Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/885E88D2EB6478694E70D75561C614A8DD4CD4613858A56DACD36E8A7B169131/0/323830313a31653a363830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31653a363830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          EAK4Pn0vP0XH+v/efDVrre0C2HaxofwPyyUYGajXeh8=
Subject key identifier:   F0:59:02:89:45:F4:21:E2:E2:60:86:D6:0E:7D:D5:9B:93:AD:CE:AD
Certificate issuer:       /CN=1F45A53EC6E9AAFD15FDF566E28ADAF034272ADB
Certificate serial:       649920872CD6684B9BBEEECC34E8EAFE10C0733D
Authority key identifier: 1F:45:A5:3E:C6:E9:AA:FD:15:FD:F5:66:E2:8A:DA:F0:34:27:2A:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F45A53EC6E9AAFD15FDF566E28ADAF034272ADB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/885E88D2EB6478694E70D75561C614A8DD4CD4613858A56DACD36E8A7B169131/0/323830313a31653a363830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Fri 21 Mar 2025 17:45:00 +0000
ROA not before:           Fri 21 Mar 2025 17:40:00 +0000
ROA not after:            Fri 20 Mar 2026 17:45:00 +0000
asID:                     14080
IP address blocks:        2801:1e:6800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:20:87:2c:d6:68:4b:9b:be:ee:cc:34:e8:ea:fe:10:c0:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F45A53EC6E9AAFD15FDF566E28ADAF034272ADB
        Validity
            Not Before: Mar 21 17:40:00 2025 GMT
            Not After : Mar 20 17:45:00 2026 GMT
        Subject: CN=F059028945F421E2E26086D60E7DD59B93ADCEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:d7:33:57:8e:e2:0e:65:67:e5:93:63:db:
                    09:8d:a8:c9:74:d8:68:7b:de:f5:f4:26:ac:28:f3:
                    eb:d1:a5:dc:a9:07:a7:66:65:ed:ef:f4:51:7f:e6:
                    80:16:09:de:2b:79:1b:b2:80:b9:43:e7:78:2c:d7:
                    c4:34:0c:66:b2:bf:47:aa:81:ae:d8:54:33:22:95:
                    7e:5b:51:70:58:29:d6:a5:fa:6f:2d:a1:03:45:e4:
                    37:97:29:ce:bc:7c:f1:9a:0c:dd:1c:5d:07:ec:bd:
                    e5:a6:ed:1a:76:a5:e1:a2:aa:7c:10:98:d6:09:9d:
                    1e:c3:29:8e:7f:7b:32:ff:91:d8:17:24:f8:ba:42:
                    8b:db:d0:fe:90:4b:44:af:16:02:8d:58:90:57:15:
                    0e:04:21:87:94:98:d4:7e:64:47:9f:d2:ef:84:bb:
                    45:03:31:ad:2a:9f:45:b7:c9:87:2b:0f:de:66:76:
                    2e:43:1a:b5:d4:05:34:a7:ab:9d:45:22:07:e5:d7:
                    f4:8d:40:ec:74:86:c2:7e:3b:24:67:bb:33:9d:c7:
                    20:85:1d:5e:f6:e0:11:45:0b:cd:89:bf:35:a8:27:
                    78:7e:b1:59:ce:0d:b1:b0:84:38:06:3b:29:5a:ae:
                    02:11:69:36:28:6a:4d:72:4e:4a:df:8e:57:dc:65:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:02:89:45:F4:21:E2:E2:60:86:D6:0E:7D:D5:9B:93:AD:CE:AD
            X509v3 Authority Key Identifier:
                keyid:1F:45:A5:3E:C6:E9:AA:FD:15:FD:F5:66:E2:8A:DA:F0:34:27:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/885E88D2EB6478694E70D75561C614A8DD4CD4613858A56DACD36E8A7B169131/0/1F45A53EC6E9AAFD15FDF566E28ADAF034272ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F45A53EC6E9AAFD15FDF566E28ADAF034272ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/885E88D2EB6478694E70D75561C614A8DD4CD4613858A56DACD36E8A7B169131/0/323830313a31653a363830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:8d:94:f9:79:78:2d:93:df:16:e4:1a:e5:f3:12:19:c9:
         f9:36:e2:51:25:8e:40:c6:a3:a6:d9:8e:3a:77:46:62:46:5a:
         78:d9:1d:3a:a7:cd:eb:90:c9:7e:0a:46:5f:3c:e1:a8:f8:91:
         95:48:56:2c:91:68:b5:78:a0:ec:5c:1e:5a:75:d8:88:1d:3b:
         e0:cc:3e:9b:fd:e1:64:ff:5b:45:23:35:46:10:a3:55:34:62:
         d8:b0:b8:78:34:3f:7e:5e:81:be:34:78:38:52:9b:5e:b1:5b:
         b7:74:fd:cb:65:8d:03:9f:3e:3c:02:ce:08:3f:b6:d5:47:78:
         9a:59:8e:f5:db:f3:88:3c:4e:1d:7b:47:92:1a:c4:4d:26:58:
         e9:4f:ed:12:6b:fe:08:52:31:03:73:99:ba:a8:fb:ca:5f:e5:
         48:9f:c5:e9:87:7e:c5:3d:3a:5c:90:f8:18:58:27:6e:9f:bf:
         d8:8f:08:80:2f:e6:77:1d:da:38:e8:a1:63:1d:38:81:c6:c7:
         a4:c8:15:2e:5d:db:0b:16:5d:20:9a:b4:fa:19:e9:90:e1:49:
         44:d2:f5:65:a5:52:44:f0:ed:3e:3b:2f:07:af:6b:d3:d3:c6:
         4e:c1:5f:33:a6:9c:0b:5f:aa:b3:c9:c2:9f:84:5c:ee:db:9a:
         bf:94:69:a2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZJkghyzWaEubvu7MNOjq/hDAcz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0NUE1M0VDNkU5QUFGRDE1RkRGNTY2RTI4QURBRjAz
NDI3MkFEQjAeFw0yNTAzMjExNzQwMDBaFw0yNjAzMjAxNzQ1MDBaMDMxMTAvBgNV
BAMTKEYwNTkwMjg5NDVGNDIxRTJFMjYwODZENjBFN0RENTlCOTNBRENFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77NczV47iDmVn5ZNj2wmNqMl0
2Gh73vX0Jqwo8+vRpdypB6dmZe3v9FF/5oAWCd4reRuygLlD53gs18Q0DGayv0eq
ga7YVDMilX5bUXBYKdal+m8toQNF5DeXKc68fPGaDN0cXQfsveWm7Rp2peGiqnwQ
mNYJnR7DKY5/ezL/kdgXJPi6Qovb0P6QS0SvFgKNWJBXFQ4EIYeUmNR+ZEef0u+E
u0UDMa0qn0W3yYcrD95mdi5DGrXUBTSnq51FIgfl1/SNQOx0hsJ+OyRnuzOdxyCF
HV724BFFC82JvzWoJ3h+sVnODbGwhDgGOylargIRaTYoak1yTkrfjlfcZTMZAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU8FkCiUX0IeLiYIbWDn3Vm5Otzq0wHwYDVR0j
BBgwFoAUH0WlPsbpqv0V/fVm4ora8DQnKtswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODVFODhEMkVCNjQ3ODY5NEU3MEQ3NTU2MUM2MTRBOERE
NENENDYxMzg1OEE1NkRBQ0QzNkU4QTdCMTY5MTMxLzAvMUY0NUE1M0VDNkU5QUFG
RDE1RkRGNTY2RTI4QURBRjAzNDI3MkFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjQ1QTUzRUM2RTlBQUZEMTVG
REY1NjZFMjhBREFGMDM0MjcyQURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg1RTg4RDJFQjY0Nzg2OTRFNzBENzU1NjFDNjE0QThERDRDRDQ2MTM4
NThBNTZEQUNEMzZFOEE3QjE2OTEzMS8wLzMyMzgzMDMxM2EzMTY1M2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAeaAAwDQYJKoZIhvcNAQELBQADggEBAF1zjZT5eXgtk98W5Brl8xIZyfk24lEl
jkDGo6bZjjp3RmJGWnjZHTqnzeuQyX4KRl884aj4kZVIViyRaLV4oOxcHlp12Igd
O+DMPpv94WT/W0UjNUYQo1U0YtiwuHg0P35egb40eDhSm16xW7d0/ctljQOfPjwC
zgg/ttVHeJpZjvXb84g8Th17R5IaxE0mWOlP7RJr/ghSMQNzmbqo+8pf5UifxemH
fsU9OlyQ+BhYJ26fv9iPCIAv5ncd2jjooWMdOIHGx6TIFS5d2wsWXSCatPoZ6ZDh
SUTS9WWlUkTw7T47Lweva9PTxk7BXzOmnAtfqrPJwp+EXO7bmr+UaaI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:05 2025 by rpki-client