Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa
File:                     323830333a373863303a3a2f33322d3332203d3e20323634373931.roa (raw, json)
Hash identifier:          Z1uxA0qiTnsS8GQpJ3Mk9VxUuIlpHMLzTiQd3Ofxl9M=
Subject key identifier:   C6:34:C3:E1:A4:15:FC:23:DF:E1:E7:4A:FA:8D:32:47:AE:24:F9:A2
Certificate issuer:       /CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
Certificate serial:       4CC8E95F7773E04DCD48B833E8E58BF03B8A36C5
Authority key identifier: 33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa
Signing time:             Tue 04 Feb 2025 18:42:49 +0000
ROA not before:           Tue 04 Feb 2025 18:37:49 +0000
ROA not after:            Tue 03 Feb 2026 18:42:49 +0000
asID:                     264791
IP address blocks:        2803:78c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c8:e9:5f:77:73:e0:4d:cd:48:b8:33:e8:e5:8b:f0:3b:8a:36:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
        Validity
            Not Before: Feb  4 18:37:49 2025 GMT
            Not After : Feb  3 18:42:49 2026 GMT
        Subject: CN=C634C3E1A415FC23DFE1E74AFA8D3247AE24F9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:95:ae:3e:b4:f3:e7:73:fd:e5:2d:c0:bc:
                    b5:19:b4:cc:c1:c6:ca:5c:11:f7:d2:58:e8:7f:9f:
                    6c:f2:be:4c:6f:29:df:52:ac:21:36:42:39:3f:63:
                    c6:bb:17:97:c6:94:25:81:84:0a:60:84:5d:5d:9c:
                    0d:5e:aa:78:4b:97:af:03:e0:c9:7b:0d:3c:45:e2:
                    82:9c:8f:30:2c:ed:48:5a:1e:8d:e4:c9:4a:d2:49:
                    50:c9:6a:0c:9b:34:e0:ae:74:13:8e:83:df:4c:e7:
                    b0:36:8f:b8:a7:9e:2f:8f:5c:73:25:a4:c2:34:4a:
                    66:01:7b:fc:12:c1:91:c1:7f:0f:fb:a6:ab:40:d4:
                    8c:f0:39:ef:85:6f:bc:c3:5b:7d:37:39:f7:ac:79:
                    a6:83:c7:18:db:3d:e3:48:61:c6:90:55:e9:2f:38:
                    88:19:4e:2d:48:29:62:a6:88:97:e8:c9:cc:e6:f1:
                    15:9e:b0:75:0e:f3:28:2f:31:cd:c6:e3:a2:01:9a:
                    ec:da:a7:3d:a0:e7:8b:3c:6c:6e:1b:09:24:2a:d1:
                    a8:7a:d5:52:f8:5b:f0:b4:d8:c3:17:96:94:55:c3:
                    cf:43:e4:20:a9:d8:ce:fc:2c:f4:b5:17:76:8e:8c:
                    69:1b:cf:d7:b4:79:f4:37:d4:d6:ac:63:3d:7b:98:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:C3:E1:A4:15:FC:23:DF:E1:E7:4A:FA:8D:32:47:AE:24:F9:A2
            X509v3 Authority Key Identifier:
                keyid:33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:78c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:40:1a:e2:e2:df:76:05:d6:67:3a:ee:c3:0a:ed:fe:de:
