Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa
File:                     323830303a6331303a3a2f33322d3332203d3e20323632313534.roa (raw, json)
Hash identifier:          hidJHkbWh5EkN8UzBh/Oa1lUxEX6QAik2LdeJ+Y0qcw=
Subject key identifier:   BD:5C:C0:03:0C:FB:80:D5:77:B2:B7:68:35:51:75:D8:42:3D:C3:E3
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       718053353425EF7EB678D7907711EA1E1FBA4EED
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa
Signing time:             Tue 04 Feb 2025 18:26:37 +0000
ROA not before:           Tue 04 Feb 2025 18:21:37 +0000
ROA not after:            Tue 03 Feb 2026 18:26:37 +0000
asID:                     262154
IP address blocks:        2800:c10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:80:53:35:34:25:ef:7e:b6:78:d7:90:77:11:ea:1e:1f:ba:4e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Feb  4 18:21:37 2025 GMT
            Not After : Feb  3 18:26:37 2026 GMT
        Subject: CN=BD5CC0030CFB80D577B2B768355175D8423DC3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:96:27:50:fe:cd:6b:ef:95:ff:52:bd:d6:
                    f9:87:e0:53:96:53:29:42:ef:df:c9:fa:25:00:fa:
                    63:c0:a3:e8:10:62:0b:05:19:09:5d:56:ff:c2:d5:
                    11:5c:a8:41:be:02:d1:ed:80:a3:46:21:8a:84:59:
                    53:90:86:30:0a:d1:23:49:5f:da:79:8c:84:64:f7:
                    2e:ac:3b:cc:04:99:73:7d:da:36:4e:82:e2:20:8f:
                    84:a4:91:41:f1:da:5b:fb:e5:f2:dd:54:c2:a9:71:
                    ed:4e:c2:38:8e:2f:22:44:96:26:79:45:ee:0b:8d:
                    16:9b:f4:ef:1c:09:f0:27:db:96:03:c1:4e:5e:fb:
                    79:93:42:a6:41:0e:19:99:d3:9c:70:2a:61:77:15:
                    dd:36:90:5e:0c:60:49:e8:28:69:ab:9c:42:bd:92:
                    b8:77:33:1b:34:5c:13:43:0e:11:22:d9:48:88:95:
                    ea:66:67:25:2e:fb:d4:6c:da:a1:af:a3:f2:ab:3e:
                    d0:0f:bf:57:37:88:6a:f5:7f:91:bb:89:5b:fb:06:
                    81:8a:12:26:84:c4:8e:fb:06:bf:75:ea:ef:90:a6:
                    52:c4:d2:54:f8:2f:96:00:23:7a:a5:2c:e1:4b:02:
                    7c:d4:08:e2:c8:db:cf:b4:c7:e3:07:60:a3:d8:11:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5C:C0:03:0C:FB:80:D5:77:B2:B7:68:35:51:75:D8:42:3D:C3:E3
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:c7:83:2d:e7:cb:7e:fe:2a:10:47:32:cd:93:cd:d7:b5:02:
         52:34:28:3b:c6:22:e0:03:9c:14:57:00:16:9c:4b:b1:0b:6a:
         8d:27:06:27:fa:61:88:85:ee:cd:34:eb:7d:d3:2e:6e:5f:32:
         39:42:58:06:ad:77:dc:ef:1a:1c:00:6e:d8:2f:f6:88:53:2e:
