Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa
File:                     323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa (raw, json)
Hash identifier:          3gBfe6/EdkLAMknvsUt/A39iPFJKV6tIma801cZGrwQ=
Subject key identifier:   32:06:82:C5:16:96:9B:AF:A6:D9:C5:39:42:44:84:CA:14:EA:09:23
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       2703C1EF3105E04412ED339DA58F25A77ED83E2F
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa
Signing time:             Tue 04 Feb 2025 18:13:17 +0000
ROA not before:           Tue 04 Feb 2025 18:08:17 +0000
ROA not after:            Tue 03 Feb 2026 18:13:17 +0000
asID:                     271842
IP address blocks:        2803:b0e0:9980::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:03:c1:ef:31:05:e0:44:12:ed:33:9d:a5:8f:25:a7:7e:d8:3e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:17 2025 GMT
            Not After : Feb  3 18:13:17 2026 GMT
        Subject: CN=320682C516969BAFA6D9C539424484CA14EA0923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:3d:f4:3f:f3:06:71:8a:de:27:9f:ab:68:
                    99:a3:1a:3e:70:6d:5f:88:aa:62:54:b6:ad:7a:b4:
                    93:cc:b3:38:54:05:bc:b9:65:94:5c:dd:9e:2c:5d:
                    b1:fc:9a:fb:96:1e:13:39:f7:ba:b4:25:dd:3c:d2:
                    36:49:53:2a:40:6f:ea:41:68:65:46:c9:20:d7:b4:
                    16:1b:a4:02:11:e6:35:21:47:d7:cc:48:97:4c:11:
                    9c:70:cf:12:36:a7:97:6e:f8:05:ba:9a:13:85:e3:
                    8d:f1:7d:ec:b6:5d:43:f9:01:a9:be:d4:d0:90:a3:
                    06:27:72:8e:49:ca:2d:20:40:84:7d:0a:4a:6a:58:
                    7e:ff:b5:89:1e:a8:01:3e:4a:4a:a8:5f:ed:90:d6:
                    8e:56:62:10:85:64:dd:08:a8:1e:84:6a:76:75:40:
                    ba:58:f9:48:dd:84:12:3d:7d:3f:bf:b9:c5:e5:49:
                    53:c1:3c:53:ea:8b:fb:47:e1:8d:48:22:bb:54:78:
                    c9:d4:d3:50:a4:5d:3a:7b:22:ef:c7:52:c0:3f:f9:
                    1a:20:a1:9d:3d:cd:27:94:ae:e3:4f:5b:ee:64:cf:
                    5e:8d:0f:dc:dd:f1:e5:65:90:a1:30:f0:c9:c8:4c:
                    39:55:58:45:27:1a:15:a9:00:a2:4e:e3:ea:60:4a:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:06:82:C5:16:96:9B:AF:A6:D9:C5:39:42:44:84:CA:14:EA:09:23
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:60:95:ac:54:b0:66:c6:b8:d4:06:77:ce:bd:85:03:c8:
         60:f5:fb:6f:98:a3:cf:a7:d0:fa:8f:fd:0d:26:53:92:7f:e2:
         1f:22:18:d7:62:40:26:dd:04:df:d5:c9:6a:77:df:98:cf:e3:
         55:e4:29:fb:57:f9:ef:4c:fa:d2:b8:83:c5:59:39:4e:1b:ef:
         3c:22:ab:7d:45:c4:ab:5e:75:09:93:20:36:89:06:92:8e:91:
         28:6a:5b:3d:f5:9d:5d:7b:e2:de:ae:db:8a:44:a3:c5:47:e1:
         61:46:37:36:6a:71:d3:56:de:d9:43:1f:0e:f1:3d:af:21:ea:
         92:f8:73:22:e6:06:0c:e4:fe:d1:45:d5:45:ab:ed:ec:22:fa:
         8e:11:b8:92:98:0e:c8:5c:1c:03:29:5e:14:c1:8f:62:9f:71:
         d6:c8:e6:d9:ce:47:6e:5b:24:00:65:90:95:cd:1c:54:28:2a:
         68:b2:28:8d:ea:02:da:87:85:5b:35:74:c3:d7:29:c1:80:11:
         c0:5b:0e:9d:71:de:e8:86:09:df:3b:47:92:1e:71:7f:cd:e2:
         c4:bf:08:f8:d2:11:4c:73:cd:fb:df:78:e4:02:31:2e:76:fc:
         28:bd:37:68:fc:5f:1f:59:c1:a5:07:a4:2e:88:df:4f:88:ba:
         d3:79:b1:1f
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUJwPB7zEF4EQS7TOdpY8lp37YPi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNTAyMDQxODA4MTdaFw0yNjAyMDMxODEzMTdaMDMxMTAvBgNV
BAMTKDMyMDY4MkM1MTY5NjlCQUZBNkQ5QzUzOTQyNDQ4NENBMTRFQTA5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOoT30P/MGcYreJ5+raJmjGj5w
bV+IqmJUtq16tJPMszhUBby5ZZRc3Z4sXbH8mvuWHhM597q0Jd080jZJUypAb+pB
aGVGySDXtBYbpAIR5jUhR9fMSJdMEZxwzxI2p5du+AW6mhOF443xfey2XUP5Aam+
1NCQowYnco5Jyi0gQIR9CkpqWH7/tYkeqAE+SkqoX+2Q1o5WYhCFZN0IqB6EanZ1
QLpY+UjdhBI9fT+/ucXlSVPBPFPqi/tH4Y1IIrtUeMnU01CkXTp7Iu/HUsA/+Rog
oZ09zSeUruNPW+5kz16ND9zd8eVlkKEw8MnITDlVWEUnGhWpAKJO4+pgSl7JAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUMgaCxRaWm6+m2cU5QkSEyhTqCSMwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz
OTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM0MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7DgmYAwDQYJKoZIhvcNAQELBQADggEBAJx1YJWsVLBmxrjUBnfOvYUD
yGD1+2+Yo8+n0PqP/Q0mU5J/4h8iGNdiQCbdBN/VyWp335jP41XkKftX+e9M+tK4
g8VZOU4b7zwiq31FxKtedQmTIDaJBpKOkShqWz31nV174t6u24pEo8VH4WFGNzZq
cdNW3tlDHw7xPa8h6pL4cyLmBgzk/tFF1UWr7ewi+o4RuJKYDshcHAMpXhTBj2Kf
cdbI5tnOR25bJABlkJXNHFQoKmiyKI3qAtqHhVs1dMPXKcGAEcBbDp1x3uiGCd87
R5IecX/N4sS/CPjSEUxzzfvfeOQCMS52/Ci9N2j8Xx9ZwaUHpC6I30+IutN5sR8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:18 2025 by rpki-client