Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa
File:                     323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa (raw, json)
Hash identifier:          Cx5c+ZUQ7VyE8pl7iM1NJhiYUgTcuGI/WoHDLPVEwDw=
Subject key identifier:   F2:AD:26:4F:75:1A:D0:DB:C0:6B:4F:FD:B2:48:EA:FD:71:68:98:33
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       6FF0380D677053E5BEADDD0306938A8DCD6EE48A
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa
Signing time:             Tue 04 Feb 2025 18:54:39 +0000
ROA not before:           Tue 04 Feb 2025 18:49:39 +0000
ROA not after:            Tue 03 Feb 2026 18:54:39 +0000
asID:                     265799
IP address blocks:        2803:2540:b7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f0:38:0d:67:70:53:e5:be:ad:dd:03:06:93:8a:8d:cd:6e:e4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:39 2025 GMT
            Not After : Feb  3 18:54:39 2026 GMT
        Subject: CN=F2AD264F751AD0DBC06B4FFDB248EAFD71689833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:0b:49:03:8e:2e:28:29:14:68:b7:30:61:
                    40:21:17:ba:7a:fc:d8:e6:61:89:a2:85:47:56:57:
                    d8:e9:ec:fc:59:7d:f7:fa:af:18:00:33:bd:4e:a1:
                    50:5f:89:33:f6:ee:48:25:48:87:f4:da:a0:08:8a:
                    e1:ef:01:e8:43:c6:9a:92:7a:e7:14:c5:bf:80:a6:
                    85:7d:bd:56:fd:59:36:2d:e6:09:6a:31:74:3a:f1:
                    e6:63:a3:88:d0:cc:0d:a8:0b:bf:75:87:a9:fc:f4:
                    0e:e2:01:de:f4:aa:f2:2a:13:a4:e3:b5:0f:41:27:
                    e8:ae:3f:48:62:55:0a:11:d5:25:cc:ac:51:2d:32:
                    a5:a0:81:4b:3a:a7:23:10:80:83:2a:03:66:99:e8:
                    8f:8d:1c:ad:b6:10:6d:a6:76:8f:b1:e4:77:0b:07:
                    fb:ae:29:c0:68:33:40:9b:1f:88:9d:b2:e8:a4:b9:
                    75:6b:ef:7d:6c:d3:20:d9:fa:87:fe:77:ee:61:0d:
                    6a:0c:0b:da:04:0b:79:87:b5:45:40:dc:a7:ef:66:
                    68:6f:69:b5:d8:16:06:fc:ff:d1:42:05:7d:c4:ce:
                    3b:17:2a:a1:7a:ca:7d:20:a0:30:1b:07:61:ba:aa:
                    0c:53:f0:7a:73:56:9d:8f:0c:47:a5:79:05:d2:31:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AD:26:4F:75:1A:D0:DB:C0:6B:4F:FD:B2:48:EA:FD:71:68:98:33
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:0b:41:f7:36:7b:b5:a8:be:9d:22:29:95:bb:c9:9c:63:
         bf:c7:c8:a4:e6:ac:34:ac:80:9d:ae:0b:28:83:a9:09:34:96:
         01:df:09:bc:03:03:ce:ce:46:b4:48:b7:d2:ba:63:50:47:b0:
