Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa
File:                     323830333a663636303a3a2f33322d3438203d3e20323637393132.roa (raw, json)
Hash identifier:          pVCMXOUmJJ3RM/08sRaoP0UO9TL9l2+/ivPHdVYVBLQ=
Subject key identifier:   0B:F3:41:06:5A:D2:67:F8:ED:AB:4E:52:1D:8E:76:0F:66:D2:E5:D6
Certificate issuer:       /CN=CEB2B51AACA01EE582E365F19561EF79882825A8
Certificate serial:       06D6868CD7926304B64BEB4BF90D8D6688D1D2F1
Authority key identifier: CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa
Signing time:             Tue 04 Feb 2025 18:09:10 +0000
ROA not before:           Tue 04 Feb 2025 18:04:10 +0000
ROA not after:            Tue 03 Feb 2026 18:09:10 +0000
asID:                     267912
IP address blocks:        2803:f660::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d6:86:8c:d7:92:63:04:b6:4b:eb:4b:f9:0d:8d:66:88:d1:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEB2B51AACA01EE582E365F19561EF79882825A8
        Validity
            Not Before: Feb  4 18:04:10 2025 GMT
            Not After : Feb  3 18:09:10 2026 GMT
        Subject: CN=0BF341065AD267F8EDAB4E521D8E760F66D2E5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:4e:e4:e4:b8:62:5c:ae:56:54:91:72:90:
                    0f:f4:cd:a0:cb:bf:90:cb:2f:55:fe:37:70:03:b3:
                    a4:9c:0c:b9:ee:c4:b0:d2:11:db:6c:29:fb:9a:3d:
                    0e:85:cd:0f:61:7a:10:21:3e:e7:50:47:3d:c7:cc:
                    57:82:29:34:25:8d:db:c1:44:f3:ba:4c:b2:14:f7:
                    8b:c2:eb:20:44:eb:ea:0d:97:98:91:da:fa:c0:8d:
                    a7:63:97:66:97:57:4d:7e:b9:ba:bb:60:78:76:0d:
                    f9:1e:d5:e9:bd:eb:7e:d9:49:30:5f:e7:d7:4d:35:
                    c1:6c:14:86:76:4c:a0:09:d7:ea:67:46:90:6a:25:
                    38:55:31:91:2c:5e:66:60:97:66:a1:34:6b:d3:9d:
                    f9:8f:9b:a2:a3:cb:8d:fc:60:7c:45:29:2b:dc:2a:
                    41:bd:8d:d8:23:5a:08:7a:1c:30:e4:4d:32:12:e5:
                    77:32:b2:a0:2b:10:51:cb:c2:25:40:da:48:a9:fc:
                    ad:b1:df:db:0b:d3:ce:40:3d:73:ea:8b:16:1f:49:
                    eb:33:08:b6:b4:ff:5a:de:d6:6d:7a:f3:56:c4:c6:
                    f8:01:20:8d:6b:6d:b3:8a:78:92:c5:8f:ac:ec:55:
                    b6:b1:f5:ad:83:9a:9b:de:bc:ab:72:8f:b4:96:fb:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F3:41:06:5A:D2:67:F8:ED:AB:4E:52:1D:8E:76:0F:66:D2:E5:D6
            X509v3 Authority Key Identifier:
                keyid:CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f660::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:4d:66:8b:fb:f6:88:41:31:b5:c1:b0:93:27:79:20:f8:
         a2:2d:da:01:be:d4:f7:aa:36:74:3f:86:be:33:e7:bb:ee:ac:
