Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030323a3a2f34372d3437203d3e20323633363930.roa
File:                     323830313a31303a363030323a3a2f34372d3437203d3e20323633363930.roa (raw, json)
Hash identifier:          2D02LkaKIP4j3YTv7RdzpLLGVYU15GbjTReUu1BObns=
Subject key identifier:   C4:38:12:D4:C7:9C:E8:29:5D:63:F9:B6:8F:23:26:0F:EA:59:7D:3C
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       788E5F8EEC11F503D502A2C3B4C8EE1E3E9EE99B
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030323a3a2f34372d3437203d3e20323633363930.roa
Signing time:             Tue 04 Feb 2025 18:19:51 +0000
ROA not before:           Tue 04 Feb 2025 18:14:51 +0000
ROA not after:            Tue 03 Feb 2026 18:19:51 +0000
asID:                     263690
IP address blocks:        2801:10:6002::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8e:5f:8e:ec:11:f5:03:d5:02:a2:c3:b4:c8:ee:1e:3e:9e:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Feb  4 18:14:51 2025 GMT
            Not After : Feb  3 18:19:51 2026 GMT
        Subject: CN=C43812D4C79CE8295D63F9B68F23260FEA597D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:a7:ba:62:d9:6e:b4:d9:42:e4:90:94:9e:
                    a6:c2:3d:16:fd:df:a4:05:2e:3c:51:c7:26:c9:10:
                    4e:31:6c:77:06:12:4d:8e:35:6f:d7:6b:2c:f8:63:
                    f6:a1:ae:24:c3:cd:72:74:f8:26:d4:49:63:88:cc:
                    7c:e6:44:25:38:ff:6f:ed:e7:02:3f:42:b8:0c:a1:
                    d1:0e:06:4c:c1:19:20:65:45:8d:06:00:c6:00:3e:
                    be:e9:be:52:c7:23:2b:5d:34:79:9a:dd:79:c4:31:
                    dd:bc:ce:5f:46:ff:e3:e7:a2:9a:55:4d:d8:c4:6c:
                    16:f5:b9:61:27:0c:4c:79:79:de:55:b9:3e:b3:2f:
                    69:ba:b7:be:1f:ef:eb:d9:a9:12:5d:01:bf:6b:16:
                    72:e4:d8:49:94:c1:61:72:c9:ad:b2:83:28:5c:4f:
                    f9:aa:af:c1:12:e6:fe:9c:c8:7e:03:db:dd:04:cf:
                    82:49:22:77:9a:ea:df:73:31:a1:55:ec:3d:72:36:
                    2c:5a:71:76:fb:42:8a:9d:3d:70:6a:0c:14:72:97:
                    cd:7b:ba:ee:12:85:36:4d:06:e1:2c:8b:cf:f7:c7:
                    f7:ab:dd:4a:1a:33:b6:6f:ce:92:3d:01:e5:75:c9:
                    f1:07:33:7b:3f:5a:d4:1e:9d:75:13:43:1d:60:43:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:12:D4:C7:9C:E8:29:5D:63:F9:B6:8F:23:26:0F:EA:59:7D:3C
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030323a3a2f34372d3437203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6002::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:29:63:d8:7c:e8:75:c7:68:fd:72:4b:d7:15:65:36:58:e0:
         35:3f:53:79:3a:48:8e:0a:40:92:ea:87:eb:95:ee:d4:6a:42:
         fd:a3:bb:ca:3e:d6:bb:c8:dc:25:bf:25:e6:02:3d:0d:4a:46:
         2b:8c:a9:73:a5:8b:f8:4e:e2:d1:7d:ac:27:90:79:ce:25:e0:
         5c:5c:b2:b7:0e:bb:c4:57:81:59:d7:db:15:b0:1b:00:63:a2:
         ba:2c:7c:1b:fd:fd:78:3b:88:b6:bf:99:b9:fc:df:34:c0:45:
         03:8b:f9:5e:1c:9b:6f:7b:03:fb:7c:bb:00:b5:15:8b:18:4f:
         ea:6c:e9:a7:af:36:0c:4d:93:b5:f6:e0:25:34:3b:90:ec:4a:
         1c:0b:2f:13:f2:ab:28:ed:f6:09:66:58:41:5b:fc:c0:d9:32:
         25:b0:e7:3a:15:be:26:1b:a0:70:ee:86:2b:ee:a0:c1:6d:7f:
         45:bd:b9:cb:02:d6:eb:60:76:c5:0c:2f:79:ce:52:f8:a2:e6:
         66:0d:0e:a6:80:97:c0:91:ae:aa:7a:7f:b4:f5:da:59:6f:30:
         5d:b6:2e:04:c0:56:96:08:38:69:35:a6:a1:89:44:38:22:3b:
         3a:8f:7f:b9:47:cd:61:5c:7c:e4:87:18:d2:f5:e3:0c:e6:fe:
         9c:e5:a7:a7
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUeI5fjuwR9QPVAqLDtMjuHj6e6ZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFQzhGQzAzN0ZFNDZBMzBGRDUzMkE4M0ZDREVDNzJC
NzI5Q0MwNDAeFw0yNTAyMDQxODE0NTFaFw0yNjAyMDMxODE5NTFaMDMxMTAvBgNV
BAMTKEM0MzgxMkQ0Qzc5Q0U4Mjk1RDYzRjlCNjhGMjMyNjBGRUE1OTdEM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHKe6YtlutNlC5JCUnqbCPRb9
36QFLjxRxybJEE4xbHcGEk2ONW/Xayz4Y/ahriTDzXJ0+CbUSWOIzHzmRCU4/2/t
5wI/QrgModEOBkzBGSBlRY0GAMYAPr7pvlLHIytdNHma3XnEMd28zl9G/+PnoppV
TdjEbBb1uWEnDEx5ed5VuT6zL2m6t74f7+vZqRJdAb9rFnLk2EmUwWFyya2ygyhc
T/mqr8ES5v6cyH4D290Ez4JJInea6t9zMaFV7D1yNixacXb7QoqdPXBqDBRyl817
uu4ShTZNBuEsi8/3x/er3UoaM7ZvzpI9AeV1yfEHM3s/WtQenXUTQx1gQ28RAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUxDgS1Mec6CldY/m2jyMmD+pZfTwwHwYDVR0j
BBgwFoAUfeyPwDf+RqMP1TKoP83scrcpzAQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODM1RTA1NzlDNjhFNEI3MDYwMzBBOUQyQjdERUVFQTlF
QkI2OUU5N0Y1QTIxRTNCOUZBQkU3MzYyQjkyMDMwLzAvN0RFQzhGQzAzN0ZFNDZB
MzBGRDUzMkE4M0ZDREVDNzJCNzI5Q0MwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REVDOEZDMDM3RkU0NkEzMEZE
NTMyQTgzRkNERUM3MkI3MjlDQzA0LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjgzNUUwNTc5QzY4RTRCNzA2MDMwQTlEMkI3REVFRUE5RUJCNjlFOTdG
NUEyMUUzQjlGQUJFNzM2MkI5MjAzMC8wLzMyMzgzMDMxM2EzMTMwM2EzNjMwMzAz
MjNhM2EyZjM0MzcyZDM0MzcyMDNkM2UyMDMyMzYzMzM2MzkzMC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgBABBgAjANBgkqhkiG9w0BAQsFAAOCAQEANSlj2Hzodcdo/XJL1xVlNljgNT9T
eTpIjgpAkuqH65Xu1GpC/aO7yj7Wu8jcJb8l5gI9DUpGK4ypc6WL+E7i0X2sJ5B5
ziXgXFyytw67xFeBWdfbFbAbAGOiuix8G/39eDuItr+ZufzfNMBFA4v5Xhybb3sD
+3y7ALUVixhP6mzpp682DE2TtfbgJTQ7kOxKHAsvE/KrKO32CWZYQVv8wNkyJbDn
OhW+JhugcO6GK+6gwW1/Rb25ywLW62B2xQwvec5S+KLmZg0OpoCXwJGuqnp/tPXa
WW8wXbYuBMBWlgg4aTWmoYlEOCI7Oo9/uUfNYVx85IcY0vXjDOb+nOWnpw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:46 2025 by rpki-client