Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323138303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323138303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          yt9Mv38aAeYqDchbKpNWZZsHrbTlmYdNi17zOCIxFew=
Subject key identifier:   36:83:5B:13:1F:25:B1:67:0F:CB:96:57:47:4B:83:A7:61:E2:D6:6E
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       20469CC8BD40AD925FAF288A0BD3DD0BEB32B915
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323138303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Fri 21 Mar 2025 20:55:00 +0000
ROA not before:           Fri 21 Mar 2025 20:50:00 +0000
ROA not after:            Fri 20 Mar 2026 20:55:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2180::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:9c:c8:bd:40:ad:92:5f:af:28:8a:0b:d3:dd:0b:eb:32:b9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar 21 20:50:00 2025 GMT
            Not After : Mar 20 20:55:00 2026 GMT
        Subject: CN=36835B131F25B1670FCB9657474B83A761E2D66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:4d:56:35:a1:75:22:ea:16:a3:f6:c4:e0:
                    d8:21:13:51:f5:39:0f:5f:c2:da:f8:ff:f6:08:89:
                    d4:cd:91:0c:08:3a:1d:e6:dc:c5:77:9c:ce:f4:f1:
                    49:7e:46:5d:6a:82:80:b5:22:32:d9:02:e1:9a:2d:
                    e2:7a:04:e9:2c:94:e4:ef:f5:a9:d1:ad:30:c5:d9:
                    7b:74:a8:ec:4d:ec:2b:68:74:e3:25:31:8e:ba:8d:
                    0f:99:11:17:d9:c2:1c:d8:5e:b8:c5:16:cb:98:40:
                    5a:6d:42:e0:9f:17:8c:80:d2:ef:2e:4a:ca:31:1f:
                    14:f5:77:61:78:8d:33:c4:d8:1b:4b:9a:be:87:11:
                    1f:21:94:6f:65:f4:e4:4a:7f:79:58:0f:d9:7d:db:
                    8b:35:e1:c9:ba:ca:b7:9f:80:d1:b3:4c:e3:43:b1:
                    6e:04:4d:45:5d:d9:e9:83:f1:8c:d2:ea:a8:ac:74:
                    23:64:63:0c:29:b3:70:a5:b6:be:e1:48:50:aa:24:
                    61:79:e2:0e:fc:5d:6c:70:09:2e:8e:09:2d:55:3e:
                    38:93:e6:ff:0f:9d:67:72:5c:e7:f8:f3:c9:5c:9c:
                    72:0a:08:23:6a:8c:8f:08:a3:91:58:88:c2:12:38:
                    3e:c2:da:3a:35:63:c1:5a:a5:91:20:a9:dd:80:ed:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:5B:13:1F:25:B1:67:0F:CB:96:57:47:4B:83:A7:61:E2:D6:6E
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323138303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2180::/43

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:b8:75:83:f6:2a:95:91:aa:96:a8:61:4c:a3:51:a2:74:
         1c:f3:14:d8:84:ee:c8:36:1f:4c:34:75:88:86:fa:32:54:e7:
         57:7f:02:04:25:bb:70:4e:c7:e7:59:ce:ac:6e:98:be:07:f3:
         40:88:66:26:91:06:36:ee:6a:7d:bb:b4:45:e5:c3:56:68:fe:
         81:ce:bb:40:ef:0d:23:e8:f0:e5:a2:73:37:f2:e1:e0:34:49:
         d4:a0:fc:12:06:cf:ba:62:48:4f:87:b0:a2:d1:b6:45:46:ec:
         17:42:8e:15:4b:ce:ad:a1:34:0f:ff:e3:8f:91:fd:41:f6:f7:
         2b:4f:dd:d8:b1:18:fe:ef:2f:e2:b1:7e:38:ad:a9:3c:af:3b:
         c9:22:ee:e7:54:07:0e:7e:ac:c9:58:54:1c:08:7e:a4:23:36:
         e7:c7:c8:1a:03:6b:0b:33:75:9a:16:6c:96:75:97:2a:84:21:
         96:30:6a:dd:3a:1b:bb:74:bc:60:54:14:e6:7e:4d:1b:21:c5:
         56:f0:7f:0a:18:a5:a2:fb:12:6f:f8:54:45:e0:da:a5:8b:08:
         cf:36:82:23:69:17:00:f8:82:6c:1d:ad:ff:c9:56:0e:a9:5b:
         a3:cd:12:30:a5:a9:46:6a:13:6e:db:69:39:05:b6:01:c3:5d:
         6d:be:44:ad
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIEacyL1ArZJfryiKC9PdC+syuRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTAzMjEyMDUwMDBaFw0yNjAzMjAyMDU1MDBaMDMxMTAvBgNV
BAMTKDM2ODM1QjEzMUYyNUIxNjcwRkNCOTY1NzQ3NEI4M0E3NjFFMkQ2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoU1WNaF1IuoWo/bE4NghE1H1
OQ9fwtr4//YIidTNkQwIOh3m3MV3nM708Ul+Rl1qgoC1IjLZAuGaLeJ6BOkslOTv
9anRrTDF2Xt0qOxN7CtodOMlMY66jQ+ZERfZwhzYXrjFFsuYQFptQuCfF4yA0u8u
SsoxHxT1d2F4jTPE2BtLmr6HER8hlG9l9ORKf3lYD9l924s14cm6yrefgNGzTOND
sW4ETUVd2emD8YzS6qisdCNkYwwps3Cltr7hSFCqJGF54g78XWxwCS6OCS1VPjiT
5v8PnWdyXOf488lcnHIKCCNqjI8Io5FYiMISOD7C2jo1Y8FapZEgqd2A7S2bAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUNoNbEx8lsWcPy5ZXR0uDp2Hi1m4wHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzIz
MTM4MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgCGAMA0GCSqGSIb3DQEBCwUAA4IBAQAsXbh1g/YqlZGqlqhhTKNRonQc
8xTYhO7INh9MNHWIhvoyVOdXfwIEJbtwTsfnWc6sbpi+B/NAiGYmkQY27mp9u7RF
5cNWaP6BzrtA7w0j6PDlonM38uHgNEnUoPwSBs+6YkhPh7Ci0bZFRuwXQo4VS86t
oTQP/+OPkf1B9vcrT93YsRj+7y/isX44rak8rzvJIu7nVAcOfqzJWFQcCH6kIzbn
x8gaA2sLM3WaFmyWdZcqhCGWMGrdOhu7dLxgVBTmfk0bIcVW8H8KGKWi+xJv+FRF
4NqliwjPNoIjaRcA+IJsHa3/yVYOqVujzRIwpalGahNu22k5BbYBw11tvkSt
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:25:02 2025 by rpki-client