Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
File:                     323830333a366432303a3a2f33322d3438203d3e20323636373032.roa (raw, json)
Hash identifier:          PPFB7tOFEgU9btog2Jc5vmlsvD4U81AT4UotIZXdG2Y=
Subject key identifier:   27:A9:6F:B3:F7:96:EE:AE:2F:4E:94:2A:30:3A:23:15:7C:55:35:BA
Certificate issuer:       /CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
Certificate serial:       3F53262FD90306D2F6858CE06633A46C32B54ED2
Authority key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
Signing time:             Tue 04 Feb 2025 20:01:20 +0000
ROA not before:           Tue 04 Feb 2025 19:56:20 +0000
ROA not after:            Tue 03 Feb 2026 20:01:20 +0000
asID:                     266702
IP address blocks:        2803:6d20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:53:26:2f:d9:03:06:d2:f6:85:8c:e0:66:33:a4:6c:32:b5:4e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
        Validity
            Not Before: Feb  4 19:56:20 2025 GMT
            Not After : Feb  3 20:01:20 2026 GMT
        Subject: CN=27A96FB3F796EEAE2F4E942A303A23157C5535BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:5a:d1:7b:c7:c8:94:49:b6:22:fa:4f:aa:
                    b2:d4:17:be:5a:05:0c:da:b8:3a:64:aa:16:da:4e:
                    fc:7a:ba:01:e2:b4:e8:81:a0:66:9f:95:89:0a:04:
                    88:ad:39:7f:fe:99:ab:28:37:36:31:f6:31:11:73:
                    0b:36:10:69:c8:44:78:e6:33:1a:0c:bb:69:18:95:
                    86:f7:d4:10:a0:fc:63:9f:88:f4:37:ac:17:56:b0:
                    28:ae:a5:45:8e:38:7d:2a:d1:f8:bc:56:e1:4e:8f:
                    6a:c9:b2:0f:a9:cb:c8:3b:6c:a3:95:c7:91:b7:57:
                    7d:4c:10:0b:ff:6e:17:c6:31:59:ff:89:e2:dc:9f:
                    f6:e9:f2:79:55:77:4d:ea:9b:15:7f:24:b6:3c:1f:
                    76:50:45:39:55:9f:e9:11:30:01:5b:75:da:89:00:
                    b7:ea:12:03:e9:56:f9:d8:01:e3:40:e9:2c:2d:49:
                    bd:6d:c6:1c:fe:65:5a:cb:ad:79:65:a3:18:e5:fd:
                    94:f8:e6:dc:06:11:34:3b:3b:38:24:41:6b:b7:cf:
                    b7:6b:03:b9:ac:c1:9a:21:95:a1:c6:da:dc:5c:54:
                    1a:b0:3a:64:64:80:16:a7:3c:d3:bf:df:1b:d1:c7:
                    4c:92:c9:94:e6:ae:8c:4c:d5:cb:d1:3d:3f:0a:92:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:6F:B3:F7:96:EE:AE:2F:4E:94:2A:30:3A:23:15:7C:55:35:BA
            X509v3 Authority Key Identifier:
                keyid:27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:0f:a4:fb:09:d1:c7:fd:a0:cd:ee:f5:c4:f1:36:4c:c3:
         24:20:a9:6f:7f:5e:1f:0d:3f:d6:54:2c:5e:06:12:03:ab:02:
