Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a343030303a3a2f33362d3336203d3e20323733303031.roa
File:                     323830333a613563303a343030303a3a2f33362d3336203d3e20323733303031.roa (raw, json)
Hash identifier:          Hx+FhA0kLYgZEjSRJ7UBX78GlW43U0w9PpBA9mD35dI=
Subject key identifier:   77:57:AC:67:0D:8B:4D:05:A5:03:B5:8F:40:E7:56:01:C1:05:9A:80
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       3DC55498B26F4ADA5E4467C5F2558F824C35E468
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a343030303a3a2f33362d3336203d3e20323733303031.roa
Signing time:             Tue 04 Feb 2025 17:59:00 +0000
ROA not before:           Tue 04 Feb 2025 17:54:00 +0000
ROA not after:            Tue 03 Feb 2026 17:59:00 +0000
asID:                     273001
IP address blocks:        2803:a5c0:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c5:54:98:b2:6f:4a:da:5e:44:67:c5:f2:55:8f:82:4c:35:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Feb  4 17:54:00 2025 GMT
            Not After : Feb  3 17:59:00 2026 GMT
        Subject: CN=7757AC670D8B4D05A503B58F40E75601C1059A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:8e:1f:9f:9b:b1:f7:fb:8a:66:e4:86:e6:
                    d8:a6:cc:10:bb:13:11:0e:41:85:a3:03:e3:a5:18:
                    3c:51:64:ec:69:12:c8:84:48:06:89:58:2c:9b:ec:
                    35:54:08:a8:e9:c4:3b:89:50:59:89:17:7c:30:aa:
                    85:ab:a6:cb:57:a7:b8:01:37:81:47:70:e2:82:53:
                    48:a7:1b:e1:a1:85:36:15:bd:59:20:6d:37:83:96:
                    a6:c7:33:0e:12:23:23:5b:bb:c3:fe:6f:ea:5b:c0:
                    7b:a8:5b:7b:89:6a:cc:9f:a2:00:41:ff:1e:2d:6f:
                    85:48:37:03:aa:54:e9:15:75:f1:9b:5c:69:9e:54:
                    9e:da:6a:de:94:36:10:ff:ef:ac:3b:ed:76:d0:ee:
                    ae:aa:d2:fb:c8:f0:44:f7:14:e5:f0:35:87:bd:d2:
                    03:25:50:49:24:32:47:76:22:71:f1:ba:ea:3c:40:
                    26:40:ae:4e:b9:26:d8:f2:63:36:27:44:c1:0b:a6:
                    75:55:5c:47:df:c8:59:8e:6e:f1:23:b8:94:3c:58:
                    6a:8c:7d:81:7a:14:3a:e3:97:da:78:11:65:1f:5e:
                    ce:49:96:85:03:05:11:f3:85:52:87:78:ca:a2:21:
                    e1:ca:21:b1:52:65:2f:01:49:11:b7:4f:a4:c4:fc:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:57:AC:67:0D:8B:4D:05:A5:03:B5:8F:40:E7:56:01:C1:05:9A:80
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a343030303a3a2f33362d3336203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:7b:c9:b1:5f:0a:c8:3e:3a:2c:9e:f0:68:4e:f9:06:9b:
         31:04:e1:df:c1:29:5b:b4:ab:ce:2c:4f:77:a9:02:1d:6f:71:
