Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa
File:                     323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa (raw, json)
Hash identifier:          tOl3eLF8mjwBecI/P2forvEPjm+R2z0PRMfvI/GoWgk=
Subject key identifier:   0F:91:19:AB:01:3B:83:F5:C2:9E:EB:B6:71:08:A8:E1:0D:93:BC:E5
Certificate issuer:       /CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
Certificate serial:       226D0475A2A9CFD9A61315265C39555C9C33B91E
Authority key identifier: 50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa
Signing time:             Tue 04 Feb 2025 18:45:40 +0000
ROA not before:           Tue 04 Feb 2025 18:40:40 +0000
ROA not after:            Tue 03 Feb 2026 18:45:40 +0000
asID:                     267703
IP address blocks:        2801:1b:f000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:04:75:a2:a9:cf:d9:a6:13:15:26:5c:39:55:5c:9c:33:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
        Validity
            Not Before: Feb  4 18:40:40 2025 GMT
            Not After : Feb  3 18:45:40 2026 GMT
        Subject: CN=0F9119AB013B83F5C29EEBB67108A8E10D93BCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:27:46:ff:71:75:07:2c:9c:53:b5:1b:8c:
                    44:2b:87:62:ce:00:e0:90:38:fd:fb:c7:93:f5:6f:
                    88:e4:7e:22:0d:9e:64:d0:ae:4f:2a:91:c0:98:38:
                    5b:06:c2:f1:2c:e3:f3:1c:ce:27:a6:3c:01:4a:57:
                    e0:9c:80:aa:1a:5b:fa:df:15:3f:21:f6:e4:f0:d3:
                    1b:4c:d4:bd:81:c5:c7:5b:36:e7:ae:c0:e1:aa:e5:
                    5d:07:2d:09:ea:d1:2e:c1:85:15:30:85:e0:a1:99:
                    3f:9d:ea:4a:be:d0:d9:07:2a:a9:2c:c4:1e:4f:01:
                    bb:5b:4d:cc:07:68:3e:da:52:af:e2:2a:59:87:7f:
                    89:2a:b0:b6:d4:9c:bf:45:cf:2f:91:e4:3b:86:97:
                    b8:fa:40:51:6b:53:18:0f:f8:e3:eb:d5:69:ab:64:
                    a9:01:a0:65:7a:56:38:97:ef:c6:bc:87:2a:9b:8c:
                    4e:fd:93:ba:63:ab:36:b8:4d:a1:4f:08:7d:2f:b1:
                    6b:23:11:3d:aa:19:3c:25:69:b1:c4:5b:71:2b:59:
                    3a:8e:29:a3:fb:ac:e9:c1:3a:98:8c:22:9a:67:ce:
                    9e:9d:ad:38:1a:9a:a1:37:71:08:69:27:96:79:b4:
                    66:a8:09:ed:62:c5:69:df:38:19:b4:3a:22:02:3e:
                    c3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:19:AB:01:3B:83:F5:C2:9E:EB:B6:71:08:A8:E1:0D:93:BC:E5
            X509v3 Authority Key Identifier:
                keyid:50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:0b:42:a3:43:29:47:d1:ab:56:b9:c3:e5:50:ad:e3:86:
         27:58:5c:11:23:df:bd:6e:e0:5a:fc:2a:c4:a9:d0:38:ba:69:
