Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91C2F41C4B7B08AFAE85253F842F0E8DD8EBA5720518D94B7143E2D492C3F324/0/323830313a31303a643830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31303a643830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          s95K6OiWT6xJBSgYrqvdBI283rE/5UY9zej6YBTLKkM=
Subject key identifier:   B2:7C:5B:51:10:BC:01:5C:0E:0D:B0:CA:E3:F3:8B:18:F1:AA:96:EA
Certificate issuer:       /CN=930B2A67EDCBA483499428B84724D441FB28AE39
Certificate serial:       658E1C4CDC7B909D248A67DAFB561928EB59F4EF
Authority key identifier: 93:0B:2A:67:ED:CB:A4:83:49:94:28:B8:47:24:D4:41:FB:28:AE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/930B2A67EDCBA483499428B84724D441FB28AE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91C2F41C4B7B08AFAE85253F842F0E8DD8EBA5720518D94B7143E2D492C3F324/0/323830313a31303a643830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:30:45 +0000
ROA not before:           Tue 04 Feb 2025 18:25:45 +0000
ROA not after:            Tue 03 Feb 2026 18:30:45 +0000
asID:                     14080
IP address blocks:        2801:10:d800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8e:1c:4c:dc:7b:90:9d:24:8a:67:da:fb:56:19:28:eb:59:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930B2A67EDCBA483499428B84724D441FB28AE39
        Validity
            Not Before: Feb  4 18:25:45 2025 GMT
            Not After : Feb  3 18:30:45 2026 GMT
        Subject: CN=B27C5B5110BC015C0E0DB0CAE3F38B18F1AA96EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:d5:ad:9d:0a:26:16:3d:a6:da:40:de:f8:
                    c5:e7:a1:46:04:7e:76:48:a0:b1:08:6c:e1:42:58:
                    25:5b:df:3e:33:76:47:5f:aa:fb:9c:04:18:f0:4e:
                    c5:e6:e2:db:e4:71:5b:ef:d1:c3:11:6f:8e:eb:80:
                    1f:33:37:fb:93:3c:4b:30:19:e0:d3:e4:70:d4:4d:
                    63:d9:d1:68:9f:00:95:b9:66:37:2a:bf:7c:15:d5:
                    57:f0:f4:9e:40:67:bd:fc:29:f1:04:3e:8d:d3:70:
                    c7:bd:78:ad:04:36:90:d5:84:10:6e:8c:c8:87:49:
                    f3:2e:11:83:5f:5f:59:75:55:df:94:f3:4c:c4:f3:
                    ed:eb:b2:b4:42:bb:f0:07:d9:17:ae:0f:5e:e1:ac:
                    39:50:3a:bc:2e:11:23:84:df:7c:f0:90:4e:5f:79:
                    19:73:0e:48:f0:3b:4d:bf:de:b8:9a:98:dd:c6:c2:
                    70:6f:fa:ba:c1:ed:f8:8b:bb:1a:82:83:04:7d:bf:
                    77:4a:b0:fe:53:dc:d7:99:90:95:74:cc:7a:d0:85:
                    8f:42:ad:95:53:bb:31:61:25:84:71:d3:60:59:b2:
                    c6:f9:57:82:01:42:33:ca:5d:a2:b4:a2:15:1c:4c:
                    02:e4:66:9f:1c:ed:aa:21:6e:29:e8:96:76:00:63:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:5B:51:10:BC:01:5C:0E:0D:B0:CA:E3:F3:8B:18:F1:AA:96:EA
            X509v3 Authority Key Identifier:
