Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e20323637373430.roa
File:                     323830313a31383a3830303a3a2f34382d3634203d3e20323637373430.roa (raw, json)
Hash identifier:          QecDDjpkp7LJs9bIF5/Rf4E8rTQqkfOUj610JwkCtKI=
Subject key identifier:   DB:07:46:BF:B4:AF:7A:AE:03:98:DA:50:80:27:78:F2:D2:72:2B:89
Certificate issuer:       /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Certificate serial:       09E0C4E46BAA6EB79AA89514F388E07FD9DC2F05
Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e20323637373430.roa
Signing time:             Tue 04 Feb 2025 18:15:40 +0000
ROA not before:           Tue 04 Feb 2025 18:10:40 +0000
ROA not after:            Tue 03 Feb 2026 18:15:40 +0000
asID:                     267740
IP address blocks:        2801:18:800::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e0:c4:e4:6b:aa:6e:b7:9a:a8:95:14:f3:88:e0:7f:d9:dc:2f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
        Validity
            Not Before: Feb  4 18:10:40 2025 GMT
            Not After : Feb  3 18:15:40 2026 GMT
        Subject: CN=DB0746BFB4AF7AAE0398DA50802778F2D2722B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:9f:44:b1:2d:7c:e2:f4:fb:c6:1d:59:bb:
                    f6:6c:1b:6f:b2:c6:aa:3a:fb:51:c1:89:ef:8a:91:
                    5d:b7:cb:c0:e1:58:f7:1a:81:05:07:ad:49:76:45:
                    09:9e:43:71:51:08:af:b3:0b:54:2b:a7:6e:9c:27:
                    14:b8:eb:93:8c:a9:0b:fb:0c:44:82:b4:f3:57:f2:
                    41:3c:b7:30:02:0e:cb:bf:2e:26:54:54:b1:2c:bf:
                    b0:e5:71:02:3e:9c:2b:45:dc:ff:f2:33:d0:e8:6b:
                    a0:e8:f7:b5:45:15:78:54:42:03:05:b3:0f:82:66:
                    32:38:43:e6:d7:52:81:4d:59:c8:3b:a9:d8:c1:ca:
                    17:39:0e:bb:ea:10:e9:ed:10:5b:31:53:23:bf:0a:
                    d6:a2:51:45:0e:0f:73:af:df:cf:38:07:19:c3:36:
                    26:73:e3:76:1c:a5:e7:dc:4f:b4:90:d9:93:5c:b8:
                    df:bd:41:3f:73:18:48:c7:83:66:ba:28:42:fc:00:
                    86:04:04:bb:e9:58:47:56:25:79:c2:7a:8f:5b:31:
                    bb:4a:2f:2f:e7:3a:f6:8d:8b:98:a6:9d:8e:eb:b7:
                    62:6f:85:67:90:3c:3b:26:a1:f1:33:f7:b4:25:40:
                    52:f4:33:7b:2c:a9:f4:7f:d1:33:da:25:ae:fc:9f:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:46:BF:B4:AF:7A:AE:03:98:DA:50:80:27:78:F2:D2:72:2B:89
            X509v3 Authority Key Identifier:
                keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e20323637373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:f8:cb:a7:78:c8:89:2e:ac:2c:da:82:d3:fd:20:39:b8:
