Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa
File:                     323830333a636536303a3a2f33322d3634203d3e20323637393231.roa (raw, json)
Hash identifier:          +qImri4VSIbEM2EJxBBxXz5NAKxTf6+Zm62h2LhywQo=
Subject key identifier:   84:BB:73:CF:EF:69:F4:22:61:1B:23:4D:BC:2A:F6:A7:E6:E3:F6:2D
Certificate issuer:       /CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
Certificate serial:       7BDDDBB4AAF6ED645F538BF04FCAB145C782BBF6
Authority key identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa
Signing time:             Tue 04 Feb 2025 18:16:39 +0000
ROA not before:           Tue 04 Feb 2025 18:11:39 +0000
ROA not after:            Tue 03 Feb 2026 18:16:39 +0000
asID:                     267921
IP address blocks:        2803:ce60::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dd:db:b4:aa:f6:ed:64:5f:53:8b:f0:4f:ca:b1:45:c7:82:bb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
        Validity
            Not Before: Feb  4 18:11:39 2025 GMT
            Not After : Feb  3 18:16:39 2026 GMT
        Subject: CN=84BB73CFEF69F422611B234DBC2AF6A7E6E3F62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8b:12:fc:db:7b:56:a9:7d:f9:94:24:ef:75:
                    f7:3a:50:5e:96:21:b4:e7:b7:ba:4c:60:ea:ef:4c:
                    52:e4:96:d6:55:96:53:81:36:55:04:58:04:c2:6c:
                    81:e0:60:b9:ae:74:1c:c5:b7:b7:7f:a2:a8:bd:ea:
                    ae:a7:9c:ad:7a:5c:37:e8:a0:29:96:33:0a:f7:27:
                    1f:bd:8d:ea:58:6e:49:59:f7:c2:36:8e:fc:24:3b:
                    9b:b3:5a:aa:15:11:0a:b4:44:c5:3c:b5:e4:9e:fc:
                    5f:b6:0f:f6:a8:cb:5d:10:67:56:ba:0b:84:3d:60:
                    e6:f2:29:41:55:ce:6c:03:69:98:5f:3c:ac:96:b1:
                    34:32:42:d7:5e:28:47:f1:71:c3:51:d7:18:09:a1:
                    32:49:a3:59:bf:42:47:12:a7:68:12:b1:f9:c1:38:
                    fc:4b:1b:b3:7c:9b:15:4e:bc:c4:d5:af:74:23:58:
                    2e:94:79:46:d7:12:cb:ad:b4:20:02:da:b3:6a:61:
                    f0:ce:8c:0f:4a:8e:b8:7f:14:76:04:18:4f:e4:1b:
                    cb:df:e0:8e:02:5b:9f:fe:14:b1:83:9f:1f:bd:6e:
                    5c:17:94:f3:9a:9a:b1:c8:af:59:2f:7b:09:15:ea:
                    68:9d:c7:bb:cc:27:60:7c:6e:22:47:15:5a:72:be:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BB:73:CF:EF:69:F4:22:61:1B:23:4D:BC:2A:F6:A7:E6:E3:F6:2D
            X509v3 Authority Key Identifier:
                keyid:D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce60::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:fb:6f:30:f0:ac:6a:22:7b:89:93:29:e8:c6:17:88:e3:
         c1:eb:09:68:8d:b7:8b:85:df:8a:10:fe:63:d3:a9:72:64:68:
         77:60:cf:13:6e:fa:46:27:42:96:2d:5c:64:53:c3:44:81:7d:
         96:27:59:ec:20:c6:52:62:88:a6:0d:83:5a:a9:53:9d:3f:5f:
         85:f0:bf:06:49:50:85:64:64:02:df:f9:5a:ef:9b:18:f6:1b:
         4e:25:9e:c5:4e:76:e4:a2:77:51:9f:97:c7:03:2f:06:f6:dd:
         6b:ed:e5:4e:af:18:48:83:be:00:23:4f:15:3b:ae:79:61:24:
         bc:23:fc:24:9c:4b:3a:bd:43:cd:29:be:ef:7c:b0:64:a9:77:
         94:97:bb:16:f4:07:ef:17:57:c1:b1:dc:ed:39:62:15:6f:f5:
         b1:5c:bd:c5:16:47:9f:65:08:42:74:37:47:07:fd:b4:f9:1c:
         fd:3c:b4:f0:af:fe:bc:b0:c2:b8:f6:9d:49:f9:2a:bc:8d:e2:
         d6:a6:60:48:07:0f:e7:4c:59:63:46:c5:9f:96:23:d7:36:13:
         95:2e:99:c7:3c:0f:fc:ab:d2:39:9e:90:56:1e:7d:e9:c8:8a:
         ef:67:42:44:a9:89:21:54:a4:a2:c1:9a:16:f9:a8:b4:e3:a7:
         5e:99:5e:85
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUe93btKr27WRfU4vwT8qxRceCu/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMUZFNDQyMjI0NDJCQkRFREQ4RDdDQTQyRkRBQ0Yx
QUI3OEE5NDAeFw0yNTAyMDQxODExMzlaFw0yNjAyMDMxODE2MzlaMDMxMTAvBgNV
BAMTKDg0QkI3M0NGRUY2OUY0MjI2MTFCMjM0REJDMkFGNkE3RTZFM0Y2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmixL823tWqX35lCTvdfc6UF6W
IbTnt7pMYOrvTFLkltZVllOBNlUEWATCbIHgYLmudBzFt7d/oqi96q6nnK16XDfo
oCmWMwr3Jx+9jepYbklZ98I2jvwkO5uzWqoVEQq0RMU8teSe/F+2D/aoy10QZ1a6
C4Q9YObyKUFVzmwDaZhfPKyWsTQyQtdeKEfxccNR1xgJoTJJo1m/QkcSp2gSsfnB
OPxLG7N8mxVOvMTVr3QjWC6UeUbXEsuttCAC2rNqYfDOjA9Kjrh/FHYEGE/kG8vf
4I4CW5/+FLGDnx+9blwXlPOamrHIr1kvewkV6midx7vMJ2B8biJHFVpyvsHLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUhLtzz+9p9CJhGyNNvCr2p+bj9i0wHwYDVR0j
BBgwFoAU2TH+RCIkQrve3Y18pC/azxq3ipQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDIyMDhBQzMyOThGOEJGMUVFQjVFOUM0MTQwRjM0RUZF
MzQ2QzVDQzYzQ0I2NzhCNDlGQTNGNzZDRDgwQkE0LzAvRDkzMUZFNDQyMjI0NDJC
QkRFREQ4RDdDQTQyRkRBQ0YxQUI3OEE5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTMxRkU0NDIyMjQ0MkJCREVE
RDhEN0NBNDJGREFDRjFBQjc4QTk0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQyMjA4QUMzMjk4RjhCRjFFRUI1RTlDNDE0MEYzNEVGRTM0NkM1Q0M2
M0NCNjc4QjQ5RkEzRjc2Q0Q4MEJBNC8wLzMyMzgzMDMzM2E2MzY1MzYzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNzM5MzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDzmAw
DQYJKoZIhvcNAQELBQADggEBAAGp+28w8KxqInuJkynoxheI48HrCWiNt4uF34oQ
/mPTqXJkaHdgzxNu+kYnQpYtXGRTw0SBfZYnWewgxlJiiKYNg1qpU50/X4XwvwZJ
UIVkZALf+Vrvmxj2G04lnsVOduSid1Gfl8cDLwb23Wvt5U6vGEiDvgAjTxU7rnlh
JLwj/CScSzq9Q80pvu98sGSpd5SXuxb0B+8XV8Gx3O05YhVv9bFcvcUWR59lCEJ0
N0cH/bT5HP08tPCv/rywwrj2nUn5KryN4tamYEgHD+dMWWNGxZ+WI9c2E5Uumcc8
D/yr0jmekFYefenIiu9nQkSpiSFUpKLBmhb5qLTjp16ZXoU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:02 2025 by rpki-client