         1e:b5:c4:84:24:dd:1e:34:da:45:a8:c3:d6:be:b0:60:a2:d3:
         70:98:3b:b1:46:47:8e:35:43:ce:6d:ae:36:93:dd:9f:06:22:
         89:4d:31:aa:10:9f:1e:b9:2f:0c:09:4d:20:e2:67:c5:54:94:
         7a:6a:eb:98:1d:2e:87:6c:c7:fa:93:58:3d:12:bf:11:e4:52:
         ea:6d:d1:90:57:65:df:67:ce:8e:0a:e2:07:e7:1b:18:16:de:
         82:07:13:a7:1a:00:83:52:77:26:23:d5:ae:77:09:3a:7e:bb:
         0f:1d:a5:23:92:db:a4:7c:16:a1:17:74:c4:05:66:df:90:9c:
         dd:b2:6a:6e:7f:d8:b1:55:5a:fe:08:14:c3:d0:5b:ae:92:ec:
         dc:5b:4c:0a:dc:77:6c:eb:3d:96:89:5b:e3:ac:cf:0f:56:b3:
         3e:b7:1b:d7:1d:e4:f4:43:3f:ed:3c:13:6a:1d:99:ba:77:d7:
         41:03:53:bc:0f:a1:16:77:84:d7:b6:14:3c:45:33:b3:86:7e:
         8c:da:01:03:0f:e1:b5:7b:65:88:13:4d:03:75:12:e1:78:84:
         d5:f2:25:53
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUPcVUmLJvStpeRGfF8lWPgkw15GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwM0U1MTQzRjk2NkVCMDM5ODRBQTU5NjE1MUI0N0Yw
QTdDMzhFMjAeFw0yNTAyMDQxNzU0MDBaFw0yNjAyMDMxNzU5MDBaMDMxMTAvBgNV
BAMTKDc3NTdBQzY3MEQ4QjREMDVBNTAzQjU4RjQwRTc1NjAxQzEwNTlBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGo4fn5ux9/uKZuSG5timzBC7
ExEOQYWjA+OlGDxRZOxpEsiESAaJWCyb7DVUCKjpxDuJUFmJF3wwqoWrpstXp7gB
N4FHcOKCU0inG+GhhTYVvVkgbTeDlqbHMw4SIyNbu8P+b+pbwHuoW3uJasyfogBB
/x4tb4VINwOqVOkVdfGbXGmeVJ7aat6UNhD/76w77XbQ7q6q0vvI8ET3FOXwNYe9
0gMlUEkkMkd2InHxuuo8QCZArk65JtjyYzYnRMELpnVVXEffyFmObvEjuJQ8WGqM
fYF6FDrjl9p4EWUfXs5JloUDBRHzhVKHeMqiIeHKIbFSZS8BSRG3T6TE/LxNAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUd1esZw2LTQWlA7WPQOdWAcEFmoAwHwYDVR0j
BBgwFoAULwPlFD+WbrA5hKpZYVG0fwp8OOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjM4M0M1MkRENTc3RDJEMUFGMUJBRkI0MjY3RUVENzZC
OUI1NTQwRkZENDUyRjdDNjZDMDEyOUE4MjA0NTE5LzAvMkYwM0U1MTQzRjk2NkVC
MDM5ODRBQTU5NjE1MUI0N0YwQTdDMzhFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjAzRTUxNDNGOTY2RUIwMzk4
NEFBNTk2MTUxQjQ3RjBBN0MzOEUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUYzODNDNTJERDU3N0QyRDFBRjFCQUZCNDI2N0VFRDc2QjlCNTU0MEZG
RDQ1MkY3QzY2QzAxMjlBODIwNDUxOS8wLzMyMzgzMDMzM2E2MTM1NjMzMDNhMzQz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzMzMDMwMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA6XAQDANBgkqhkiG9w0BAQsFAAOCAQEASgl7ybFfCsg+Oiye8GhO+Qab
MQTh38EpW7SrzixPd6kCHW9xHrXEhCTdHjTaRajD1r6wYKLTcJg7sUZHjjVDzm2u
NpPdnwYiiU0xqhCfHrkvDAlNIOJnxVSUemrrmB0uh2zH+pNYPRK/EeRS6m3RkFdl
32fOjgriB+cbGBbeggcTpxoAg1J3JiPVrncJOn67Dx2lI5LbpHwWoRd0xAVm35Cc
3bJqbn/YsVVa/ggUw9BbrpLs3FtMCtx3bOs9lolb46zPD1azPrcb1x3k9EM/7TwT
ah2ZunfXQQNTvA+hFneE17YUPEUzs4Z+jNoBAw/htXtliBNNA3US4XiE1fIlUw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:51 2025 by rpki-client