         bb:55:c9:ec:b0:e3:51:77:b9:b4:8b:2c:63:87:ab:f7:44:33:
         29:6b:dd:81:ce:e4:c8:43:2c:f4:d2:bf:f5:27:be:c5:96:e2:
         d5:69:25:19:13:81:b9:8e:99:52:42:84:22:1a:9f:2e:75:12:
         1d:fe:4b:6b:5c:7d:aa:9e:5d:98:05:58:89:79:c7:c1:11:fb:
         5a:ac:7a:31:3b:c3:4e:f6:f4:a0:aa:2d:7b:c0:d0:79:ab:83:
         64:cf:e4:99:4c:33:5e:b4:8d:e6:e7:c1:2b:47:fe:ab:f1:3a:
         a3:44:41:df:88:30:43:9a:85:0c:e1:b5:cd:33:f9:4a:15:8c:
         ff:bc:8b:b3:a7:f2:3f:f2:88:25:7b:73:50:2e:57:fc:1e:5a:
         70:77:e4:e0:99:95:58:75:f6:db:16:64:ee:c0:08:40:08:57:
         94:45:ab:dd:42:fd:1e:12:5e:2d:60:b8:e0:2e:33:a5:19:fa:
         3b:61:05:cc:88:66:4b:bb:fd:7f:e1:dd:c5:c3:0e:35:80:8a:
         ef:73:b8:76:6d:59:9e:7a:ea:32:07:7c:6b:09:60:41:fb:99:
         f5:58:72:79:fe:b9:2d:65:fe:84:31:0d:7d:30:35:c1:f0:28:
         bc:fe:e9:37
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCeDE5GuqbreaqJUU84jgf9ncLwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBNENEOEI2NUU0QjNFREZBODNCREY0MDhCQjUzMkVB
MDdDNkRDMjAeFw0yNTAyMDQxODEwNDBaFw0yNjAyMDMxODE1NDBaMDMxMTAvBgNV
BAMTKERCMDc0NkJGQjRBRjdBQUUwMzk4REE1MDgwMjc3OEYyRDI3MjJCODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8Z9EsS184vT7xh1Zu/ZsG2+y
xqo6+1HBie+KkV23y8DhWPcagQUHrUl2RQmeQ3FRCK+zC1Qrp26cJxS465OMqQv7
DESCtPNX8kE8tzACDsu/LiZUVLEsv7DlcQI+nCtF3P/yM9Doa6Do97VFFXhUQgMF
sw+CZjI4Q+bXUoFNWcg7qdjByhc5DrvqEOntEFsxUyO/CtaiUUUOD3Ov3884BxnD
NiZz43YcpefcT7SQ2ZNcuN+9QT9zGEjHg2a6KEL8AIYEBLvpWEdWJXnCeo9bMbtK
Ly/nOvaNi5imnY7rt2JvhWeQPDsmofEz97QlQFL0M3ssqfR/0TPaJa78n8tFAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU2wdGv7Sveq4DmNpQgCd48tJyK4kwHwYDVR0j
BBgwFoAUW6TNi2Xks+36g730CLtTLqB8bcIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTMxODYyNUUyOTAwNEVGNjBDMTYwQkJEMjhCNjMzRjRG
MEYwQUU3OEU5REFEOTVCRjg4RDY5RDkzNzBDQTM3LzAvNUJBNENEOEI2NUU0QjNF
REZBODNCREY0MDhCQjUzMkVBMDdDNkRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QkE0Q0Q4QjY1RTRCM0VERkE4
M0JERjQwOEJCNTMyRUEwN0M2REMyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjkzMTg2MjVFMjkwMDRFRjYwQzE2MEJCRDI4QjYzM0Y0RjBGMEFFNzhF
OURBRDk1QkY4OEQ2OUQ5MzcwQ0EzNy8wLzMyMzgzMDMxM2EzMTM4M2EzODMwMzAz
YTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAYCAAwDQYJKoZIhvcNAQELBQADggEBAEmq+MuneMiJLqws2oLT/SA5uLtVyeyw
41F3ubSLLGOHq/dEMylr3YHO5MhDLPTSv/UnvsWW4tVpJRkTgbmOmVJChCIany51
Eh3+S2tcfaqeXZgFWIl5x8ER+1qsejE7w0729KCqLXvA0Hmrg2TP5JlMM160jebn
wStH/qvxOqNEQd+IMEOahQzhtc0z+UoVjP+8i7On8j/yiCV7c1AuV/weWnB35OCZ
lVh19tsWZO7ACEAIV5RFq91C/R4SXi1guOAuM6UZ+jthBcyIZku7/X/h3cXDDjWA
iu9zuHZtWZ566jIHfGsJYEH7mfVYcnn+uS1l/oQxDX0wNcHwKLz+6Tc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client