         a3:c3:1f:01:ab:4d:79:24:2f:fe:2c:74:f7:0e:90:07:77:3e:
         52:eb:21:2d:31:02:0c:c8:9c:d8:6a:dc:ef:f5:19:be:25:51:
         3a:60:af:87:1a:82:b8:f6:c1:6e:6a:a4:9e:d8:18:0c:6c:a0:
         d0:69:5f:b7:e1:2b:71:96:9d:82:c3:e6:c4:b3:86:d4:4d:41:
         41:01:51:07:1f:c1:5e:4e:34:e8:17:42:4e:f2:5b:a3:73:84:
         70:02:a6:ab:33:e2:b7:f9:ad:12:ee:ce:36:b8:33:0e:d3:0b:
         40:ff:b9:8f:b8:dd:43:19:19:a5:7c:aa:32:b4:1b:69:4c:00:
         bf:88:ab:1b:0b:73:9a:af:cf:2b:3c:23:f3:eb:ad:c4:65:b5:
         b9:5d:13:05:8e:87:b8:82:14:e3:39:42:5a:50:aa:51:a0:3f:
         b8:93:f9:5f:c5:d4:ce:f4:71:bb:52:7a:52:a9:b6:6f:f8:aa:
         1b:e4:53:b6:b9:19:3d:da:52:c2:ee:6c:be:c5:d6:32:35:42:
         e2:b1:56:0e:8a:e6:a3:d1:2a:70:b1:c4:9f:dc:9f:93:5f:8c:
         8c:25:52:33:fb:fd:ec:3f:61:0c:37:5b:23:10:1a:cf:d5:14:
         49:3f:e8:69
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUTMjpX3dz4E3NSLgz6OWL8DuKNsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMxNjYxQ0MyNjMzQTZBRDNFREQwOUJGRUU0MUM4MzM3
QTRENUMyRTAeFw0yNTAyMDQxODM3NDlaFw0yNjAyMDMxODQyNDlaMDMxMTAvBgNV
BAMTKEM2MzRDM0UxQTQxNUZDMjNERkUxRTc0QUZBOEQzMjQ3QUUyNEY5QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg5WuPrTz53P95S3AvLUZtMzB
xspcEffSWOh/n2zyvkxvKd9SrCE2Qjk/Y8a7F5fGlCWBhApghF1dnA1eqnhLl68D
4Ml7DTxF4oKcjzAs7UhaHo3kyUrSSVDJagybNOCudBOOg99M57A2j7inni+PXHMl
pMI0SmYBe/wSwZHBfw/7pqtA1IzwOe+Fb7zDW303OfeseaaDxxjbPeNIYcaQVekv
OIgZTi1IKWKmiJfoyczm8RWesHUO8ygvMc3G46IBmuzapz2g54s8bG4bCSQq0ah6
1VL4W/C02MMXlpRVw89D5CCp2M78LPS1F3aOjGkbz9e0efQ31NasYz17mNg5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUxjTD4aQV/CPf4edK+o0yR64k+aIwHwYDVR0j
BBgwFoAUMxZhzCYzpq0+3Qm/7kHIM3pNXC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OThERjNBMkQ1RDE1QjFBOTQ5Qzk2OTdBRTNDOUFBNjQy
NTU2MEE4RkQzRURFNTI5NkEzQkJBNTYwRUIzRDEzLzAvMzMxNjYxQ0MyNjMzQTZB
RDNFREQwOUJGRUU0MUM4MzM3QTRENUMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzE2NjFDQzI2MzNBNkFEM0VE
RDA5QkZFRTQxQzgzMzdBNEQ1QzJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjk4REYzQTJENUQxNUIxQTk0OUM5Njk3QUUzQzlBQTY0MjU1NjBBOEZE
M0VERTUyOTZBM0JCQTU2MEVCM0QxMy8wLzMyMzgzMDMzM2EzNzM4NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDeMAw
DQYJKoZIhvcNAQELBQADggEBAHKtQBri4t92BdZnOu7DCu3+3qPDHwGrTXkkL/4s
dPcOkAd3PlLrIS0xAgzInNhq3O/1Gb4lUTpgr4cagrj2wW5qpJ7YGAxsoNBpX7fh
K3GWnYLD5sSzhtRNQUEBUQcfwV5ONOgXQk7yW6NzhHACpqsz4rf5rRLuzja4Mw7T
C0D/uY+43UMZGaV8qjK0G2lMAL+IqxsLc5qvzys8I/PrrcRltbldEwWOh7iCFOM5
QlpQqlGgP7iT+V/F1M70cbtSelKptm/4qhvkU7a5GT3aUsLubL7F1jI1QuKxVg6K
5qPRKnCxxJ/cn5NfjIwlUjP7/ew/YQw3WyMQGs/VFEk/6Gk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:30 2025 by rpki-client