Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          9g4H3KbmSq8qPGpKm/HHdbrjdsce0LZcQ3awD8fIsUo=
Subject key identifier:   1E:83:FE:DC:20:36:09:02:6E:63:71:98:3D:EE:B8:F0:B5:4F:B3:66
Certificate issuer:       /CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB
Certificate serial:       15C9E9E52297FE4158E86F1E71527A969B915933
Authority key identifier: 32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:46:01 +0000
ROA not before:           Tue 04 Feb 2025 18:41:01 +0000
ROA not after:            Tue 03 Feb 2026 18:46:01 +0000
asID:                     14080
IP address blocks:        2801:19:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:e9:e5:22:97:fe:41:58:e8:6f:1e:71:52:7a:96:9b:91:59:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB
        Validity
            Not Before: Feb  4 18:41:01 2025 GMT
            Not After : Feb  3 18:46:01 2026 GMT
        Subject: CN=1E83FEDC203609026E6371983DEEB8F0B54FB366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:4e:9e:d8:37:d3:62:29:72:3f:7e:64:40:
                    cd:76:da:90:3d:4d:d8:83:89:43:18:28:57:d3:a7:
                    c7:8e:07:11:29:0c:ed:66:40:60:45:0d:de:69:21:
                    9f:6c:d4:03:57:db:64:8e:89:36:80:e7:ef:8e:72:
                    62:1f:c5:65:bf:04:14:d9:ea:b9:b3:6a:dc:b5:ef:
                    25:8d:b3:8b:6c:f9:b5:2d:78:13:65:61:0a:d8:35:
                    ab:1a:b2:9c:20:93:26:1e:66:72:c8:68:44:44:c1:
                    9d:6e:b3:9b:66:a1:95:97:e5:60:4c:ef:09:2d:e6:
                    1f:36:cd:fb:70:89:bf:22:35:20:03:4a:9d:6a:8d:
                    7c:70:50:41:db:98:83:cf:b1:85:2c:ce:93:ec:91:
                    16:f9:c7:f8:b9:f3:9e:a2:b0:51:a2:9b:48:c9:b5:
                    bf:78:61:2c:06:03:08:0f:e7:29:9f:14:a5:16:da:
                    12:d3:e5:cf:ed:6d:44:9f:a4:c7:36:08:0f:d3:a7:
                    63:54:58:36:ee:a6:4e:65:f1:09:cd:78:b9:3b:37:
                    00:58:1d:63:05:77:f6:bb:1e:e5:ba:28:43:25:c3:
                    a7:29:c2:db:44:2f:f6:0c:67:b2:c3:a2:74:75:55:
                    10:ba:9c:52:d6:cd:76:78:ba:be:1e:0d:d3:54:81:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:FE:DC:20:36:09:02:6E:63:71:98:3D:EE:B8:F0:B5:4F:B3:66
            X509v3 Authority Key Identifier:
                keyid:32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:38:7b:43:e8:ca:d4:81:03:df:92:96:ea:63:4f:32:17:
         33:4b:c8:9f:50:59:95:7d:56:e3:64:6f:12:75:b3:00:58:99:
         60:db:70:72:18:ea:75:ee:c5:e3:4f:43:7f:2c:7b:3a:5a:be:
         93:2f:9f:97:55:d6:c5:b8:9b:cf:95:8a:4a:e9:34:5f:10:f0:
         01:7f:76:1f:d7:c7:8e:3c:e1:ac:50:25:05:81:a6:6a:3d:ad:
         d2:0f:e8:19:60:a2:23:ee:aa:fa:5b:c4:01:fb:c8:0a:0a:b7:
         2f:f7:af:11:2a:be:06:d0:a7:96:42:50:cf:36:7f:1f:45:0e:
         04:42:1f:9f:da:85:c1:23:57:db:07:e7:10:19:88:2e:2c:8c:
         f2:20:3a:3d:9d:50:b6:76:65:0a:f8:f4:00:0a:ab:69:f9:fd:
         c7:f8:b7:05:97:20:2f:4a:9d:4e:77:2b:38:59:e4:92:92:c9:
         5b:6b:f9:37:4f:f7:2d:50:a2:f7:60:49:13:fb:5c:1e:9e:d4:
         3c:48:9f:c8:cd:85:b4:11:d6:08:77:25:29:cf:13:07:67:19:
         86:df:33:88:a9:d4:41:86:c7:3d:2d:c2:8a:b6:ff:79:b4:af:
         34:2b:f3:5c:f0:ad:a4:6a:c4:68:b4:11:40:33:ef:76:8c:aa:
         44:0c:59:6a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFcnp5SKX/kFY6G8ecVJ6lpuRWTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJCMUJBOURDNjlDNTlDMzVDNjNDMzUzNEFBNDAwRERC
ODRBMzJFQjAeFw0yNTAyMDQxODQxMDFaFw0yNjAyMDMxODQ2MDFaMDMxMTAvBgNV
BAMTKDFFODNGRURDMjAzNjA5MDI2RTYzNzE5ODNERUVCOEYwQjU0RkIzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFs06e2DfTYilyP35kQM122pA9
TdiDiUMYKFfTp8eOBxEpDO1mQGBFDd5pIZ9s1ANX22SOiTaA5++OcmIfxWW/BBTZ
6rmzaty17yWNs4ts+bUteBNlYQrYNasaspwgkyYeZnLIaEREwZ1us5tmoZWX5WBM
7wkt5h82zftwib8iNSADSp1qjXxwUEHbmIPPsYUszpPskRb5x/i5856isFGim0jJ
tb94YSwGAwgP5ymfFKUW2hLT5c/tbUSfpMc2CA/Tp2NUWDbupk5l8QnNeLk7NwBY
HWMFd/a7HuW6KEMlw6cpwttEL/YMZ7LDonR1VRC6nFLWzXZ4ur4eDdNUgd/TAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUHoP+3CA2CQJuY3GYPe648LVPs2YwHwYDVR0j
BBgwFoAUMrG6ncacWcNcY8NTSqQA3bhKMuswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjU1Q0U5OTNFREE0ODVDNEJGQzRDRjExMEIwMTU2NEZD
MEMxQzMxNEYzNkRCMEM3NTlBNTI1QjkwOTZFRUNELzAvMzJCMUJBOURDNjlDNTlD
MzVDNjNDMzUzNEFBNDAwRERCODRBMzJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkIxQkE5REM2OUM1OUMzNUM2
M0MzNTM0QUE0MDBEREI4NEEzMkVCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY1NUNFOTkzRURBNDg1QzRCRkM0Q0YxMTBCMDE1NjRGQzBDMUMzMTRG
MzZEQjBDNzU5QTUyNUI5MDk2RUVDRC8wLzMyMzgzMDMxM2EzMTM5M2EzOTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAZmAAwDQYJKoZIhvcNAQELBQADggEBAA9zOHtD6MrUgQPfkpbqY08yFzNLyJ9Q
WZV9VuNkbxJ1swBYmWDbcHIY6nXuxeNPQ38sezpavpMvn5dV1sW4m8+VikrpNF8Q
8AF/dh/Xx4484axQJQWBpmo9rdIP6BlgoiPuqvpbxAH7yAoKty/3rxEqvgbQp5ZC
UM82fx9FDgRCH5/ahcEjV9sH5xAZiC4sjPIgOj2dULZ2ZQr49AAKq2n5/cf4twWX
IC9KnU53KzhZ5JKSyVtr+TdP9y1QovdgSRP7XB6e1DxIn8jNhbQR1gh3JSnPEwdn
GYbfM4ip1EGGxz0twoq2/3m0rzQr81zwraRqxGi0EUAz73aMqkQMWWo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:15 2025 by rpki-client