         cb:b1:16:e1:87:ce:e2:a1:2d:92:28:53:e6:29:3b:e7:90:ad:
         59:5a:4a:ec:5c:fc:01:53:75:06:10:f0:a8:a2:95:ee:c7:46:
         23:f9:50:de:58:06:6f:1d:ea:f7:b4:33:09:cc:b2:46:05:56:
         36:05:30:e8:ba:24:3a:57:b5:86:bd:97:f1:6d:10:f6:36:9e:
         28:b0:aa:c9:1a:da:b8:99:e7:10:3f:1b:ff:64:e4:cf:d4:86:
         17:b6:7a:1f:b8:f3:1d:af:01:0e:73:03:7e:73:0e:ca:e4:20:
         be:cd:a0:10:bf:6e:97:e0:d9:8a:5d:2e:27:34:f6:b1:6d:40:
         b7:f9:c5:38:f1:b3:34:86:1c:0a:d4:f5:38:88:44:30:c7:32:
         56:55:3a:9f:82:1d:c3:56:4d:7b:d1:4b:bc:ca:73:23:14:1e:
         88:71:9e:a7:a6:64:42:48:60:a2:a2:05:9b:b7:42:38:2d:af:
         ab:75:2c:b1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcYBTNTQl7362eNeQdxHqHh+6Tu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MEIxOTM1Q0REOTUxRThGQjU3MkE1QUYzQzQxOUFD
NEQ0ODdFNDAeFw0yNTAyMDQxODIxMzdaFw0yNjAyMDMxODI2MzdaMDMxMTAvBgNV
BAMTKEJENUNDMDAzMENGQjgwRDU3N0IyQjc2ODM1NTE3NUQ4NDIzREMzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPZYnUP7Na++V/1K91vmH4FOW
UylC79/J+iUA+mPAo+gQYgsFGQldVv/C1RFcqEG+AtHtgKNGIYqEWVOQhjAK0SNJ
X9p5jIRk9y6sO8wEmXN92jZOguIgj4SkkUHx2lv75fLdVMKpce1OwjiOLyJEliZ5
Re4LjRab9O8cCfAn25YDwU5e+3mTQqZBDhmZ05xwKmF3Fd02kF4MYEnoKGmrnEK9
krh3Mxs0XBNDDhEi2UiIlepmZyUu+9Rs2qGvo/KrPtAPv1c3iGr1f5G7iVv7BoGK
EiaExI77Br916u+QplLE0lT4L5YAI3qlLOFLAnzUCOLI28+0x+MHYKPYETu9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUvVzAAwz7gNV3srdoNVF12EI9w+MwHwYDVR0j
BBgwFoAUXFCxk1zdlR6PtXKlrzxBmsTUh+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEOTI3RUI5MDkxOTE3RjgxRDY3OEE0MUVBNDc2OTM1
ODg0MUQ5Nzc4REYyREExMDlDMzEzQjNFNzhBNkU4LzAvNUM1MEIxOTM1Q0REOTUx
RThGQjU3MkE1QUYzQzQxOUFDNEQ0ODdFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzUwQjE5MzVDREQ5NTFFOEZC
NTcyQTVBRjNDNDE5QUM0RDQ4N0U0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDkyN0VCOTA5MTkxN0Y4MUQ2NzhBNDFFQTQ3NjkzNTg4NDFEOTc3
OERGMkRBMTA5QzMxM0IzRTc4QTZFOC8wLzMyMzgzMDMwM2E2MzMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzIzMTM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAwQMA0G
CSqGSIb3DQEBCwUAA4IBAQDDx4Mt58t+/ioQRzLNk83XtQJSNCg7xiLgA5wUVwAW
nEuxC2qNJwYn+mGIhe7NNOt90y5uXzI5QlgGrXfc7xocAG7YL/aIUy7LsRbhh87i
oS2SKFPmKTvnkK1ZWkrsXPwBU3UGEPCoopXux0Yj+VDeWAZvHer3tDMJzLJGBVY2
BTDouiQ6V7WGvZfxbRD2Np4osKrJGtq4mecQPxv/ZOTP1IYXtnofuPMdrwEOcwN+
cw7K5CC+zaAQv26X4NmKXS4nNPaxbUC3+cU48bM0hhwK1PU4iEQwxzJWVTqfgh3D
Vk170Uu8ynMjFB6IcZ6npmRCSGCiogWbt0I4La+rdSyx
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:04 2025 by rpki-client