Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a643561303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          902o53uSz6SM1zIv7xd0/KR7sm+wAq+W3wSdLGNfOMs=
Subject key identifier:   93:0C:7D:D3:E5:EB:17:9E:BE:20:19:C5:27:B5:0A:1F:57:2A:BC:DC
Certificate issuer:       /CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
Certificate serial:       36200A6EB52DD0E67B7F013BCFCAADBDD4B6EFC4
Authority key identifier: A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:16:44 +0000
ROA not before:           Tue 04 Feb 2025 18:11:44 +0000
ROA not after:            Tue 03 Feb 2026 18:16:44 +0000
asID:                     61466
IP address blocks:        2803:d5a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:20:0a:6e:b5:2d:d0:e6:7b:7f:01:3b:cf:ca:ad:bd:d4:b6:ef:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
        Validity
            Not Before: Feb  4 18:11:44 2025 GMT
            Not After : Feb  3 18:16:44 2026 GMT
        Subject: CN=930C7DD3E5EB179EBE2019C527B50A1F572ABCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:55:84:b2:e1:07:f4:d8:09:e4:6e:22:05:
                    06:19:5d:f4:7f:82:5f:04:64:c8:2e:71:8a:a2:3c:
                    54:3f:03:79:ef:3b:23:a7:cc:e9:ff:f6:a2:b5:ec:
                    c1:4a:1e:54:0a:01:5a:67:75:90:98:36:d6:e7:81:
                    c5:81:a2:2d:f2:fc:21:36:e3:0f:34:30:dd:ce:9a:
                    c8:0c:82:0a:41:32:b7:a4:cc:66:d5:67:37:b0:f7:
                    f9:4e:b7:1f:2f:3c:ad:dc:23:7a:a7:a5:6e:bc:c0:
                    60:ab:c7:4d:f1:4e:1c:d7:c0:50:f7:ce:80:5b:b9:
                    cd:84:06:10:eb:ed:cb:93:2f:f8:2c:2d:61:fb:59:
                    f8:53:35:5e:fb:b0:54:ab:db:0e:d9:a5:d2:0b:68:
                    fa:30:05:4d:95:c5:c5:bb:13:62:85:eb:7b:f2:27:
                    5c:14:6d:50:a1:19:3a:a8:88:74:11:ce:9f:28:74:
                    4a:10:65:f1:d1:5f:f0:b6:93:fc:5d:2d:5f:0f:e2:
                    2a:4b:c8:ee:ce:8c:a9:a5:f4:6c:b6:16:0e:63:7b:
                    df:6d:e5:37:04:0e:ee:cf:2f:bc:cc:16:98:c8:2c:
                    e7:29:c1:35:5c:1d:80:a5:ec:57:8d:6e:83:e4:5e:
                    30:5e:f3:0d:d2:c2:58:c5:bf:5d:66:45:d8:52:38:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:7D:D3:E5:EB:17:9E:BE:20:19:C5:27:B5:0A:1F:57:2A:BC:DC
            X509v3 Authority Key Identifier:
                keyid:A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:21:e8:47:48:1e:0d:85:57:50:80:47:c3:ab:40:99:7a:
         01:dd:af:46:5a:48:1c:b1:36:cb:b3:55:65:cc:45:d0:83:24:
         de:5d:dd:85:79:ef:f3:8c:d6:dc:f2:4e:cd:18:d1:a9:7d:2d:
         56:a7:5b:4c:9b:b5:5d:0a:95:7e:26:9c:4e:f7:ca:92:97:9c:
         67:5e:d4:28:3c:40:0e:1d:95:a3:87:83:c7:60:2f:9c:91:6a:
         a9:3e:6d:0f:c5:60:5f:b0:01:c0:64:eb:c5:4a:e5:a3:94:4a:
         15:45:c2:1c:ca:07:ad:88:3b:e0:4c:fb:7d:c0:cd:7f:93:bf:
         15:57:9e:df:70:35:7d:ab:5c:fd:c4:cb:b6:22:db:51:f3:4f:
         22:d4:c2:19:e9:52:22:34:76:0a:d4:ee:f2:9c:5b:6d:b8:1e:
         3a:55:13:b3:3b:a0:30:91:91:fe:03:aa:73:3f:5b:3a:6f:a2:
         18:1d:bd:1d:2b:5c:96:c5:e0:71:72:88:34:b5:2d:d6:f7:31:
         ac:d4:f1:45:03:5c:9d:6a:fa:50:8a:6d:11:88:b6:95:b0:8c:
         18:b1:e3:b7:ad:0d:31:f5:b2:43:fc:07:1b:1f:01:6c:ed:ae:
         bb:9a:ea:e8:88:6d:0a:07:81:05:e4:dd:d5:25:b3:c9:25:8d:
         e3:cd:bb:3b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNiAKbrUt0OZ7fwE7z8qtvdS278QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThENUU0Mzg0OEE4Q0YzODg5MzlBNTMzOTVDMDNFQTdC
QjEwQjJFQzAeFw0yNTAyMDQxODExNDRaFw0yNjAyMDMxODE2NDRaMDMxMTAvBgNV
BAMTKDkzMEM3REQzRTVFQjE3OUVCRTIwMTlDNTI3QjUwQTFGNTcyQUJDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UFWEsuEH9NgJ5G4iBQYZXfR/
gl8EZMgucYqiPFQ/A3nvOyOnzOn/9qK17MFKHlQKAVpndZCYNtbngcWBoi3y/CE2
4w80MN3OmsgMggpBMrekzGbVZzew9/lOtx8vPK3cI3qnpW68wGCrx03xThzXwFD3
zoBbuc2EBhDr7cuTL/gsLWH7WfhTNV77sFSr2w7ZpdILaPowBU2VxcW7E2KF63vy
J1wUbVChGTqoiHQRzp8odEoQZfHRX/C2k/xdLV8P4ipLyO7OjKml9Gy2Fg5je99t
5TcEDu7PL7zMFpjILOcpwTVcHYCl7FeNboPkXjBe8w3SwljFv11mRdhSODIRAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUkwx90+XrF56+IBnFJ7UKH1cqvNwwHwYDVR0j
BBgwFoAUqNXkOEiozziJOaUzlcA+p7sQsuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDVGNjZGMDhBN0QxQUMxNDFCMkQ2MkVENjVGQUVDOUY3
Qzk1N0REMDBCODQ5MzdCNTE3NUI2MzhFRTUyRjA0LzAvQThENUU0Mzg0OEE4Q0Yz
ODg5MzlBNTMzOTVDMDNFQTdCQjEwQjJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEQ1RTQzODQ4QThDRjM4ODkz
OUE1MzM5NUMwM0VBN0JCMTBCMkVDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Q1RjY2RjA4QTdEMUFDMTQxQjJENjJFRDY1RkFFQzlGN0M5NTdERDAw
Qjg0OTM3QjUxNzVCNjM4RUU1MkYwNC8wLzMyMzgzMDMzM2E2NDM1NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzEzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9WgMA0G
CSqGSIb3DQEBCwUAA4IBAQAdcSHoR0geDYVXUIBHw6tAmXoB3a9GWkgcsTbLs1Vl
zEXQgyTeXd2Fee/zjNbc8k7NGNGpfS1Wp1tMm7VdCpV+JpxO98qSl5xnXtQoPEAO
HZWjh4PHYC+ckWqpPm0PxWBfsAHAZOvFSuWjlEoVRcIcygetiDvgTPt9wM1/k78V
V57fcDV9q1z9xMu2IttR808i1MIZ6VIiNHYK1O7ynFttuB46VROzO6AwkZH+A6pz
P1s6b6IYHb0dK1yWxeBxcog0tS3W9zGs1PFFA1ydavpQim0RiLaVsIwYseO3rQ0x
9bJD/AcbHwFs7a67muroiG0KB4EF5N3VJbPJJY3jzbs7
-----END CERTIFICATE-----
Generated at Thu Feb 13 20:25:20 2025 by rpki-client