Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
File:                     323830363a3230323a3a2f33322d3438203d3e203238343538.roa (raw, json)
Hash identifier:          xZk/UcEv5j7O0+i+vrk+DLlqZfyyf9R9mPF2q6zMr0E=
Subject key identifier:   C6:BD:E4:FB:62:0E:99:F3:04:EB:4F:3D:4E:C4:D6:50:2C:21:90:EF
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       0B7F8CAD9E3BB7074B5AC31A781D28A7C44E692E
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
Signing time:             Tue 04 Feb 2025 19:58:06 +0000
ROA not before:           Tue 04 Feb 2025 19:53:06 +0000
ROA not after:            Tue 03 Feb 2026 19:58:06 +0000
asID:                     28458
IP address blocks:        2806:202::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7f:8c:ad:9e:3b:b7:07:4b:5a:c3:1a:78:1d:28:a7:c4:4e:69:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Feb  4 19:53:06 2025 GMT
            Not After : Feb  3 19:58:06 2026 GMT
        Subject: CN=C6BDE4FB620E99F304EB4F3D4EC4D6502C2190EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:92:7d:d8:4a:99:29:b7:52:16:c1:05:84:
                    e9:9e:42:b6:76:73:00:ff:88:82:e0:7c:4c:5b:13:
                    80:d6:a6:50:c2:e8:60:54:b0:24:6f:01:52:8d:57:
                    d6:31:cb:67:16:a8:df:ff:2c:46:a0:f1:2c:96:49:
                    55:57:56:36:2f:07:16:c1:c9:4a:92:22:cb:39:d1:
                    49:42:1a:35:d5:8a:58:50:05:18:11:28:95:38:36:
                    75:49:02:04:44:fc:df:86:5d:2c:da:42:79:f3:e5:
                    9b:0f:25:77:63:48:45:23:96:21:a6:44:64:25:8c:
                    1e:d2:3a:7a:aa:d7:04:25:f5:c3:64:bd:e7:75:2c:
                    63:5a:14:57:65:7b:31:25:a5:ad:c2:7e:b4:1c:b7:
                    09:9a:d8:7a:0b:33:48:8c:7e:c8:45:ab:2d:0a:17:
                    b8:7f:4f:b8:bc:6f:97:8c:14:c1:53:25:05:46:3e:
                    5d:7e:f7:14:5a:e1:b9:a6:c9:bb:9b:a3:1c:02:9c:
                    df:6c:01:2b:e1:b6:a7:e6:90:3f:d6:af:83:33:29:
                    eb:02:09:45:d1:b1:96:7e:35:f1:6a:1b:53:67:fc:
                    c8:28:dc:d4:48:ac:77:8b:c0:b3:3c:3c:c5:c7:9e:
                    1f:69:22:b4:d7:83:cd:0e:6b:26:d5:07:5c:f1:fa:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:E4:FB:62:0E:99:F3:04:EB:4F:3D:4E:C4:D6:50:2C:21:90:EF
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:40:bd:c1:4b:7e:b7:aa:d1:1e:0e:6a:16:3b:f0:7b:63:
         e6:7f:f8:cf:bd:e6:fb:78:46:09:0c:5d:58:e4:19:06:ff:13:
         3a:34:c1:59:8d:69:1f:80:bf:d3:d4:5d:77:90:29:d8:18:1a:
