef:3d:93:
         6e:19:b7:0d:04:d5:cf:9c:90:40:88:bb:b5:4f:a5:d7:fe:1b:
         3e:76:9d:a4:0c:b2:4b:cb:71:e1:e8:00:ad:b7:eb:f3:65:8f:
         09:fa:06:db:53:71:3b:1b:a5:11:87:7a:8a:7a:04:e2:4e:24:
         d4:61:12:8e:7b:32:a6:cc:c8:f5:4f:11:c0:77:32:70:03:65:
         8d:75:ff:30:6b:34:03:37:1d:81:9a:6f:d7:80:96:79:52:61:
         c9:cb:30:35:72:06:24:a2:b4:d1:29:df:4e:73:1a:b1:44:46:
         32:60:57:12:71:fe:37:7b:05:27:bf:76:25:64:4a:00:d5:c4:
         51:8d:e6:a2:c9:89:1f:b0:b4:c1:c4:e0:32:f2:f5:60:94:27:
         04:f7:ea:74:61:80:46:4d:b9:e6:57:04:8a:5b:53:8c:d9:1a:
         4b:2e:65:2c:08:05:d1:5f:4f:dc:e6:3a:91:e7:41:b3:97:66:
         f7:a9:3b:30
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfWdyeD/dRiWKwDeRVyMGNW6li8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNTAyMDQxODA5MzFaFw0yNjAyMDMxODE0MzFaMDMxMTAvBgNV
BAMTKEZDM0U3MjZFMERGMkU4MTg2OTk0RkRFRDVFNjRGRDcxN0I0MjI3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSqgR8qUleuKKe2uefXKzWahl
0nC96q/8zAESjSW0jLHP3khOljirL16/N1aOxhglgy9IGYfA4ZWqFxjs7BIn5GNL
SLmWsn8UC+BU6GCPXyZi8tKbTWDkyTYVSmtvQRVFJ8X2uL3hamOTLFZJ6Ac6R7K1
Pu/+CprrI8ZhJrbU6ZxnMsGcjwKPpOjqnRF4KONSEdMxyRL4dBS2a+/4XzY5w4OU
llgiRSnxD0L2+s6OXGN5dhkuLDI3oSEx/YPP79Tv10H7S5pEAmeY1c/2cOQsDXgf
O/P+TRhSZRXR15wb4SSWddxWrjx3sEteCmrNCUTXsDfLj18G/tEucEqodGuvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU/D5ybg3y6BhplP3tXmT9cXtCJwcwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMyMzgzMDMwM2EzODM2MzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM2MzIzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAhgMA0G
CSqGSIb3DQEBCwUAA4IBAQDLu6/iN2TfmSov7YSEBYa1z87hrit6vx6UDbUtxyrR
zGYAeiBq2PADWkeew120Tw8HXcnpBsrsof4269iC+418nunJ8cDvPZNuGbcNBNXP
nJBAiLu1T6XX/hs+dp2kDLJLy3Hh6ACtt+vzZY8J+gbbU3E7G6URh3qKegTiTiTU
YRKOezKmzMj1TxHAdzJwA2WNdf8wazQDNx2Bmm/XgJZ5UmHJyzA1cgYkorTRKd9O
cxqxREYyYFcScf43ewUnv3YlZEoA1cRRjeaiyYkfsLTBxOAy8vVglCcE9+p0YYBG
TbnmVwSKW1OM2RpLLmUsCAXRX0/c5jqR50Gzl2b3qTsw
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:14 2025 by rpki-client