Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa
File:                     323830333a386565303a3a2f33322d3332203d3e20323639393739.roa (raw, json)
Hash identifier:          PCEI7PazmjKBSXMUzNlY8ZC1XId3lQ7blhDtwlBtKjE=
Subject key identifier:   C6:F8:3B:3A:FD:C4:34:86:6D:90:B4:4F:F7:3E:2D:C2:3F:99:49:6E
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       1B5BB0FB6059939E5BD5B0D0DDB901A20615FC8F
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa
Signing time:             Fri 03 Jan 2025 13:40:00 +0000
ROA not before:           Fri 03 Jan 2025 13:35:00 +0000
ROA not after:            Fri 02 Jan 2026 13:40:00 +0000
asID:                     269979
IP address blocks:        2803:8ee0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5b:b0:fb:60:59:93:9e:5b:d5:b0:d0:dd:b9:01:a2:06:15:fc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  3 13:35:00 2025 GMT
            Not After : Jan  2 13:40:00 2026 GMT
        Subject: CN=C6F83B3AFDC434866D90B44FF73E2DC23F99496E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:a5:e8:af:15:0b:2b:03:27:99:6e:6e:ae:
                    4b:45:ee:31:83:aa:d3:df:2b:05:42:b2:e3:61:d1:
                    d2:27:1e:ed:c1:75:0d:ab:5d:70:de:86:e6:bb:9a:
                    ef:29:17:cc:b3:39:a5:ae:67:ec:c4:62:1a:f7:78:
                    ec:39:68:82:0f:6f:bb:db:54:d9:a4:4c:83:4a:25:
                    5c:aa:83:3b:81:d6:24:02:be:e2:4b:0d:8c:76:6b:
                    4d:4c:cf:a0:94:03:7e:0d:ab:6b:07:d2:88:80:6b:
                    7e:c8:41:c6:b5:d7:e3:c0:7f:ec:1c:6f:bd:90:89:
                    25:bf:c4:21:5a:aa:98:9e:33:cf:62:8a:29:d8:5e:
                    35:24:66:77:d9:46:18:ba:f7:04:2e:36:28:92:a7:
                    1a:f8:fc:01:d0:c4:d3:47:2b:19:20:5f:07:1e:88:
                    2f:03:5d:a8:e2:d0:66:40:1d:45:2c:e7:3f:e0:ac:
                    57:6e:cc:c5:e9:71:8e:35:ff:d3:0c:0a:6e:c3:d2:
                    63:61:6e:ec:65:81:0a:3c:4c:fd:89:35:7f:e4:10:
                    4d:65:c2:ef:c3:26:ba:96:9e:80:4c:37:61:c6:dc:
                    a7:cc:f6:1c:68:fa:a8:62:7f:b2:77:f8:35:2c:f8:
                    1f:24:62:72:09:73:7f:6f:cd:43:31:d7:90:20:1b:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:3B:3A:FD:C4:34:86:6D:90:B4:4F:F7:3E:2D:C2:3F:99:49:6E
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:cf:43:9e:85:45:03:b3:e9:49:ca:a3:8b:31:23:2f:67:
         9e:5b:7c:77:d9:cd:ca:cf:e0:fa:a1:a2:17:1b:78:c9:63:72:
         8b:79:89:a9:68:47:27:a8:73:09:4f:78:56:d4:bb:20:14:00:
