Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa
File:                     323830333a623330303a3a2f33322d3336203d3e203532343535.roa (raw, json)
Hash identifier:          hEXU6+zVlxTVMv3pijtaL3yTn1lTqhXPTD4UZeIwPIg=
Subject key identifier:   08:60:87:BF:5F:2F:D4:5C:A2:BF:72:61:4D:31:EC:AB:5A:20:FB:C0
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       5BCD9E40B44A7C49DDBDD62308EB4B43E954F3BA
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa
Signing time:             Tue 04 Feb 2025 18:54:55 +0000
ROA not before:           Tue 04 Feb 2025 18:49:55 +0000
ROA not after:            Tue 03 Feb 2026 18:54:55 +0000
asID:                     52455
IP address blocks:        2803:b300::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:9e:40:b4:4a:7c:49:dd:bd:d6:23:08:eb:4b:43:e9:54:f3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Feb  4 18:49:55 2025 GMT
            Not After : Feb  3 18:54:55 2026 GMT
        Subject: CN=086087BF5F2FD45CA2BF72614D31ECAB5A20FBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:3b:03:2a:6b:62:a2:c2:ac:67:56:db:79:
                    90:79:47:3c:ab:71:fb:1f:06:7d:d1:b6:df:99:0f:
                    1e:e3:f0:34:c6:b3:69:1f:38:5d:18:84:4d:bb:f4:
                    dd:ad:59:58:16:0e:48:6f:1c:ba:6e:65:ef:b2:03:
                    aa:3f:9b:65:94:c4:0f:50:1f:2a:12:3a:dc:b3:e7:
                    61:b1:b5:ef:0c:28:7a:b9:a1:e3:7d:fd:b7:fa:3b:
                    95:67:88:15:94:a5:27:8f:c3:36:b7:37:bf:4c:2b:
                    1d:ab:aa:ed:3c:34:f2:29:c2:8e:ad:ef:2f:35:c9:
                    71:ce:66:59:35:6c:da:9c:68:fb:a6:e5:5c:81:c1:
                    ff:12:52:94:46:86:6c:ef:3d:21:8d:23:b6:b2:cf:
                    f8:b2:c7:e3:ca:07:9d:bd:6c:ff:f1:82:4b:e2:66:
                    6b:14:bc:be:7f:3b:ed:ef:94:99:fd:3a:74:ae:e2:
                    04:d5:3a:de:84:de:b4:55:4b:0c:d2:81:b0:95:28:
                    39:80:19:15:74:e8:60:53:ae:83:6f:58:5d:aa:ed:
                    b9:78:84:5d:1b:7f:7c:a2:87:83:93:e3:81:c6:7a:
                    54:58:dd:dd:59:0a:2d:21:f0:84:97:af:ea:16:fe:
                    ac:92:ee:d6:8d:84:78:16:20:4d:b9:d4:7c:66:f6:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:87:BF:5F:2F:D4:5C:A2:BF:72:61:4D:31:EC:AB:5A:20:FB:C0
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:19:1d:62:7c:6d:ad:56:30:3d:5c:c4:09:cc:82:6d:42:d2:
         a1:75:b2:4e:1f:f9:f9:da:ee:f8:c1:88:a4:bc:06:c0:e5:ec:
         47:26:2a:db:3e:a7:a0:a8:ea:ba:77:ae:13:91:79:6c:45:80:
         6b:2a:22:5d:0c:a8:24:ac:9d:e4:2c:57:ef:94:15:59:2f:1e:
         f7:ab:19:40:fa:a5:02:92:7f:c4:2c:23:d4:63:27:60:6a:5d:
         31:7f:42:84:a8:e2:a0:d6:2c:b1:39:1b:30:21:28:94:37:cb:
         06:73:32:ba:ab:81:1e:42:1b:c4:26:7b:2a:42:2c:f9:94:ff:
         7b:7f:26:63:ce:7d:82:4c:01:3d:c9:ad:7e:42:be:7b:66:cf:
         fb:3a:85:c2:cc:3b:6a:10:69:ae:13:4b:01:01:90:f4:76:e9:
         2c:c6:2d:76:af:2a:90:e2:47:ed:77:ed:87:41:eb:e6:78:d5:
         15:9f:6a:a6:a5:19:90:4f:81:78:30:f6:ed:96:ab:11:64:3c:
         12:84:81:43:5a:a8:49:60:6f:33:16:0b:04:7f:4d:f9:35:24:
         c4:96:b8:22:f5:75:7f:a7:73:ad:c4:eb:a9:ba:d1:a1:a8:7b:
         91:5a:f9:d4:e7:dc:44:d3:dc:d5:1b:8e:cf:1c:19:d9:e1:e9:
         1b:49:0c:66
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUW82eQLRKfEndvdYjCOtLQ+lU87owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTAyMDQxODQ5NTVaFw0yNjAyMDMxODU0NTVaMDMxMTAvBgNV
BAMTKDA4NjA4N0JGNUYyRkQ0NUNBMkJGNzI2MTREMzFFQ0FCNUEyMEZCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyDDsDKmtiosKsZ1bbeZB5Rzyr
cfsfBn3Rtt+ZDx7j8DTGs2kfOF0YhE279N2tWVgWDkhvHLpuZe+yA6o/m2WUxA9Q
HyoSOtyz52Gxte8MKHq5oeN9/bf6O5VniBWUpSePwza3N79MKx2rqu08NPIpwo6t
7y81yXHOZlk1bNqcaPum5VyBwf8SUpRGhmzvPSGNI7ayz/iyx+PKB529bP/xgkvi
ZmsUvL5/O+3vlJn9OnSu4gTVOt6E3rRVSwzSgbCVKDmAGRV06GBTroNvWF2q7bl4
hF0bf3yih4OT44HGelRY3d1ZCi0h8ISXr+oW/qyS7taNhHgWIE251Hxm9pDNAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUCGCHv18v1Fyiv3JhTTHsq1og+8AwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMyMzgzMDMzM2E2MjMzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDM1MzIzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7MAMA0G
CSqGSIb3DQEBCwUAA4IBAQBHGR1ifG2tVjA9XMQJzIJtQtKhdbJOH/n52u74wYik
vAbA5exHJirbPqegqOq6d64TkXlsRYBrKiJdDKgkrJ3kLFfvlBVZLx73qxlA+qUC
kn/ELCPUYydgal0xf0KEqOKg1iyxORswISiUN8sGczK6q4EeQhvEJnsqQiz5lP97
fyZjzn2CTAE9ya1+Qr57Zs/7OoXCzDtqEGmuE0sBAZD0duksxi12ryqQ4kftd+2H
QevmeNUVn2qmpRmQT4F4MPbtlqsRZDwShIFDWqhJYG8zFgsEf035NSTElrgi9XV/
p3OtxOuputGhqHuRWvnU59xE09zVG47PHBnZ4ekbSQxm
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:21 2025 by rpki-client