Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          S5ahx2V/GF77qWVgQVk4mDqnu4BIv430WEXiTNqzZKo=
Subject key identifier:   E1:92:83:44:BA:FB:40:F0:AC:3B:ED:79:8C:B4:CE:34:47:BF:CF:41
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       280CE7DE9FFB98E9169607FC09BCF3BD5D740DB5
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:49 +0000
ROA not before:           Tue 04 Feb 2025 18:50:49 +0000
ROA not after:            Tue 03 Feb 2026 18:55:49 +0000
asID:                     273041
IP address blocks:        2801:1a5:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:e7:de:9f:fb:98:e9:16:96:07:fc:09:bc:f3:bd:5d:74:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:49 2025 GMT
            Not After : Feb  3 18:55:49 2026 GMT
        Subject: CN=E1928344BAFB40F0AC3BED798CB4CE3447BFCF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:91:c3:4f:7e:03:7f:8b:48:9a:f3:74:40:
                    b2:39:30:c5:ea:0f:6b:3c:bd:07:e4:60:2a:ae:bc:
                    5b:35:fd:81:b2:11:bb:28:a1:19:19:28:09:b0:a5:
                    18:27:59:81:78:b6:53:94:3d:2b:34:78:bb:c3:4b:
                    f1:0c:04:a3:86:76:4e:e4:76:15:d8:9e:59:7c:5a:
                    3e:2a:b2:27:46:47:95:bb:0a:50:cd:3a:1d:80:f0:
                    95:5c:58:b8:84:35:73:bb:d3:7c:d7:9f:ec:84:02:
                    8d:a9:c1:fa:f8:a5:11:13:0b:5b:cd:a2:7e:52:c3:
                    33:fc:38:87:45:80:6f:ea:c9:5d:4f:68:4b:7f:26:
                    b9:10:2c:94:bb:e4:5e:59:88:8e:91:58:10:3b:4d:
                    e3:74:f5:a4:db:ba:1d:fb:dd:a6:09:6b:de:20:2d:
                    81:06:0c:b1:e9:47:9a:ea:f0:61:ee:40:0c:11:a1:
                    7e:53:82:86:c6:c7:7d:02:ca:d0:8a:a0:82:2b:f8:
                    90:57:f0:0b:9d:8c:9f:03:c6:84:d4:e3:20:72:1f:
                    2d:b1:3c:e7:58:6d:5b:76:53:97:87:59:eb:3a:09:
                    ef:17:01:a1:34:7e:11:32:95:7f:ae:2b:df:88:8c:
                    95:b2:b9:fd:40:68:c2:f3:a7:6b:9e:7d:2a:90:a1:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:83:44:BA:FB:40:F0:AC:3B:ED:79:8C:B4:CE:34:47:BF:CF:41
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:48:a5:ac:aa:b1:c2:30:0c:4e:cf:8f:fa:1b:ee:84:f0:
         88:20:9c:fb:ba:bd:5d:1f:06:0a:c6:a0:05:aa:61:de:d1:40:
         97:97:c6:a4:1e:3e:55:9c:14:d8:ba:af:fd:54:cf:38:8a:c3:
         94:16:aa:f6:44:d7:79:97:c5:3e:c1:d8:e4:bc:c3:f7:f6:20:
         6f:e8:87:c3:aa:be:ff:e7:35:e2:29:cc:0c:81:3f:67:03:14:
         7d:d9:a7:80:4d:bf:34:2f:df:50:12:72:e0:9d:a1:88:f9:bd:
         19:d5:a8:9c:71:b6:b1:20:1f:1d:e5:af:32:b0:b8:c1:ac:01:
         69:ec:55:d8:b3:ad:60:e8:52:b8:f6:80:57:be:b3:b0:e3:75:
         cd:2b:de:8c:ec:a5:a4:3e:52:0a:72:9c:5f:fc:ff:48:69:4e:
         c7:af:1e:b4:3d:12:3c:0b:c2:7d:82:95:48:7b:ef:55:fa:ce:
         22:23:e8:03:54:72:47:ef:b2:55:04:bd:ba:20:d7:96:4f:9b:
         32:71:fd:c2:3e:92:68:25:41:da:12:9f:fa:78:63:5b:48:26:
         03:3a:a5:47:8a:04:d8:9a:f5:8b:3e:a3:fa:7a:0e:55:7d:30:
         b8:4b:26:3e:7d:e4:9e:bd:9a:1b:15:d5:ef:43:0e:af:77:fc:
         b1:b6:ca:2e
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKAzn3p/7mOkWlgf8CbzzvV10DbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNTAyMDQxODUwNDlaFw0yNjAyMDMxODU1NDlaMDMxMTAvBgNV
BAMTKEUxOTI4MzQ0QkFGQjQwRjBBQzNCRUQ3OThDQjRDRTM0NDdCRkNGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+45HDT34Df4tImvN0QLI5MMXq
D2s8vQfkYCquvFs1/YGyEbsooRkZKAmwpRgnWYF4tlOUPSs0eLvDS/EMBKOGdk7k
dhXYnll8Wj4qsidGR5W7ClDNOh2A8JVcWLiENXO703zXn+yEAo2pwfr4pRETC1vN
on5SwzP8OIdFgG/qyV1PaEt/JrkQLJS75F5ZiI6RWBA7TeN09aTbuh373aYJa94g
LYEGDLHpR5rq8GHuQAwRoX5TgobGx30CytCKoIIr+JBX8AudjJ8DxoTU4yByHy2x
POdYbVt2U5eHWes6Ce8XAaE0fhEylX+uK9+IjJWyuf1AaMLzp2uefSqQodeZAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU4ZKDRLr7QPCsO+15jLTONEe/z0EwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTY0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQANMA0GCSqGSIb3DQEBCwUAA4IBAQBcwkilrKqxwjAMTs+P+hvuhPCIIJz7ur1d
HwYKxqAFqmHe0UCXl8akHj5VnBTYuq/9VM84isOUFqr2RNd5l8U+wdjkvMP39iBv
6IfDqr7/5zXiKcwMgT9nAxR92aeATb80L99QEnLgnaGI+b0Z1aiccbaxIB8d5a8y
sLjBrAFp7FXYs61g6FK49oBXvrOw43XNK96M7KWkPlIKcpxf/P9IaU7Hrx60PRI8
C8J9gpVIe+9V+s4iI+gDVHJH77JVBL26INeWT5sycf3CPpJoJUHaEp/6eGNbSCYD
OqVHigTYmvWLPqP6eg5VfTC4SyY+feSevZobFdXvQw6vd/yxtsou
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:15 2025 by rpki-client