         52:e5:02:ae:6a:2b:90:ca:26:53:52:10:a5:9d:27:01:7d:e9:
         dd:09:19:be:dc:e0:c5:5f:c6:17:41:b6:54:46:a2:ee:08:d0:
         9f:9d:0a:58:0e:61:82:48:1c:65:42:c6:0c:13:19:f1:fd:05:
         45:31:4b:1d:b1:b7:ef:be:a4:b3:55:22:3a:54:63:e0:c0:13:
         6d:9c:85:e9:35:e9:9b:c9:a2:ce:8a:28:17:42:0a:cb:16:98:
         fb:20:2e:c0:ae:e4:19:24:84:cc:d4:34:67:f2:1c:73:79:54:
         13:5c:2d:df:bc:88:5e:1a:83:85:32:1d:b5:51:70:37:d7:b5:
         05:e8:79:ba:eb:2c:36:67:c9:49:01:d2:8e:20:82:83:ad:ff:
         c9:c1:98:f7:55:7f:e3:e7:eb:61:a6:00:8e:44:d8:5a:bb:da:
         35:2f:91:b9:ce:2d:04:3e:27:e2:75:68:40:30:af:fc:9c:22:
         1e:a8:4f:6a:94:c6:20:88:2f:6c:bf:09:77:76:32:39:72:a9:
         66:75:dd:b4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUb/A4DWdwU+W+rd0DBpOKjc1u5IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NTBBNUQzMDlFRTIxMjhFNEZDREMwMkNENEFDNUM1
NzYwNjlFMjAeFw0yNTAyMDQxODQ5MzlaFw0yNjAyMDMxODU0MzlaMDMxMTAvBgNV
BAMTKEYyQUQyNjRGNzUxQUQwREJDMDZCNEZGREIyNDhFQUZENzE2ODk4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlgtJA44uKCkUaLcwYUAhF7p6
/NjmYYmihUdWV9jp7PxZfff6rxgAM71OoVBfiTP27kglSIf02qAIiuHvAehDxpqS
eucUxb+ApoV9vVb9WTYt5glqMXQ68eZjo4jQzA2oC791h6n89A7iAd70qvIqE6Tj
tQ9BJ+iuP0hiVQoR1SXMrFEtMqWggUs6pyMQgIMqA2aZ6I+NHK22EG2mdo+x5HcL
B/uuKcBoM0CbH4idsuikuXVr731s0yDZ+of+d+5hDWoMC9oEC3mHtUVA3KfvZmhv
abXYFgb8/9FCBX3EzjsXKqF6yn0goDAbB2G6qgxT8HpzVp2PDEeleQXSMd4ZAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU8q0mT3Ua0NvAa0/9skjq/XFomDMwHwYDVR0j
BBgwFoAUwlUKXTCe4hKOT83ALNSsXFdgaeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEI3NDY4MjhBNzM4MDNFRTBBQzJDQ0NGOUQ1ODhDMzg0
QTg2N0U0QTczNUJBNDcxQUU5NjIwMDk4NDMxRjYzLzAvQzI1NTBBNUQzMDlFRTIx
MjhFNEZDREMwMkNENEFDNUM1NzYwNjlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjU1MEE1RDMwOUVFMjEyOEU0
RkNEQzAyQ0Q0QUM1QzU3NjA2OUUyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCNzQ2ODI4QTczODAzRUUwQUMyQ0NDRjlENTg4QzM4NEE4NjdFNEE3
MzVCQTQ3MUFFOTYyMDA5ODQzMUY2My8wLzMyMzgzMDMzM2EzMjM1MzQzMDNhNjIz
NzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzkzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDJUAAtzANBgkqhkiG9w0BAQsFAAOCAQEAHEwLQfc2e7Wovp0iKZW7yZxjv8fI
pOasNKyAna4LKIOpCTSWAd8JvAMDzs5GtEi30rpjUEewUuUCrmorkMomU1IQpZ0n
AX3p3QkZvtzgxV/GF0G2VEai7gjQn50KWA5hgkgcZULGDBMZ8f0FRTFLHbG3776k
s1UiOlRj4MATbZyF6TXpm8mizoooF0IKyxaY+yAuwK7kGSSEzNQ0Z/Icc3lUE1wt
37yIXhqDhTIdtVFwN9e1Beh5uussNmfJSQHSjiCCg63/ycGY91V/4+frYaYAjkTY
WrvaNS+Ruc4tBD4n4nVoQDCv/JwiHqhPapTGIIgvbL8Jd3YyOXKpZnXdtA==
-----END CERTIFICATE-----