Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
File:                     323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa (raw, json)
Hash identifier:          D/TX5lUnp50KM+/itL3W/Y+V6TBa/axNBEHn7rsnNB0=
Subject key identifier:   2D:B9:76:B9:55:29:63:09:F1:42:42:77:33:A1:46:C7:E6:30:9F:34
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       390042A92B5EBCF87637F6CD1662CCB8C962FA13
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
Signing time:             Tue 04 Feb 2025 18:27:07 +0000
ROA not before:           Tue 04 Feb 2025 18:22:07 +0000
ROA not after:            Tue 03 Feb 2026 18:27:07 +0000
asID:                     52442
IP address blocks:        2800:110:1018::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:00:42:a9:2b:5e:bc:f8:76:37:f6:cd:16:62:cc:b8:c9:62:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:07 2025 GMT
            Not After : Feb  3 18:27:07 2026 GMT
        Subject: CN=2DB976B955296309F142427733A146C7E6309F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:8b:8d:3d:cb:93:dc:cc:6e:77:b8:73:3b:
                    51:86:b9:3a:55:ea:53:07:df:25:ba:c7:c7:0e:8f:
                    c2:64:a0:21:a3:d9:90:f5:69:21:01:03:53:bf:26:
                    b2:52:91:c2:8d:b8:3b:c5:98:e0:69:a7:c5:73:e4:
                    ba:55:99:58:58:c8:58:07:0c:c1:6d:74:90:42:45:
                    7c:a0:37:1a:08:2a:13:57:3f:05:89:0b:b9:81:56:
                    2e:56:57:05:0d:90:5a:7a:14:87:c0:6b:b6:6f:60:
                    c9:02:52:ac:a8:60:ac:fc:c6:8c:83:37:0d:e8:e3:
                    dd:fd:05:bf:42:37:28:b3:ee:7f:fe:23:11:ef:9a:
                    98:cd:c3:11:a2:9a:20:62:f5:60:5a:8e:b4:41:dc:
                    5f:7c:7e:77:cf:4f:39:38:73:26:7d:20:df:d8:4b:
                    d6:d3:50:0e:78:7b:3b:a2:9a:21:c8:84:82:05:3e:
                    00:7f:65:ef:e1:7e:0f:2c:fa:6d:56:c7:e5:61:cf:
                    2a:4f:e4:59:93:a7:d7:00:c2:28:93:20:3e:d2:7f:
                    78:39:4c:8b:3d:46:56:a5:ce:0c:b2:90:76:cf:a3:
                    25:88:50:84:9c:02:98:f0:a3:90:f5:5b:17:7a:30:
                    e3:53:1a:48:1d:f3:7b:9f:65:47:0b:95:39:93:2a:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:76:B9:55:29:63:09:F1:42:42:77:33:A1:46:C7:E6:30:9F:34
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:1018::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:8e:41:3d:2d:34:6c:68:5a:68:39:ea:71:54:e3:17:1f:
         ad:8e:4a:27:fe:d5:d5:7e:18:8f:c7:32:b6:46:a6:85:f7:ec:
         bf:91:14:48:5e:6f:d8:3b:46:74:3a:07:56:8f:c7:46:b0:68:
         e9:2a:61:1e:75:9b:5a:65:49:6c:c5:91:05:41:5a:5f:ac:9f:
         0d:da:ee:01:65:41:1f:68:ee:d0:c8:0d:d3:1d:f9:df:30:9c:
         5a:fd:c0:4e:0f:5a:7c:5f:20:80:e3:67:e2:f4:54:2c:c2:95:
         ad:2c:ef:9d:1f:41:29:d7:b2:1a:d0:a7:76:33:db:36:bc:12:
         4c:fa:3f:4a:4b:fe:13:29:e4:4c:0e:bf:80:32:aa:80:46:fd:
         d9:1f:57:bd:97:9c:da:02:f9:41:d1:74:d6:11:65:f8:9e:70:
         c8:96:23:19:33:be:eb:7a:c4:18:96:4f:7f:18:b7:87:03:91:
         40:7b:f6:45:53:cb:6e:2d:cd:65:2a:eb:ad:4b:65:99:ad:d3:
         0a:7b:cb:39:87:16:c3:85:9c:56:b7:36:ae:09:c1:a4:c6:54:
         fd:5d:f3:7b:b8:9a:eb:44:2b:bc:d3:f3:30:5b:fb:48:2b:f6:
         ee:f2:09:5f:6b:ba:a1:2f:a5:0a:01:ae:4c:4b:e5:67:7c:fd:
         aa:b0:02:80
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOQBCqStevPh2N/bNFmLMuMli+hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNTAyMDQxODIyMDdaFw0yNjAyMDMxODI3MDdaMDMxMTAvBgNV
BAMTKDJEQjk3NkI5NTUyOTYzMDlGMTQyNDI3NzMzQTE0NkM3RTYzMDlGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsYuNPcuT3Mxud7hzO1GGuTpV
6lMH3yW6x8cOj8JkoCGj2ZD1aSEBA1O/JrJSkcKNuDvFmOBpp8Vz5LpVmVhYyFgH
DMFtdJBCRXygNxoIKhNXPwWJC7mBVi5WVwUNkFp6FIfAa7ZvYMkCUqyoYKz8xoyD
Nw3o4939Bb9CNyiz7n/+IxHvmpjNwxGimiBi9WBajrRB3F98fnfPTzk4cyZ9IN/Y
S9bTUA54ezuimiHIhIIFPgB/Ze/hfg8s+m1Wx+VhzypP5FmTp9cAwiiTID7Sf3g5
TIs9RlalzgyykHbPoyWIUIScApjwo5D1Wxd6MONTGkgd83ufZUcLlTmTKrLHAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQULbl2uVUpYwnxQkJ3M6FGx+YwnzQwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMyMzgzMDMwM2EzMTMxMzAzYTMxMzAz
MTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzQzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAARAQGDANBgkqhkiG9w0BAQsFAAOCAQEAK5mOQT0tNGxoWmg56nFU4xcfrY5K
J/7V1X4Yj8cytkamhffsv5EUSF5v2DtGdDoHVo/HRrBo6SphHnWbWmVJbMWRBUFa
X6yfDdruAWVBH2ju0MgN0x353zCcWv3ATg9afF8ggONn4vRULMKVrSzvnR9BKdey
GtCndjPbNrwSTPo/Skv+EynkTA6/gDKqgEb92R9XvZec2gL5QdF01hFl+J5wyJYj
GTO+63rEGJZPfxi3hwORQHv2RVPLbi3NZSrrrUtlma3TCnvLOYcWw4WcVrc2rgnB
pMZU/V3ze7ia60QrvNPzMFv7SCv27vIJX2u6oS+lCgGuTEvlZ3z9qrACgA==
-----END CERTIFICATE-----