Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3530303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3530303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          COvS/kjNk7Gmr21qt0lFU/bHjcXsf14EgHXyiFZjssU=
Subject key identifier:   09:DF:A6:20:16:73:B4:FF:A5:84:E0:3F:62:27:91:2B:01:4A:D6:67
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       784916E8FE5BEFF53829365C25102E21CA026E41
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3530303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 04 Feb 2025 18:32:19 +0000
ROA not before:           Tue 04 Feb 2025 18:27:19 +0000
ROA not after:            Tue 03 Feb 2026 18:32:19 +0000
asID:                     272877
IP address blocks:        2803:2a90:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:49:16:e8:fe:5b:ef:f5:38:29:36:5c:25:10:2e:21:ca:02:6e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Feb  4 18:27:19 2025 GMT
            Not After : Feb  3 18:32:19 2026 GMT
        Subject: CN=09DFA6201673B4FFA584E03F6227912B014AD667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:42:47:a2:2f:90:a6:5f:ca:60:f7:86:26:
                    0e:32:e4:c1:ec:fb:fb:f1:56:df:7b:db:39:db:fb:
                    5e:f3:fe:e2:83:bd:18:cf:9d:d0:ee:dc:10:32:52:
                    9c:fb:a5:90:8e:61:d0:f2:5e:2c:99:87:9c:e5:73:
                    71:2f:c4:86:2a:e6:51:ed:fe:8c:c9:86:07:2d:03:
                    fc:2c:4d:f7:58:99:77:65:ba:4a:d9:3d:d9:9c:d9:
                    13:a0:d5:ec:52:7f:89:3b:2f:e5:52:44:e2:65:47:
                    94:aa:9c:2a:63:44:5d:78:fe:51:c0:0a:a5:88:d1:
                    ab:1f:b2:63:4d:21:b9:bc:cd:2a:57:ce:70:71:15:
                    80:59:29:0d:fb:17:6f:96:d3:d4:7e:62:9c:5b:5a:
                    54:bd:05:a9:50:26:dd:26:91:ce:6a:e2:13:7c:c5:
                    5b:c6:d8:7e:1b:39:55:c1:d8:b1:63:87:b9:a6:55:
                    76:09:69:dc:d4:6a:c3:52:99:6a:42:0b:7e:de:68:
                    1b:73:86:ad:65:0b:5d:d9:fd:25:8b:71:06:a4:e0:
                    06:0c:c9:7d:ce:44:65:03:ca:c0:a1:6b:f4:26:d0:
                    5a:42:4a:76:f7:42:a5:f5:25:9a:3f:98:6c:8e:3d:
                    cc:b4:4c:02:fa:b7:fb:86:b3:9d:e8:39:5f:f4:b7:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:A6:20:16:73:B4:FF:A5:84:E0:3F:62:27:91:2B:01:4A:D6:67
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3530303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         e0:bb:2e:8e:47:db:02:dd:62:9f:26:f4:91:a1:24:19:96:cb:
         9a:d9:97:74:0b:83:c6:41:73:e8:74:d1:a8:7e:ea:9e:1f:42:
