Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a633a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a633a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          0QLZLzk+I2hQ8WkR/WBE9rbrY+hwmww4B2T8i/tm2rc=
Subject key identifier:   2E:35:0B:FE:75:CE:AB:7F:56:B7:0A:D8:9B:1C:96:77:1D:88:88:63
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       4DBE6760EA8E606DF5B3D9C5BAFF40C411D9F3C6
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a633a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:33 +0000
ROA not before:           Tue 04 Feb 2025 18:06:33 +0000
ROA not after:            Tue 03 Feb 2026 18:11:33 +0000
asID:                     271935
IP address blocks:        2803:7a10:c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:be:67:60:ea:8e:60:6d:f5:b3:d9:c5:ba:ff:40:c4:11:d9:f3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:33 2025 GMT
            Not After : Feb  3 18:11:33 2026 GMT
        Subject: CN=2E350BFE75CEAB7F56B70AD89B1C96771D888863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:8d:a7:9e:97:85:ee:a0:80:17:58:78:de:
                    36:d8:1e:fe:0e:2c:19:8f:42:24:12:db:ac:55:59:
                    fb:04:37:a3:16:42:b2:0b:96:22:1a:34:a5:00:8b:
                    71:a8:19:19:40:61:e0:7e:6e:55:f3:b2:a0:57:8d:
                    4c:3d:47:cc:3f:e7:b5:03:f9:d8:64:e3:6f:db:5e:
                    c5:66:6c:7a:95:4a:a8:7f:03:25:3c:a8:89:f8:cc:
                    da:44:a8:58:66:f5:44:20:8a:d8:2e:ff:95:98:b8:
                    92:26:64:32:03:88:a0:5c:d6:0c:1f:65:e6:3b:3a:
                    02:d2:65:71:30:af:a7:83:ba:43:20:bf:6d:57:6e:
                    2f:de:f0:c7:83:df:17:ec:e2:1e:7c:c5:93:a7:31:
                    96:07:ef:bb:41:0b:17:15:6b:50:85:88:06:43:c9:
                    65:15:4e:63:75:47:b4:a5:54:1c:b5:9c:53:d3:33:
                    a4:3c:57:3d:39:be:62:eb:51:b8:c7:2f:e8:9e:43:
                    09:8c:0c:bd:e1:ea:58:ba:20:07:d3:47:1b:83:81:
                    f1:b5:f2:7e:cd:76:46:76:e3:4e:fb:09:81:ad:04:
                    b2:d0:31:5d:35:93:a3:88:f8:5a:1d:03:24:8c:1a:
                    3e:cd:82:56:2f:bf:33:fd:e8:42:8e:4b:b7:f2:f5:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:0B:FE:75:CE:AB:7F:56:B7:0A:D8:9B:1C:96:77:1D:88:88:63
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a633a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:42:1c:67:6d:4c:87:1e:70:68:cf:b6:76:66:f6:0c:e9:
         ae:d4:fe:65:75:35:4a:bf:74:c6:3a:68:5b:e0:63:79:a8:55:
         24:07:1c:de:d4:6f:26:33:39:9f:38:3f:c1:e4:aa:8b:34:7d:
         a1:84:45:55:c6:8b:97:6b:16:00:fb:c2:d8:ca:73:93:f1:d9:
         30:95:3e:76:74:fd:09:3a:fc:eb:4a:2b:2d:6c:04:f1:8d:01:
         b2:d8:a8:4f:b4:be:d3:94:96:2f:7e:02:81:5c:8a:a3:b7:d2:
         af:2c:8d:c0:e6:7e:b1:a5:71:e7:35:df:a0:bc:d4:8d:9f:8b:
         f9:61:fd:f9:1f:dc:aa:f8:e7:46:22:a3:80:34:db:a8:b5:bd:
         d6:4f:6d:b1:8d:06:99:ca:0e:4b:21:00:1b:64:7d:6c:d8:81:
         6e:67:14:05:cb:7f:7f:93:80:dd:58:3d:d7:32:c0:3c:43:dd:
         47:d5:9a:8e:55:70:b7:b4:1b:85:6e:1e:c9:30:b3:a2:65:31:
         7a:c7:85:58:89:c3:dc:6e:25:51:b7:2c:04:e6:a7:39:8d:4e:
         b6:f5:fe:20:a9:fe:9d:cd:43:9a:ef:13:30:33:b4:04:39:a8:
         4f:fb:ed:ab:68:34:9a:49:73:12:8c:0c:e0:c8:92:e5:ef:4f:
         8a:5f:66:a9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUTb5nYOqOYG31s9nFuv9AxBHZ88YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNTAyMDQxODA2MzNaFw0yNjAyMDMxODExMzNaMDMxMTAvBgNV
BAMTKDJFMzUwQkZFNzVDRUFCN0Y1NkI3MEFEODlCMUM5Njc3MUQ4ODg4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMY2nnpeF7qCAF1h43jbYHv4O
LBmPQiQS26xVWfsEN6MWQrILliIaNKUAi3GoGRlAYeB+blXzsqBXjUw9R8w/57UD
+dhk42/bXsVmbHqVSqh/AyU8qIn4zNpEqFhm9UQgitgu/5WYuJImZDIDiKBc1gwf
ZeY7OgLSZXEwr6eDukMgv21Xbi/e8MeD3xfs4h58xZOnMZYH77tBCxcVa1CFiAZD
yWUVTmN1R7SlVBy1nFPTM6Q8Vz05vmLrUbjHL+ieQwmMDL3h6li6IAfTRxuDgfG1
8n7NdkZ24077CYGtBLLQMV01k6OI+FodAySMGj7NglYvvzP96EKOS7fy9R/HAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQULjUL/nXOq39WtwrYmxyWdx2IiGMwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhNjMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3oQAAwwDQYJKoZIhvcNAQELBQADggEBADCuQhxnbUyHHnBoz7Z2ZvYM6a7U/mV1
NUq/dMY6aFvgY3moVSQHHN7UbyYzOZ84P8Hkqos0faGERVXGi5drFgD7wtjKc5Px
2TCVPnZ0/Qk6/OtKKy1sBPGNAbLYqE+0vtOUli9+AoFciqO30q8sjcDmfrGlcec1
36C81I2fi/lh/fkf3Kr450Yio4A026i1vdZPbbGNBpnKDkshABtkfWzYgW5nFAXL
f3+TgN1YPdcywDxD3UfVmo5VcLe0G4VuHskws6JlMXrHhViJw9xuJVG3LATmpzmN
Trb1/iCp/p3NQ5rvEzAztAQ5qE/77atoNJpJcxKMDODIkuXvT4pfZqk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:40:33 2025 by rpki-client