         e6:87:45:82:99:a8:56:92:97:f1:24:c1:89:25:a2:95:35:43:
         c4:c9:40:f0:fd:3b:b1:b4:57:c5:aa:9b:5f:e2:f7:f3:e7:1b:
         c2:49:23:69:31:6e:e2:a1:ad:0b:9d:d5:0e:4f:58:dd:58:d1:
         a2:1a:72:74:10:d3:e8:37:0e:4a:de:ed:91:9f:f5:b1:13:f4:
         61:e9:4e:9f:45:d8:1d:db:b7:29:82:f8:6f:34:ee:b1:87:c7:
         31:7f:69:e3:69:b9:1c:1b:c6:87:49:07:4e:5f:60:b5:bc:fb:
         78:2d:41:c3:bf:19:ea:00:67:77:c4:7a:61:81:8c:a3:8a:9c:
         08:f4:1a:9d:07:86:a5:df:49:19:d3:5e:d2:f8:bb:46:f4:71:
         fc:ba:e5:ba:6b:cb:b5:48:eb:c6:79:6d:d3:8b:55:6c:8a:fb:
         5a:7b:f7:a8:8b:c8:50:2e:0b:64:5c:92:ea:c6:46:32:43:fc:
         05:be:7d:56:9e:65:e2:ae:bb:7c:b0:7f:5b:51:e3:a7:7d:47:
         ff:e0:a4:75
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUG1uw+2BZk55b1bDQ3bkBogYV/I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNkE2MzgyQjYwOUFFQTdGNDEyREJGQTYzNEZBM0U3
NzVEMzMzRjAeFw0yNTAxMDMxMzM1MDBaFw0yNjAxMDIxMzQwMDBaMDMxMTAvBgNV
BAMTKEM2RjgzQjNBRkRDNDM0ODY2RDkwQjQ0RkY3M0UyREMyM0Y5OTQ5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqoaXorxULKwMnmW5urktF7jGD
qtPfKwVCsuNh0dInHu3BdQ2rXXDehua7mu8pF8yzOaWuZ+zEYhr3eOw5aIIPb7vb
VNmkTINKJVyqgzuB1iQCvuJLDYx2a01Mz6CUA34Nq2sH0oiAa37IQca11+PAf+wc
b72QiSW/xCFaqpieM89iiinYXjUkZnfZRhi69wQuNiiSpxr4/AHQxNNHKxkgXwce
iC8DXaji0GZAHUUs5z/grFduzMXpcY41/9MMCm7D0mNhbuxlgQo8TP2JNX/kEE1l
wu/DJrqWnoBMN2HG3KfM9hxo+qhif7J3+DUs+B8kYnIJc39vzUMx15AgG495AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUxvg7Ov3ENIZtkLRP9z4twj+ZSW4wHwYDVR0j
BBgwFoAUeDamOCtgmup/QS2/pjT6PnddMz8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REExN0QwNjY2NjZFODhGMzZGMUYxRTQxOTFBQTNCQTA5
MDI2RTgxQTYzMzI5MzMzMjVFNkJFRDUxOUNCODUwLzAvNzgzNkE2MzgyQjYwOUFF
QTdGNDEyREJGQTYzNEZBM0U3NzVEMzMzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODM2QTYzODJCNjA5QUVBN0Y0
MTJEQkZBNjM0RkEzRTc3NUQzMzNGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRBMTdEMDY2NjY2RTg4RjM2RjFGMUU0MTkxQUEzQkEwOTAyNkU4MUE2
MzMyOTMzMzI1RTZCRUQ1MTlDQjg1MC8wLzMyMzgzMDMzM2EzODY1NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDjuAw
DQYJKoZIhvcNAQELBQADggEBAH55z0OehUUDs+lJyqOLMSMvZ55bfHfZzcrP4Pqh
ohcbeMljcot5ialoRyeocwlPeFbUuyAUAOaHRYKZqFaSl/EkwYklopU1Q8TJQPD9
O7G0V8Wqm1/i9/PnG8JJI2kxbuKhrQud1Q5PWN1Y0aIacnQQ0+g3Dkre7ZGf9bET
9GHpTp9F2B3btymC+G807rGHxzF/aeNpuRwbxodJB05fYLW8+3gtQcO/GeoAZ3fE
emGBjKOKnAj0Gp0HhqXfSRnTXtL4u0b0cfy65bpry7VI68Z5bdOLVWyK+1p796iL
yFAuC2RckurGRjJD/AW+fVaeZeKuu3ywf1tR46d9R//gpHU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:18:35 2025 by rpki-client