         30:fc:22:70:0a:4a:80:ec:03:e2:e2:60:a1:b8:07:a4:53:86:
         4e:d9:cc:e5:ef:b3:b3:83:e2:88:9b:aa:dc:ee:44:c4:28:6f:
         07:77:29:23:fe:34:45:d7:4e:d7:43:be:d9:62:30:37:81:64:
         49:3b:cc:a4:e8:a2:e9:61:1d:66:e8:86:56:66:58:a2:ba:81:
         05:40:ba:e0:db:d5:6e:1e:ac:dc:2d:1f:ae:4c:7f:94:a2:b7:
         85:db:f9:96:20:82:68:f1:ee:11:c7:c0:90:b6:92:33:65:d9:
         d9:a7:a3:aa:fe:05:a7:18:70:dc:44:e8:b5:45:83:5f:e7:c1:
         2d:fa:a2:e7:9e:7d:39:ae:95:97:74:35:d2:cd:0d:f0:1c:b1:
         90:ce:f8:02:12:c7:01:11:ba:37:e3:5b:5c:a2:84:32:1d:3b:
         40:bd:a0:41:a9:26:b1:99:aa:a9:8d:d3:a5:62:d6:21:10:24:
         3e:ca:65:89:5a:1a:0f:f2:f6:ee:b4:1c:d5:a5:d0:74:6b:1b:
         da:09:37:c4:06:7d:42:06:7d:22:f9:bf:ba:0c:12:c1:fa:cd:
         e3:49:80:8e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUeEkW6P5b7/U4KTZcJRAuIcoCbkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5QkM1RkE2NzFCQzE0M0QxMUEyOThEOEU0NUQwMTJG
OEI1OURCODAeFw0yNTAyMDQxODI3MTlaFw0yNjAyMDMxODMyMTlaMDMxMTAvBgNV
BAMTKDA5REZBNjIwMTY3M0I0RkZBNTg0RTAzRjYyMjc5MTJCMDE0QUQ2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL+EJHoi+Qpl/KYPeGJg4y5MHs
+/vxVt972znb+17z/uKDvRjPndDu3BAyUpz7pZCOYdDyXiyZh5zlc3EvxIYq5lHt
/ozJhgctA/wsTfdYmXdlukrZPdmc2ROg1exSf4k7L+VSROJlR5SqnCpjRF14/lHA
CqWI0asfsmNNIbm8zSpXznBxFYBZKQ37F2+W09R+YpxbWlS9BalQJt0mkc5q4hN8
xVvG2H4bOVXB2LFjh7mmVXYJadzUasNSmWpCC37eaBtzhq1lC13Z/SWLcQak4AYM
yX3ORGUDysCha/Qm0FpCSnb3QqX1JZo/mGyOPcy0TAL6t/uGs53oOV/0t3APAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUCd+mIBZztP+lhOA/YieRKwFK1mcwHwYDVR0j
BBgwFoAU4ZvF+mcbwUPRGimNjkXQEvi1nbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTcyRDVDQzM0OThDOUQzOENDQTRFREVEMTgzNEVGQTk4
OTdDNjI0MTY4MTRERUNEM0REODQ4QUE5NzczNzdBLzAvRTE5QkM1RkE2NzFCQzE0
M0QxMUEyOThEOEU0NUQwMTJGOEI1OURCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTlCQzVGQTY3MUJDMTQzRDEx
QTI5OEQ4RTQ1RDAxMkY4QjU5REI4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3MkQ1Q0MzNDk4QzlEMzhDQ0E0RURFRDE4MzRFRkE5ODk3QzYyNDE2
ODE0REVDRDNERDg0OEFBOTc3Mzc3QS8wLzMyMzgzMDMzM2EzMjYxMzkzMDNhMzUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMqkAUwDQYJKoZIhvcNAQELBQADggEBAOC7Lo5H2wLdYp8m9JGhJBmWy5rZ
l3QLg8ZBc+h00ah+6p4fQjD8InAKSoDsA+LiYKG4B6RThk7ZzOXvs7OD4oibqtzu
RMQobwd3KSP+NEXXTtdDvtliMDeBZEk7zKTooulhHWbohlZmWKK6gQVAuuDb1W4e
rNwtH65Mf5Sit4Xb+ZYggmjx7hHHwJC2kjNl2dmno6r+BacYcNxE6LVFg1/nwS36
oueefTmulZd0NdLNDfAcsZDO+AISxwERujfjW1yihDIdO0C9oEGpJrGZqqmN06Vi
1iEQJD7KZYlaGg/y9u60HNWl0HRrG9oJN8QGfUIGfSL5v7oMEsH6zeNJgI4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:54 2025 by rpki-client