                keyid:93:0B:2A:67:ED:CB:A4:83:49:94:28:B8:47:24:D4:41:FB:28:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91C2F41C4B7B08AFAE85253F842F0E8DD8EBA5720518D94B7143E2D492C3F324/0/930B2A67EDCBA483499428B84724D441FB28AE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/930B2A67EDCBA483499428B84724D441FB28AE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91C2F41C4B7B08AFAE85253F842F0E8DD8EBA5720518D94B7143E2D492C3F324/0/323830313a31303a643830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d9:9b:7e:c4:99:99:54:e9:5d:51:b1:48:d6:88:42:d5:21:
         ae:17:f0:2e:16:ad:c0:1e:c0:e6:62:e9:dd:64:50:a8:a8:51:
         59:88:22:7b:43:94:4d:12:a3:3e:11:06:86:6b:bd:c9:f9:66:
         09:29:91:0b:a7:43:bc:c5:59:d7:31:cc:48:40:f2:8f:4a:d8:
         97:19:90:bb:e8:30:3d:51:96:64:ba:59:e5:3f:4e:05:f9:53:
         51:e9:f9:39:72:21:be:51:a9:51:c2:07:c7:bb:23:73:f2:05:
         f6:66:19:5a:82:e0:33:a2:d3:93:e9:73:85:db:1f:26:2d:d7:
         1a:82:3c:fa:f4:4a:d4:12:fc:0c:62:ee:cf:df:00:ec:7b:5f:
         04:e4:cc:59:fc:38:4f:54:15:a1:94:f8:0b:cd:13:df:93:c4:
         bb:59:3b:6b:44:80:91:f2:9e:d2:e5:c6:9f:b6:10:52:26:8e:
         d5:bb:37:d0:16:48:05:de:ac:49:28:80:27:cb:0e:ab:7f:f2:
         c0:11:83:c2:64:97:da:6f:f0:8e:e0:9e:50:32:bf:46:86:47:
         ad:cf:48:5b:f0:20:3d:e8:e1:ff:71:24:8c:50:53:66:7d:75:
         a1:fe:78:1b:49:cd:e9:a9:e4:f1:a7:f2:63:f0:f1:11:e6:af:
         e8:b7:aa:eb
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZY4cTNx7kJ0kimfa+1YZKOtZ9O8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwQjJBNjdFRENCQTQ4MzQ5OTQyOEI4NDcyNEQ0NDFG
QjI4QUUzOTAeFw0yNTAyMDQxODI1NDVaFw0yNjAyMDMxODMwNDVaMDMxMTAvBgNV
BAMTKEIyN0M1QjUxMTBCQzAxNUMwRTBEQjBDQUUzRjM4QjE4RjFBQTk2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok9WtnQomFj2m2kDe+MXnoUYE
fnZIoLEIbOFCWCVb3z4zdkdfqvucBBjwTsXm4tvkcVvv0cMRb47rgB8zN/uTPEsw
GeDT5HDUTWPZ0WifAJW5Zjcqv3wV1Vfw9J5AZ738KfEEPo3TcMe9eK0ENpDVhBBu
jMiHSfMuEYNfX1l1Vd+U80zE8+3rsrRCu/AH2ReuD17hrDlQOrwuESOE33zwkE5f
eRlzDkjwO02/3riamN3GwnBv+rrB7fiLuxqCgwR9v3dKsP5T3NeZkJV0zHrQhY9C
rZVTuzFhJYRx02BZssb5V4IBQjPKXaK0ohUcTALkZp8c7aohbinolnYAYxr/AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUsnxbURC8AVwODbDK4/OLGPGqluowHwYDVR0j
BBgwFoAUkwsqZ+3LpINJlCi4RyTUQfsorjkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MUMyRjQxQzRCN0IwOEFGQUU4NTI1M0Y4NDJGMEU4REQ4
RUJBNTcyMDUxOEQ5NEI3MTQzRTJENDkyQzNGMzI0LzAvOTMwQjJBNjdFRENCQTQ4
MzQ5OTQyOEI4NDcyNEQ0NDFGQjI4QUUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MzBCMkE2N0VEQ0JBNDgzNDk5
NDI4Qjg0NzI0RDQ0MUZCMjhBRTM5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTFDMkY0MUM0QjdCMDhBRkFFODUyNTNGODQyRjBFOEREOEVCQTU3MjA1
MThEOTRCNzE0M0UyRDQ5MkMzRjMyNC8wLzMyMzgzMDMxM2EzMTMwM2E2NDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAQ2AAwDQYJKoZIhvcNAQELBQADggEBACjZm37EmZlU6V1RsUjWiELVIa4X8C4W
rcAewOZi6d1kUKioUVmIIntDlE0Soz4RBoZrvcn5ZgkpkQunQ7zFWdcxzEhA8o9K
2JcZkLvoMD1RlmS6WeU/TgX5U1Hp+TlyIb5RqVHCB8e7I3PyBfZmGVqC4DOi05Pp
c4XbHyYt1xqCPPr0StQS/Axi7s/fAOx7XwTkzFn8OE9UFaGU+AvNE9+TxLtZO2tE
gJHyntLlxp+2EFImjtW7N9AWSAXerEkogCfLDqt/8sARg8Jkl9pv8I7gnlAyv0aG
R63PSFvwID3o4f9xJIxQU2Z9daH+eBtJzemp5PGn8mPw8RHmr+i3qus=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:34 2025 by rpki-client