         3d:c4:7e:9b:70:95:1f:25:75:04:67:43:92:60:03:69:43:b0:
         12:4c:5e:f2:ee:d5:9c:ca:3b:15:d2:4e:c9:d0:32:7b:9f:7c:
         a6:ef:8b:d9:a0:21:3b:1e:ee:a6:2c:b3:bc:97:51:90:06:da:
         2e:35:08:1e:eb:c1:d7:ab:4b:c8:59:d8:9d:a4:32:79:59:04:
         28:ef:2f:c6:f0:ba:cb:1b:f2:82:e7:87:4a:b4:b3:1c:3d:c1:
         ae:29:52:b6:a3:8a:d2:03:e1:ff:a8:a6:c5:40:4f:f2:7a:d8:
         5d:33:67:e2:5e:7b:cd:3e:df:01:c7:75:dc:20:a1:b7:1e:4b:
         7c:29:39:50:74:c1:90:15:f0:4d:9b:32:b0:a2:ad:fb:fc:2e:
         90:0a:c8:28:80:94:fd:e7:55:26:7a:ba:7c:d8:50:a1:2b:2d:
         53:0b:2b:21:a8:f4:9c:f0:22:d6:f9:d2:cb:8b:d6:ba:f1:b8:
         d9:99:91:0a:d2:ff:c7:49:bc:9c:1a:7e:71:04:df:e7:35:23:
         07:84:2b:4c:71:6f:92:ae:7b:76:cd:dd:8d:b8:53:c8:4a:76:
         4c:9e:4b:77
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIm0EdaKpz9mmExUmXDlVXJwzuR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzRDgyRUNGQTlCMDQ5NzE0QTA0ODdCMzU0RTAzN0VC
MEZFNkRBQjAeFw0yNTAyMDQxODQwNDBaFw0yNjAyMDMxODQ1NDBaMDMxMTAvBgNV
BAMTKDBGOTExOUFCMDEzQjgzRjVDMjlFRUJCNjcxMDhBOEUxMEQ5M0JDRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPydG/3F1ByycU7UbjEQrh2LO
AOCQOP37x5P1b4jkfiINnmTQrk8qkcCYOFsGwvEs4/McziemPAFKV+CcgKoaW/rf
FT8h9uTw0xtM1L2BxcdbNueuwOGq5V0HLQnq0S7BhRUwheChmT+d6kq+0NkHKqks
xB5PAbtbTcwHaD7aUq/iKlmHf4kqsLbUnL9Fzy+R5DuGl7j6QFFrUxgP+OPr1Wmr
ZKkBoGV6VjiX78a8hyqbjE79k7pjqza4TaFPCH0vsWsjET2qGTwlabHEW3ErWTqO
KaP7rOnBOpiMIppnzp6drTgamqE3cQhpJ5Z5tGaoCe1ixWnfOBm0OiICPsO1AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUD5EZqwE7g/XCnuu2cQio4Q2TvOUwHwYDVR0j
BBgwFoAUUD2C7PqbBJcUoEh7NU4DfrD+baswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0VEQkU0NjU4RTU5QTVDNzMyM0M2MUNDMzZFRTM0OEQz
RTBBMUVFMDA4ODQyMTI1MEM3RTc3MzFGQTQyNDI5LzAvNTAzRDgyRUNGQTlCMDQ5
NzE0QTA0ODdCMzU0RTAzN0VCMEZFNkRBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDNEODJFQ0ZBOUIwNDk3MTRB
MDQ4N0IzNTRFMDM3RUIwRkU2REFCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdFREJFNDY1OEU1OUE1QzczMjNDNjFDQzM2RUUzNDhEM0UwQTFFRTAw
ODg0MjEyNTBDN0U3NzMxRkE0MjQyOS8wLzMyMzgzMDMxM2EzMTYyM2E2NjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzAzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABvwADANBgkqhkiG9w0BAQsFAAOCAQEASiwLQqNDKUfRq1a5w+VQreOGJ1hc
ESPfvW7gWvwqxKnQOLppPcR+m3CVHyV1BGdDkmADaUOwEkxe8u7VnMo7FdJOydAy
e598pu+L2aAhOx7upiyzvJdRkAbaLjUIHuvB16tLyFnYnaQyeVkEKO8vxvC6yxvy
gueHSrSzHD3BrilStqOK0gPh/6imxUBP8nrYXTNn4l57zT7fAcd13CChtx5LfCk5
UHTBkBXwTZsysKKt+/wukArIKICU/edVJnq6fNhQoSstUwsrIaj0nPAi1vnSy4vW
uvG42ZmRCtL/x0m8nBp+cQTf5zUjB4QrTHFvkq57ds3djbhTyEp2TJ5Ldw==
-----END CERTIFICATE-----