Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa
File:                     323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa (raw, json)
Hash identifier:          y29+scTvTbHNK39zGDPJ+BT/LHISxOvbvvar2owpjoU=
Subject key identifier:   0A:35:47:71:69:D3:4C:FE:DC:61:E0:64:27:9B:D0:FC:AE:32:36:3E
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       236B835FE8A6F70207549FB690F3771072EF8942
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:23:09 +0000
ROA not before:           Tue 04 Feb 2025 18:18:09 +0000
ROA not after:            Tue 03 Feb 2026 18:23:09 +0000
asID:                     13489
IP address blocks:        2803:87a0:0:2::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6b:83:5f:e8:a6:f7:02:07:54:9f:b6:90:f3:77:10:72:ef:89:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Feb  4 18:18:09 2025 GMT
            Not After : Feb  3 18:23:09 2026 GMT
        Subject: CN=0A35477169D34CFEDC61E064279BD0FCAE32363E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:73:41:e1:60:d7:e9:58:81:f6:62:77:bb:
                    61:b5:86:f4:22:f0:0c:91:ea:86:98:94:65:0c:79:
                    a2:ad:de:85:d9:de:c7:d5:9f:80:85:6b:32:33:cf:
                    4b:6b:54:53:ad:54:d3:89:91:9a:2f:06:36:4e:c7:
                    5b:be:33:60:78:ee:8b:ef:d5:7a:e2:90:70:72:97:
                    d6:55:33:71:a3:16:ce:01:37:8f:81:98:53:4a:83:
                    8c:58:ea:bd:0a:42:a8:5b:1c:92:b9:52:2d:ca:d4:
                    04:2e:29:f7:16:f3:6b:83:c2:b9:eb:12:14:2f:bb:
                    5e:90:3a:c5:9a:13:ca:8e:e1:0a:dc:ee:36:86:50:
                    76:c9:20:b0:86:fd:22:13:6b:d5:60:5e:88:94:05:
                    5a:1c:25:52:7d:5d:78:9c:4c:83:85:f8:f1:e1:3f:
                    0f:cd:6d:af:1f:85:f8:c8:96:9a:0a:3b:b9:c0:c9:
                    33:3a:05:65:ff:5f:71:05:c2:ca:b4:09:15:9f:1b:
                    5b:1d:ef:f6:56:ff:38:30:10:2c:68:89:0f:07:32:
                    eb:76:9f:d6:0b:34:85:cd:9f:af:f7:9b:42:d6:ae:
                    73:48:72:39:01:ba:9f:b6:86:c4:8b:df:a0:e3:3b:
                    34:81:f3:c7:93:58:30:41:70:1f:d8:29:55:60:b9:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:35:47:71:69:D3:4C:FE:DC:61:E0:64:27:9B:D0:FC:AE:32:36:3E
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87a0:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:05:2c:f3:30:77:71:f9:28:6e:81:ee:20:68:09:b2:c2:
         5d:bb:d4:7f:e3:a4:9a:d0:07:12:70:51:0e:29:a9:fe:5b:b2:
         d1:fc:8b:a9:1a:71:74:32:d3:ce:88:7e:29:0f:a5:5b:7d:be:
         1a:83:82:78:39:4e:b9:81:0c:e4:82:90:00:e6:4d:a5:5e:12:
         a4:49:45:26:c2:cd:4e:30:c7:f5:ef:b9:d3:c2:01:bf:83:66:
         84:f1:b6:b4:8c:07:6b:2f:74:a9:28:ac:15:1d:12:15:cd:d3:
         a9:74:0f:89:65:9c:03:a0:92:52:2b:7b:38:08:38:4d:2d:ba:
         31:78:b7:6f:ee:78:ef:d4:35:7d:2f:f7:16:1b:d8:f1:d3:bf:
         4b:15:e5:6c:d5:6c:86:6c:dc:c7:c6:82:d2:9c:71:c1:a1:5f:
         76:70:f7:3b:9d:b8:78:f0:1b:32:83:4f:a9:84:4c:bd:dc:d1:
         3f:e1:40:1b:5f:08:bb:b5:a6:0f:eb:f6:48:fe:69:c9:48:35:
         1b:c5:40:26:68:76:6b:10:5a:e9:99:83:8b:aa:f1:81:76:77:
         e4:7a:46:27:60:93:32:48:38:10:3d:3f:47:ab:4c:a1:a1:60:
         8e:e9:b8:2d:c0:49:58:04:66:c6:ba:77:e2:ef:39:cf:ff:28:
         82:1c:eb:53
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUI2uDX+im9wIHVJ+2kPN3EHLviUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OURGNDgzODk4RTg5Q0UxMjUzQUMwQjkwMDRFNzk3
Q0M5QUYwRjAeFw0yNTAyMDQxODE4MDlaFw0yNjAyMDMxODIzMDlaMDMxMTAvBgNV
BAMTKDBBMzU0NzcxNjlEMzRDRkVEQzYxRTA2NDI3OUJEMEZDQUUzMjM2M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKu3NB4WDX6ViB9mJ3u2G1hvQi
8AyR6oaYlGUMeaKt3oXZ3sfVn4CFazIzz0trVFOtVNOJkZovBjZOx1u+M2B47ovv
1XrikHByl9ZVM3GjFs4BN4+BmFNKg4xY6r0KQqhbHJK5Ui3K1AQuKfcW82uDwrnr
EhQvu16QOsWaE8qO4Qrc7jaGUHbJILCG/SITa9VgXoiUBVocJVJ9XXicTIOF+PHh
Pw/Nba8fhfjIlpoKO7nAyTM6BWX/X3EFwsq0CRWfG1sd7/ZW/zgwECxoiQ8HMut2
n9YLNIXNn6/3m0LWrnNIcjkBup+2hsSL36DjOzSB88eTWDBBcB/YKVVguV6dAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUCjVHcWnTTP7cYeBkJ5vQ/K4yNj4wHwYDVR0j
BBgwFoAUo2nfSDiY6JzhJTrAuQBOeXzJrw8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjA0RTEyQzJBMEZFNEQwNjMzRDRFOEYyRjRENjU5MEND
ODQzQkEwMTE0NTlDQzQwQTcxQTAyQjM2QTkzMUI4LzAvQTM2OURGNDgzODk4RTg5
Q0UxMjUzQUMwQjkwMDRFNzk3Q0M5QUYwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5REY0ODM4OThFODlDRTEy
NTNBQzBCOTAwNEU3OTdDQzlBRjBGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkIwNEUxMkMyQTBGRTREMDYzM0Q0RThGMkY0RDY1OTBDQzg0M0JBMDEx
NDU5Q0M0MEE3MUEwMkIzNkE5MzFCOC8wLzMyMzgzMDMzM2EzODM3NjEzMDNhMzAz
YTMyM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIwMzEzMzM0MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJ
ACgDh6AAAAACMA0GCSqGSIb3DQEBCwUAA4IBAQALngUs8zB3cfkoboHuIGgJssJd
u9R/46Sa0AcScFEOKan+W7LR/IupGnF0MtPOiH4pD6Vbfb4ag4J4OU65gQzkgpAA
5k2lXhKkSUUmws1OMMf177nTwgG/g2aE8ba0jAdrL3SpKKwVHRIVzdOpdA+JZZwD
oJJSK3s4CDhNLboxeLdv7njv1DV9L/cWG9jx079LFeVs1WyGbNzHxoLSnHHBoV92
cPc7nbh48Bsyg0+phEy93NE/4UAbXwi7taYP6/ZI/mnJSDUbxUAmaHZrEFrpmYOL
qvGBdnfkekYnYJMySDgQPT9Hq0yhoWCO6bgtwElYBGbGunfi7znP/yiCHOtT
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:24 2025 by rpki-client