Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa
File:                     323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa (raw, json)
Hash identifier:          02R/poGntyLifXqnJEwkZB7lSWSYYZaRz6bBzzLuyks=
Subject key identifier:   9E:89:91:6F:61:00:4F:E7:53:74:32:6B:51:E0:E5:04:E5:4A:D7:22
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       5E38309DBDC088862BFF9A2755BE581FA4F5EF06
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa
Signing time:             Tue 04 Feb 2025 18:01:37 +0000
ROA not before:           Tue 04 Feb 2025 17:56:37 +0000
ROA not after:            Tue 03 Feb 2026 18:01:37 +0000
asID:                     27941
IP address blocks:        2803:2180:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:38:30:9d:bd:c0:88:86:2b:ff:9a:27:55:be:58:1f:a4:f5:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Feb  4 17:56:37 2025 GMT
            Not After : Feb  3 18:01:37 2026 GMT
        Subject: CN=9E89916F61004FE75374326B51E0E504E54AD722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:a6:fd:90:ee:5b:9c:2f:2d:44:81:0d:1c:
                    ed:23:e4:d7:55:d5:59:03:33:96:6c:81:39:df:3c:
                    20:b5:c2:3a:32:ea:ff:b5:7b:ad:f7:af:e0:3c:0c:
                    47:3b:85:52:b4:8b:fa:b6:d2:ba:0f:ee:30:cc:05:
                    54:d1:d5:62:fd:57:67:d7:8d:e8:6e:63:e7:6e:de:
                    05:da:9f:a5:bd:bf:68:de:79:54:f8:97:df:4d:fa:
                    66:ad:c9:16:b2:9d:aa:36:d1:2a:1d:e9:b4:32:a4:
                    f5:e8:12:d5:02:ee:20:b4:02:80:94:d6:f9:04:3e:
                    f2:1c:73:57:75:8f:94:39:f1:3b:bc:03:aa:1e:e4:
                    11:ef:81:2f:6d:a8:20:80:52:43:be:5e:58:88:71:
                    2b:78:50:2a:c8:a0:f9:05:d4:dd:a2:4d:9f:56:2d:
                    eb:c6:e8:27:53:af:60:a3:f0:9a:4b:4b:43:7b:e9:
                    e5:b5:4c:68:cd:18:40:60:fd:ec:7c:07:f5:9c:32:
                    6f:67:90:76:b1:2b:85:e6:d8:0c:ba:60:38:94:d3:
                    c2:ee:b7:1a:3a:2c:a0:fe:0c:a3:3c:61:cb:e0:2a:
                    c4:f9:65:57:21:92:c3:0a:fe:37:35:80:9f:9c:0c:
                    e9:c9:ce:96:f2:17:2f:18:3f:0b:4d:9d:59:ee:c0:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:89:91:6F:61:00:4F:E7:53:74:32:6B:51:E0:E5:04:E5:4A:D7:22
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2180:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:86:f0:d0:a1:db:e5:d8:bf:d1:02:6f:6c:5a:e6:e6:a4:
         bb:c7:db:ca:f0:70:9f:4c:78:c8:7f:7e:0e:7f:6b:5c:2c:31:
         89:d0:b6:66:b3:af:19:46:91:db:18:36:70:c3:0f:60:ce:8e:
         43:05:90:98:e6:9f:3b:fc:1f:4d:04:1e:20:c2:2f:e7:b8:24:
         76:a7:86:4f:8e:f9:c7:4b:af:ff:9a:14:1f:20:3c:60:1d:70:
         15:fd:31:81:b6:ba:23:e0:be:90:d2:62:21:31:94:c9:d8:ee:
         33:06:88:f0:29:a6:3f:66:f5:3c:52:e7:fd:ab:d2:52:04:6f:
         af:37:60:12:ef:b8:e1:6d:a1:68:51:1c:7d:40:e1:ce:33:c3:
         ff:ba:fc:ca:9c:b1:16:60:91:e1:be:dc:32:ef:d0:9a:80:00:
         c4:d5:14:5c:66:20:57:52:27:75:5a:5d:e9:fc:3a:1e:8d:88:
         6d:d0:6c:a7:5f:4e:e5:a5:a7:81:ab:4c:e4:97:42:6a:23:80:
         6c:cc:3c:5b:e3:b5:87:ed:8e:66:7a:dc:47:1a:14:d4:0c:67:
         e6:3a:80:15:09:b2:ad:79:1d:19:74:39:c2:fa:bc:93:39:7b:
         fb:63:18:0e:63:80:58:22:37:62:0a:55:30:37:84:63:aa:8d:
         6e:27:9f:72
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUXjgwnb3AiIYr/5onVb5YH6T17wYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJDODFFNkI4MUY0RUFEQzJCREJFMzM5QzgxRkREQjI3
NUUxOTM2OTAeFw0yNTAyMDQxNzU2MzdaFw0yNjAyMDMxODAxMzdaMDMxMTAvBgNV
BAMTKDlFODk5MTZGNjEwMDRGRTc1Mzc0MzI2QjUxRTBFNTA0RTU0QUQ3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgKb9kO5bnC8tRIENHO0j5NdV
1VkDM5ZsgTnfPCC1wjoy6v+1e633r+A8DEc7hVK0i/q20roP7jDMBVTR1WL9V2fX
jehuY+du3gXan6W9v2jeeVT4l99N+matyRaynao20Sod6bQypPXoEtUC7iC0AoCU
1vkEPvIcc1d1j5Q58Tu8A6oe5BHvgS9tqCCAUkO+XliIcSt4UCrIoPkF1N2iTZ9W
LevG6CdTr2Cj8JpLS0N76eW1TGjNGEBg/ex8B/WcMm9nkHaxK4Xm2Ay6YDiU08Lu
txo6LKD+DKM8YcvgKsT5ZVchksMK/jc1gJ+cDOnJzpbyFy8YPwtNnVnuwI4vAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUnomRb2EAT+dTdDJrUeDlBOVK1yIwHwYDVR0j
BBgwFoAUS8gea4H06twr2+M5yB/dsnXhk2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTcxRTg4NDgzMzJFMzJFQTc0RDUzNjRENjM4Mjc1NjI0
NTA3NzUxNDZGMjA0Nzc2RDUxNTQ4RjA5OEUzMzYyLzAvNEJDODFFNkI4MUY0RUFE
QzJCREJFMzM5QzgxRkREQjI3NUUxOTM2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QkM4MUU2QjgxRjRFQURDMkJE
QkUzMzlDODFGRERCMjc1RTE5MzY5LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3MUU4ODQ4MzMyRTMyRUE3NEQ1MzY0RDYzODI3NTYyNDUwNzc1MTQ2
RjIwNDc3NkQ1MTU0OEYwOThFMzM2Mi8wLzMyMzgzMDMzM2EzMjMxMzgzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzkzNDMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYHKAMhgIAwDQYJKoZIhvcNAQELBQADggEBAMGthvDQodvl2L/RAm9sWubmpLvH
28rwcJ9MeMh/fg5/a1wsMYnQtmazrxlGkdsYNnDDD2DOjkMFkJjmnzv8H00EHiDC
L+e4JHanhk+O+cdLr/+aFB8gPGAdcBX9MYG2uiPgvpDSYiExlMnY7jMGiPAppj9m
9TxS5/2r0lIEb683YBLvuOFtoWhRHH1A4c4zw/+6/MqcsRZgkeG+3DLv0JqAAMTV
FFxmIFdSJ3VaXen8Oh6NiG3QbKdfTuWlp4GrTOSXQmojgGzMPFvjtYftjmZ63Eca
FNQMZ+Y6gBUJsq15HRl0OcL6vJM5e/tjGA5jgFgiN2IKVTA3hGOqjW4nn3I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:58:59 2025 by rpki-client