         73:8c:3f:ca:c4:fe:05:8f:d0:9e:77:95:6f:9e:ce:42:8a:b7:
         2b:17:29:db:36:d9:bf:f2:8f:44:70:cd:a1:dd:16:bc:e9:44:
         90:a1:e8:98:2f:23:85:49:e0:01:c2:43:97:10:0e:5a:3a:36:
         bc:d4:b9:40:dd:69:05:03:8f:09:ea:7b:0f:c0:e3:4d:ec:05:
         75:32:d3:12:c2:78:b8:ce:85:88:11:30:a1:26:d5:4f:41:61:
         9b:cb:4b:cf:ba:ca:1c:1d:6c:89:30:0b:b6:68:6c:61:0f:72:
         58:0c:b0:4d:51:4d:64:9a:e3:39:34:ed:ea:0e:c0:e0:b5:49:
         55:71:ab:85:56:2e:cf:1e:0c:57:58:66:73:ee:78:56:20:61:
         a6:90:a8:4e:70:dd:87:4c:b0:b3:5a:40:04:69:70:0a:be:64:
         a6:89:1f:4b:2a:d0:60:5d:7c:7a:05:33:bf:4e:1e:9c:b2:31:
         92:ac:c2:24:41:db:13:4f:24:91:07:50:f1:9d:00:b6:b6:25:
         a9:e5:9a:84:fb:e4:d5:95:30:0c:1b:1b:9b:b4:f7:62:cb:f1:
         41:71:e5:e0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBtaGjNeSYwS2S+tL+Q2NZojR0vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VCMkI1MUFBQ0EwMUVFNTgyRTM2NUYxOTU2MUVGNzk4
ODI4MjVBODAeFw0yNTAyMDQxODA0MTBaFw0yNjAyMDMxODA5MTBaMDMxMTAvBgNV
BAMTKDBCRjM0MTA2NUFEMjY3RjhFREFCNEU1MjFEOEU3NjBGNjZEMkU1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI07k5LhiXK5WVJFykA/0zaDL
v5DLL1X+N3ADs6ScDLnuxLDSEdtsKfuaPQ6FzQ9hehAhPudQRz3HzFeCKTQljdvB
RPO6TLIU94vC6yBE6+oNl5iR2vrAjadjl2aXV01+ubq7YHh2Dfke1em9637ZSTBf
59dNNcFsFIZ2TKAJ1+pnRpBqJThVMZEsXmZgl2ahNGvTnfmPm6Kjy438YHxFKSvc
KkG9jdgjWgh6HDDkTTIS5XcysqArEFHLwiVA2kip/K2x39sL085APXPqixYfSesz
CLa0/1re1m1681bExvgBII1rbbOKeJLFj6zsVbax9a2DmpvevKtyj7SW+2BXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUC/NBBlrSZ/jtq05SHY52D2bS5dYwHwYDVR0j
BBgwFoAUzrK1GqygHuWC42XxlWHveYgoJagwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTA5QzVBQzdDMkIzRUEwMTRDRDgyQkY1RkQxMkEwRURC
NjBEOURDOTI0QkFERUFCNTE3QjkyNTlDQThDQUU0LzAvQ0VCMkI1MUFBQ0EwMUVF
NTgyRTM2NUYxOTU2MUVGNzk4ODI4MjVBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUIyQjUxQUFDQTAxRUU1ODJF
MzY1RjE5NTYxRUY3OTg4MjgyNUE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjkwOUM1QUM3QzJCM0VBMDE0Q0Q4MkJGNUZEMTJBMEVEQjYwRDlEQzky
NEJBREVBQjUxN0I5MjU5Q0E4Q0FFNC8wLzMyMzgzMDMzM2E2NjM2MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM5MzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9mAw
DQYJKoZIhvcNAQELBQADggEBAGzoTWaL+/aIQTG1wbCTJ3kg+KIt2gG+1PeqNnQ/
hr4z57vurHOMP8rE/gWP0J53lW+ezkKKtysXKds22b/yj0RwzaHdFrzpRJCh6Jgv
I4VJ4AHCQ5cQDlo6NrzUuUDdaQUDjwnqew/A403sBXUy0xLCeLjOhYgRMKEm1U9B
YZvLS8+6yhwdbIkwC7ZobGEPclgMsE1RTWSa4zk07eoOwOC1SVVxq4VWLs8eDFdY
ZnPueFYgYaaQqE5w3YdMsLNaQARpcAq+ZKaJH0sq0GBdfHoFM79OHpyyMZKswiRB
2xNPJJEHUPGdALa2JanlmoT75NWVMAwbG5u092LL8UFx5eA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:02 2025 by rpki-client