         80:64:60:76:15:4f:c6:be:be:37:16:31:b0:32:bc:9f:8d:71:
         b3:83:84:37:ed:86:4c:72:6a:d5:7f:a0:a8:64:19:ac:0b:06:
         ad:28:42:30:0f:5b:75:4f:dc:71:7e:ec:d4:6c:93:a6:c4:4f:
         97:56:6a:c3:75:e5:08:df:67:ea:b4:20:a6:d3:5c:0b:7b:6c:
         4f:26:3f:bf:b1:f7:fb:76:a1:dd:4a:43:03:c0:d8:41:ec:48:
         61:ba:aa:9b:af:52:1d:36:69:6c:4f:b5:9a:83:21:ac:74:20:
         b1:08:1f:33:9b:39:c9:e2:ae:bf:89:83:46:ef:1e:92:6c:a0:
         33:59:85:aa:74:ca:ad:a0:ab:e0:68:da:47:07:4c:da:ef:6d:
         41:27:28:ff:6a:59:46:0d:85:7c:24:ff:80:14:b7:24:e3:fc:
         4a:5c:6a:32:43:dd:99:2f:d7:47:1c:1a:2f:b0:e5:a0:c1:02:
         6f:85:ed:5e:1e:38:47:b3:50:0b:3a:4d:a2:13:2b:47:2a:bc:
         81:41:ab:37
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUC3+MrZ47twdLWsMaeB0op8ROaS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJGMjNFNEFGQUFERTM3NDI1QjYxOTgyNkM4RTAwRTA3
RUUyNkJFRjAeFw0yNTAyMDQxOTUzMDZaFw0yNjAyMDMxOTU4MDZaMDMxMTAvBgNV
BAMTKEM2QkRFNEZCNjIwRTk5RjMwNEVCNEYzRDRFQzRENjUwMkMyMTkwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVpJ92EqZKbdSFsEFhOmeQrZ2
cwD/iILgfExbE4DWplDC6GBUsCRvAVKNV9Yxy2cWqN//LEag8SyWSVVXVjYvBxbB
yUqSIss50UlCGjXVilhQBRgRKJU4NnVJAgRE/N+GXSzaQnnz5ZsPJXdjSEUjliGm
RGQljB7SOnqq1wQl9cNkved1LGNaFFdlezElpa3CfrQctwma2HoLM0iMfshFqy0K
F7h/T7i8b5eMFMFTJQVGPl1+9xRa4bmmybuboxwCnN9sASvhtqfmkD/Wr4MzKesC
CUXRsZZ+NfFqG1Nn/Mgo3NRIrHeLwLM8PMXHnh9pIrTXg80OaybVB1zx+rsjAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUxr3k+2IOmfME6089TsTWUCwhkO8wHwYDVR0j
BBgwFoAUq/I+Svqt43QlthmCbI4A4H7ia+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QjUzQzc5NTBCQkU2NTZFRjdGMkVDODY1QUEwNENGOTFE
QzZBODNBOERBQjFBRjJEQUY0NTdGQjFGMERCNTYyLzAvQUJGMjNFNEFGQUFERTM3
NDI1QjYxOTgyNkM4RTAwRTA3RUUyNkJFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQkYyM0U0QUZBQURFMzc0MjVC
NjE5ODI2QzhFMDBFMDdFRTI2QkVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUI1M0M3OTUwQkJFNjU2RUY3RjJFQzg2NUFBMDRDRjkxREM2QTgzQThE
QUIxQUYyREFGNDU3RkIxRjBEQjU2Mi8wLzMyMzgzMDM2M2EzMjMwMzIzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCAjANBgkq
hkiG9w0BAQsFAAOCAQEAMztAvcFLfreq0R4OahY78Htj5n/4z73m+3hGCQxdWOQZ
Bv8TOjTBWY1pH4C/09Rdd5Ap2BgagGRgdhVPxr6+NxYxsDK8n41xs4OEN+2GTHJq
1X+gqGQZrAsGrShCMA9bdU/ccX7s1GyTpsRPl1Zqw3XlCN9n6rQgptNcC3tsTyY/
v7H3+3ah3UpDA8DYQexIYbqqm69SHTZpbE+1moMhrHQgsQgfM5s5yeKuv4mDRu8e
kmygM1mFqnTKraCr4GjaRwdM2u9tQSco/2pZRg2FfCT/gBS3JOP8SlxqMkPdmS/X
RxwaL7DloMECb4XtXh44R7NQCzpNohMrRyq8gUGrNw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:23 2025 by rpki-client