Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a3a2f33342d3334203d3e20323634373837.roa
File:                     323830333a643863303a3a2f33342d3334203d3e20323634373837.roa (raw, json)
Hash identifier:          Df/BKmi429E0N7/0nMF56GvQYsOk4YYUUNoMDGZEyaE=
Subject key identifier:   5A:16:D6:58:BE:DE:B6:7D:54:B1:1A:56:59:F5:C0:06:8D:02:7E:11
Certificate issuer:       /CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
Certificate serial:       32D98E19F64B7D56D06FE681FF9667CA669B6F0C
Authority key identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a3a2f33342d3334203d3e20323634373837.roa
Signing time:             Tue 25 Feb 2025 12:30:00 +0000
ROA not before:           Tue 25 Feb 2025 12:25:00 +0000
ROA not after:            Tue 24 Feb 2026 12:30:00 +0000
asID:                     264787
IP address blocks:        2803:d8c0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:8e:19:f6:4b:7d:56:d0:6f:e6:81:ff:96:67:ca:66:9b:6f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
        Validity
            Not Before: Feb 25 12:25:00 2025 GMT
            Not After : Feb 24 12:30:00 2026 GMT
        Subject: CN=5A16D658BEDEB67D54B11A5659F5C0068D027E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:de:31:38:42:77:af:a4:f3:14:b2:e8:f3:
                    b9:10:09:85:c7:22:c1:36:fa:48:24:15:f4:17:a5:
                    07:a3:17:c1:3f:82:a2:34:8f:49:cd:8a:f4:17:00:
                    09:49:f0:d1:76:dd:83:26:03:68:c1:be:5f:a4:de:
                    c2:37:fd:05:e9:32:1b:f8:d5:b8:09:33:67:3f:68:
                    54:ab:ff:04:3c:94:aa:e5:62:c4:4c:ac:88:9d:d7:
                    85:e6:14:7b:c7:e5:48:55:6a:dc:2e:0f:de:d7:4e:
                    c2:1d:f8:eb:f2:86:e4:97:76:10:50:b5:24:6d:b3:
                    d1:33:33:65:96:5d:e9:2d:0a:8a:4e:42:2d:f7:2e:
                    d2:c7:1e:39:f3:77:9a:4b:f1:16:27:c3:6e:96:06:
                    e2:d7:bd:a8:fe:01:69:2d:4c:b8:f5:7f:c3:ba:cd:
                    d5:3d:7b:fa:a4:0b:cd:0b:e0:d0:5a:ad:ce:c7:4b:
                    9a:21:d1:ce:0c:c1:9d:51:00:d1:ba:3d:2b:3c:01:
                    85:bf:1a:e7:16:63:6c:94:0f:bb:16:26:49:c2:44:
                    32:46:9a:cc:5f:2f:e0:bb:67:ce:ac:9b:62:99:cd:
                    d8:81:05:e7:5f:d3:8c:92:3d:f9:b6:6d:bd:7f:8f:
                    31:91:f0:db:fe:94:2b:b2:18:2a:07:61:00:b9:11:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:D6:58:BE:DE:B6:7D:54:B1:1A:56:59:F5:C0:06:8D:02:7E:11
            X509v3 Authority Key Identifier:
                keyid:2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a3a2f33342d3334203d3e20323634373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:74:fc:a8:bb:71:32:4f:71:e3:d0:d1:c5:d5:9b:37:76:25:
         61:e7:68:8e:d4:18:f4:14:a9:02:58:8c:da:47:92:cc:36:05:
         de:f1:65:65:54:fb:73:74:fb:83:5d:e4:4f:2b:84:51:13:5a:
         7a:9b:98:b4:4f:2a:87:c9:be:ae:3b:88:25:29:89:cf:34:3e:
         57:e4:69:40:2e:5b:89:dc:41:da:aa:d9:0c:fe:9b:e1:d4:fe:
         c8:54:b4:c9:e2:db:cc:ac:2a:73:90:f2:7e:c4:c2:7f:e6:fc:
         4f:69:ef:86:5d:7e:4f:6f:2b:c1:9b:d8:27:b5:03:df:eb:48:
         13:5a:d2:74:88:35:94:3e:cf:42:4c:c3:fe:2d:47:24:eb:3e:
         c8:a3:02:ec:aa:0a:16:25:06:85:8d:3a:c4:77:82:07:cc:91:
         c5:42:69:74:bf:0d:78:0c:50:4b:5a:45:64:58:51:6f:db:d8:
         78:54:1e:77:55:54:77:3f:30:be:7a:f2:d5:2d:60:39:03:35:
         d7:73:07:e8:d1:3f:4a:44:a4:90:4f:88:d9:34:a6:b1:7e:80:
         e4:3f:77:2a:0c:6b:7b:fa:21:53:e8:a8:91:09:45:bd:af:8d:
         f7:d5:6d:86:33:6c:b7:10:4e:e8:b4:e5:c7:1e:65:a4:a4:b6:
         70:66:ab:f9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMtmOGfZLfVbQb+aB/5ZnymabbwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU2NUNFNkJGMEE3QTZEMTFENDcxOEZBQTYzN0IwOEMz
QjU5MkY4ODAeFw0yNTAyMjUxMjI1MDBaFw0yNjAyMjQxMjMwMDBaMDMxMTAvBgNV
BAMTKDVBMTZENjU4QkVERUI2N0Q1NEIxMUE1NjU5RjVDMDA2OEQwMjdFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWi94xOEJ3r6TzFLLo87kQCYXH
IsE2+kgkFfQXpQejF8E/gqI0j0nNivQXAAlJ8NF23YMmA2jBvl+k3sI3/QXpMhv4
1bgJM2c/aFSr/wQ8lKrlYsRMrIid14XmFHvH5UhVatwuD97XTsId+OvyhuSXdhBQ
tSRts9EzM2WWXektCopOQi33LtLHHjnzd5pL8RYnw26WBuLXvaj+AWktTLj1f8O6
zdU9e/qkC80L4NBarc7HS5oh0c4MwZ1RANG6PSs8AYW/GucWY2yUD7sWJknCRDJG
msxfL+C7Z86sm2KZzdiBBedf04ySPfm2bb1/jzGR8Nv+lCuyGCoHYQC5EdMlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWhbWWL7etn1UsRpWWfXABo0CfhEwHwYDVR0j
BBgwFoAULmXOa/CnptEdRxj6pjewjDtZL4gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MTk3NERDQUQ1MzI3ODk0MUMwQzgzRjE5RkJDNkVGQTNE
QzA0MThENUNCRjUzQ0NEQTYzMDI0Mjk4QjNEMzgyLzAvMkU2NUNFNkJGMEE3QTZE
MTFENDcxOEZBQTYzN0IwOEMzQjU5MkY4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTY1Q0U2QkYwQTdBNkQxMUQ0
NzE4RkFBNjM3QjA4QzNCNTkyRjg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODE5NzREQ0FENTMyNzg5NDFDMEM4M0YxOUZCQzZFRkEzREMwNDE4RDVD
QkY1M0NDREE2MzAyNDI5OEIzRDM4Mi8wLzMyMzgzMDMzM2E2NDM4NjMzMDNhM2Ey
ZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigD2MAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA4dPyou3EyT3Hj0NHF1Zs3diVh52iO1Bj0FKkC
WIzaR5LMNgXe8WVlVPtzdPuDXeRPK4RRE1p6m5i0TyqHyb6uO4glKYnPND5X5GlA
LluJ3EHaqtkM/pvh1P7IVLTJ4tvMrCpzkPJ+xMJ/5vxPae+GXX5PbyvBm9gntQPf
60gTWtJ0iDWUPs9CTMP+LUck6z7IowLsqgoWJQaFjTrEd4IHzJHFQml0vw14DFBL
WkVkWFFv29h4VB53VVR3PzC+evLVLWA5AzXXcwfo0T9KRKSQT4jZNKaxfoDkP3cq
DGt7+iFT6KiRCUW9r4331W2GM2y3EE7otOXHHmWkpLZwZqv5
-----END CERTIFICATE-----