Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/323830333a316361303a3a2f33322d3332203d3e20323636383430.roa
File:                     323830333a316361303a3a2f33322d3332203d3e20323636383430.roa (raw, json)
Hash identifier:          M3yOyr8in42Q2a7fkOGR2MfadsFHTMqMHhZzVY2Chn4=
Subject key identifier:   EB:44:89:D5:13:F2:62:B7:CD:07:04:76:E5:A4:94:81:ED:34:3C:51
Certificate issuer:       /CN=B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74
Certificate serial:       2126CBDF872421932353D966829FDBD001BE16AD
Authority key identifier: B8:BC:6B:CB:8E:51:8D:55:BF:D4:FE:5B:06:9D:BD:BA:40:C4:4A:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/323830333a316361303a3a2f33322d3332203d3e20323636383430.roa
Signing time:             Tue 04 Feb 2025 18:27:34 +0000
ROA not before:           Tue 04 Feb 2025 18:22:34 +0000
ROA not after:            Tue 03 Feb 2026 18:27:34 +0000
asID:                     266840
IP address blocks:        2803:1ca0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:26:cb:df:87:24:21:93:23:53:d9:66:82:9f:db:d0:01:be:16:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74
        Validity
            Not Before: Feb  4 18:22:34 2025 GMT
            Not After : Feb  3 18:27:34 2026 GMT
        Subject: CN=EB4489D513F262B7CD070476E5A49481ED343C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:66:7c:93:9a:e6:02:af:97:f5:89:f8:56:
                    46:85:a9:a1:35:7d:92:55:3e:0c:1d:3c:67:49:7c:
                    67:5d:de:a6:8f:18:c5:3f:c0:b5:5e:30:31:d6:83:
                    21:b7:f7:77:7f:fb:ff:2a:a0:51:20:fd:03:c7:57:
                    17:9a:e8:bd:9a:59:90:04:c5:a3:d6:4c:52:57:e7:
                    c1:80:62:fd:8c:7e:ba:5e:13:85:40:71:e7:55:d4:
                    17:ac:ad:97:03:20:38:bb:48:ed:74:99:c2:35:2f:
                    30:53:a0:53:7f:15:89:c2:7a:e6:9a:db:30:82:43:
                    1c:4f:9e:5c:cc:26:e2:52:c6:be:75:e4:40:60:a5:
                    b5:af:7c:9b:aa:7f:5f:fa:99:04:11:19:b1:a1:a4:
                    5c:2b:00:55:95:63:09:dd:57:23:70:84:af:89:3d:
                    52:58:1f:5b:cb:33:0a:41:ce:a7:14:98:79:a8:3f:
                    4f:00:85:e3:70:35:f8:fb:d6:af:ab:8c:48:df:d5:
                    ac:f8:aa:fa:70:00:cd:6d:10:ca:4c:27:df:35:6b:
                    a7:d2:4c:03:d8:3c:2e:a5:45:eb:4b:27:fd:69:2e:
                    89:f0:31:46:4f:e9:10:68:54:f0:b1:25:5b:3d:d5:
                    f2:0c:83:1e:c4:f0:53:9b:af:a6:b5:7c:61:11:4d:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:89:D5:13:F2:62:B7:CD:07:04:76:E5:A4:94:81:ED:34:3C:51
            X509v3 Authority Key Identifier:
                keyid:B8:BC:6B:CB:8E:51:8D:55:BF:D4:FE:5B:06:9D:BD:BA:40:C4:4A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/323830333a316361303a3a2f33322d3332203d3e20323636383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:cb:e1:1a:84:18:e6:b5:19:61:f0:33:72:37:6c:08:a5:d5:
         a6:a3:a9:1d:f1:e2:72:c9:43:b4:12:ce:34:15:83:46:94:77:
         c3:c0:5b:1c:96:22:67:b2:47:96:4c:ed:05:d9:99:83:c0:dc:
         02:cf:dc:e8:c0:77:f7:3f:fb:d0:52:e6:fc:12:61:ed:1b:a4:
         cc:47:fc:fb:5c:14:c2:13:ca:f0:5f:82:a6:fe:42:f7:9f:64:
         7a:72:63:fa:27:78:ac:4c:0d:2f:6a:01:c6:10:d6:f3:90:2b:
         22:cb:35:b4:c5:cf:e9:22:dd:54:84:a0:a4:d0:81:9c:bc:00:
         9c:f7:0f:9e:c7:f3:a0:0f:13:f8:72:26:d5:cc:1c:94:b4:72:
         a3:1a:2c:a2:f7:09:3a:ee:14:49:3d:10:74:a1:5e:66:61:f8:
         60:b0:ba:38:9a:e0:6a:59:0c:6f:3a:c2:18:10:05:79:85:55:
         07:43:95:7a:cc:25:2b:67:af:0f:5b:18:56:8d:86:9d:27:17:
         82:1a:b4:28:11:ce:6b:8f:40:68:c2:00:68:43:a4:7a:73:5f:
         97:7e:54:4d:4b:4c:c5:c5:74:80:70:0a:79:5b:a5:7d:2b:b8:
         15:7b:0a:7a:ba:82:d4:08:09:8b:13:af:4e:f8:b6:eb:f1:3e:
         a1:44:54:dc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUISbL34ckIZMjU9lmgp/b0AG+Fq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCQzZCQ0I4RTUxOEQ1NUJGRDRGRTVCMDY5REJEQkE0
MEM0NEE3NDAeFw0yNTAyMDQxODIyMzRaFw0yNjAyMDMxODI3MzRaMDMxMTAvBgNV
BAMTKEVCNDQ4OUQ1MTNGMjYyQjdDRDA3MDQ3NkU1QTQ5NDgxRUQzNDNDNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCty2Z8k5rmAq+X9Yn4VkaFqaE1
fZJVPgwdPGdJfGdd3qaPGMU/wLVeMDHWgyG393d/+/8qoFEg/QPHVxea6L2aWZAE
xaPWTFJX58GAYv2MfrpeE4VAcedV1BesrZcDIDi7SO10mcI1LzBToFN/FYnCeuaa
2zCCQxxPnlzMJuJSxr515EBgpbWvfJuqf1/6mQQRGbGhpFwrAFWVYwndVyNwhK+J
PVJYH1vLMwpBzqcUmHmoP08AheNwNfj71q+rjEjf1az4qvpwAM1tEMpMJ981a6fS
TAPYPC6lRetLJ/1pLonwMUZP6RBoVPCxJVs91fIMgx7E8FObr6a1fGERTZb9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU60SJ1RPyYrfNBwR25aSUge00PFEwHwYDVR0j
BBgwFoAUuLxry45RjVW/1P5bBp29ukDESnQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzU4OUE4QkYxNzc5MDlGMjQ0NTc2NzAyRjE3Qjg2QjRC
QzQ2ODVGNDZGMDZFRjQ3OERFQ0MyMTQ5OTA0NkQ3LzAvQjhCQzZCQ0I4RTUxOEQ1
NUJGRDRGRTVCMDY5REJEQkE0MEM0NEE3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEJDNkJDQjhFNTE4RDU1QkZE
NEZFNUIwNjlEQkRCQTQwQzQ0QTc0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTc1ODlBOEJGMTc3OTA5RjI0NDU3NjcwMkYxN0I4NkI0QkM0Njg1RjQ2
RjA2RUY0NzhERUNDMjE0OTkwNDZENy8wLzMyMzgzMDMzM2EzMTYzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHKAw
DQYJKoZIhvcNAQELBQADggEBAM7L4RqEGOa1GWHwM3I3bAil1aajqR3x4nLJQ7QS
zjQVg0aUd8PAWxyWImeyR5ZM7QXZmYPA3ALP3OjAd/c/+9BS5vwSYe0bpMxH/Ptc
FMITyvBfgqb+QvefZHpyY/oneKxMDS9qAcYQ1vOQKyLLNbTFz+ki3VSEoKTQgZy8
AJz3D57H86APE/hyJtXMHJS0cqMaLKL3CTruFEk9EHShXmZh+GCwujia4GpZDG86
whgQBXmFVQdDlXrMJStnrw9bGFaNhp0nF4IatCgRzmuPQGjCAGhDpHpzX5d+VE1L
TMXFdIBwCnlbpX0ruBV7Cnq6gtQICYsTr074tuvxPqFEVNw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:10 2025 by rpki-client