         93:11:fd:7e:1f:4f:0d:1c:36:22:fd:30:c3:af:43:90:c7:6e:
         7d:66:46:ac:29:b6:e7:70:1e:f7:5a:00:95:bd:d2:69:01:30:
         65:98:1d:9e:a1:db:56:d8:bb:54:86:1f:8d:35:18:37:03:68:
         1d:2e:ba:16:b6:b8:06:58:ee:87:70:a0:78:c2:25:47:8d:aa:
         ee:f5:53:aa:7b:bb:ee:0d:53:e5:68:53:d4:0a:c6:61:51:b4:
         17:35:79:8c:1f:85:f5:60:83:de:ad:88:4a:0b:0b:36:5a:ca:
         46:3e:f3:2e:23:21:4a:b2:6f:40:32:7d:ee:97:ad:d8:bc:84:
         e3:1f:da:ac:f2:d2:0b:af:e0:99:0e:05:88:ab:3c:d5:43:53:
         e4:63:b3:6b:d8:14:b0:62:95:4a:f0:7e:1f:5b:02:9b:54:90:
         65:98:e8:0e:a0:8c:7b:1c:98:4e:64:17:96:eb:02:b9:7c:4f:
         da:60:5e:5c:fa:ae:ef:f8:4a:57:e5:4b:7e:db:0f:d4:16:95:
         a9:33:bd:88:50:55:77:24:58:8b:e1:3c:47:af:f2:18:37:54:
         29:29:73:9b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUP1MmL9kDBtL2hYzgZjOkbDK1TtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGRTc5MjkxQTVDM0Q2NkRBQTc1NjREMTgxQzA4RERB
MUIyM0QwMjAeFw0yNTAyMDQxOTU2MjBaFw0yNjAyMDMyMDAxMjBaMDMxMTAvBgNV
BAMTKDI3QTk2RkIzRjc5NkVFQUUyRjRFOTQyQTMwM0EyMzE1N0M1NTM1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGlrRe8fIlEm2IvpPqrLUF75a
BQzauDpkqhbaTvx6ugHitOiBoGaflYkKBIitOX/+masoNzYx9jERcws2EGnIRHjm
MxoMu2kYlYb31BCg/GOfiPQ3rBdWsCiupUWOOH0q0fi8VuFOj2rJsg+py8g7bKOV
x5G3V31MEAv/bhfGMVn/ieLcn/bp8nlVd03qmxV/JLY8H3ZQRTlVn+kRMAFbddqJ
ALfqEgPpVvnYAeNA6SwtSb1txhz+ZVrLrXlloxjl/ZT45twGETQ7OzgkQWu3z7dr
A7mswZohlaHG2txcVBqwOmRkgBanPNO/3xvRx0ySyZTmroxM1cvRPT8KkkEdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJ6lvs/eW7q4vTpQqMDojFXxVNbowHwYDVR0j
BBgwFoAUJ/55KRpcPWbap1ZNGBwI3aGyPQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTVEQTZBNDZEODU4MkEzQUM2NzJENTc0NEFGNDc5M0M1
QzBDNTVDMDZBRDkxOUY4NEFDNDVDQ0I5NEYwN0RELzAvMjdGRTc5MjkxQTVDM0Q2
NkRBQTc1NjREMTgxQzA4RERBMUIyM0QwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0ZFNzkyOTFBNUMzRDY2REFB
NzU2NEQxODFDMDhEREExQjIzRDAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU1REE2QTQ2RDg1ODJBM0FDNjcyRDU3NDRBRjQ3OTNDNUMwQzU1QzA2
QUQ5MTlGODRBQzQ1Q0NCOTRGMDdERC8wLzMyMzgzMDMzM2EzNjY0MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbSAw
DQYJKoZIhvcNAQELBQADggEBAKDoD6T7CdHH/aDN7vXE8TZMwyQgqW9/Xh8NP9ZU
LF4GEgOrApMR/X4fTw0cNiL9MMOvQ5DHbn1mRqwptudwHvdaAJW90mkBMGWYHZ6h
21bYu1SGH401GDcDaB0uuha2uAZY7odwoHjCJUeNqu71U6p7u+4NU+VoU9QKxmFR
tBc1eYwfhfVgg96tiEoLCzZaykY+8y4jIUqyb0Ayfe6Xrdi8hOMf2qzy0guv4JkO
BYirPNVDU+Rjs2vYFLBilUrwfh9bAptUkGWY6A6gjHscmE5kF5brArl8T9pgXlz6
ru/4SlflS37bD9QWlakzvYhQVXckWIvhPEev8hg3VCkpc5s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:50:29 2025 by rpki-client