Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a383a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a383a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          3+lx4naUc12/14ph7nNQ1C/TWBFOm2otmKDWO7tLNw4=
Subject key identifier:   CE:EA:B8:B0:66:4E:06:7F:59:79:88:5C:6C:51:05:94:02:F1:61:D1
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       705E0974DCACDB0B893B784FC603D427FA753002
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a383a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:51 +0000
ROA not before:           Tue 04 Feb 2025 18:41:51 +0000
ROA not after:            Tue 03 Feb 2026 18:46:51 +0000
asID:                     271927
IP address blocks:        2803:ea10:8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:09:74:dc:ac:db:0b:89:3b:78:4f:c6:03:d4:27:fa:75:30:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:51 2025 GMT
            Not After : Feb  3 18:46:51 2026 GMT
        Subject: CN=CEEAB8B0664E067F5979885C6C51059402F161D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:6d:5d:b6:28:15:bb:4d:ed:d6:7a:60:17:
                    fb:ca:aa:62:fd:e0:0d:27:8e:39:ab:e2:18:47:45:
                    58:07:97:d6:52:9b:f3:32:87:a2:1e:6b:c1:21:e3:
                    fd:b5:25:07:5f:b6:c4:4d:4e:e9:29:13:c5:7d:78:
                    e3:77:9b:50:bc:e9:92:fa:68:90:9d:9f:7e:91:2f:
                    69:4d:30:07:20:cd:20:6e:93:3d:ac:62:ba:bc:5e:
                    05:a2:33:ec:f1:0a:e9:bf:12:92:8e:68:1e:55:4c:
                    ef:de:41:ff:a7:59:4b:69:1b:1f:ce:2c:ef:fa:8c:
                    f4:24:76:c3:0a:d2:e2:9f:a2:0e:e6:10:68:79:9c:
                    e2:af:b3:89:f9:ce:0b:1a:d5:c6:ae:b6:d3:bb:4a:
                    88:ad:be:28:5d:c7:dc:05:6e:45:c1:9d:a3:79:58:
                    d8:ba:b1:87:df:83:5b:8c:41:41:e6:7b:78:7c:73:
                    bf:d3:e6:4b:89:fa:d8:f2:3a:57:26:5d:c2:df:2b:
                    5f:00:eb:e6:17:8f:d9:fe:58:ab:00:66:92:2f:e3:
                    3f:37:0f:09:fb:88:09:9d:3e:c2:50:cc:38:4d:2f:
                    5d:2b:3b:09:f1:69:69:7d:e8:ce:38:16:b0:d9:e6:
                    34:6d:3b:ba:7c:b0:9b:61:12:cd:91:e8:af:1b:bd:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:B8:B0:66:4E:06:7F:59:79:88:5C:6C:51:05:94:02:F1:61:D1
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a383a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:57:5f:af:63:01:9b:45:b2:59:56:34:ad:a1:88:66:52:c0:
         80:c9:77:2f:7a:dc:86:32:79:e8:87:82:bd:79:4d:0f:53:61:
         ee:7b:03:7a:80:30:c2:5a:b0:1b:d9:77:bb:b3:37:16:5c:37:
         87:58:cb:76:fd:8d:e0:3c:9d:a9:38:d3:aa:ba:1c:2c:2e:78:
         eb:90:6d:60:69:6d:0a:0a:ab:9b:89:47:61:a7:16:88:01:bd:
         2f:b8:c9:ac:e1:26:1b:a1:fb:c4:9d:21:e7:6c:10:df:86:d7:
         93:75:e1:6a:90:29:e8:ff:63:48:62:7d:2a:f1:04:f4:e8:c2:
         2e:51:24:ed:14:81:25:f0:0d:fb:a9:86:cc:ac:af:c3:e7:75:
         bd:7b:5f:db:b3:08:9f:74:2a:84:63:23:8e:8c:5a:31:e5:6c:
         59:45:1d:b9:16:91:8d:35:d1:e3:94:1c:b6:19:68:b0:fa:f8:
         98:f5:a4:70:33:cf:c9:72:ee:4c:1b:31:64:c7:bf:59:8d:09:
         50:8f:59:d9:2c:de:af:5a:b5:a7:d7:26:ba:f3:81:95:bc:cd:
         54:d2:c7:68:1f:65:80:49:48:36:7b:48:bf:b7:49:03:21:0b:
         c9:fb:8b:53:fa:2c:60:e8:e2:b9:70:67:47:fb:ee:22:eb:8b:
         9e:18:85:ce
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcF4JdNys2wuJO3hPxgPUJ/p1MAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDNzREQjJFNzMzMjg5QUQzMzBCNUNDNDdFRkY3RTYx
MEQyMjM2RTAeFw0yNTAyMDQxODQxNTFaFw0yNjAyMDMxODQ2NTFaMDMxMTAvBgNV
BAMTKENFRUFCOEIwNjY0RTA2N0Y1OTc5ODg1QzZDNTEwNTk0MDJGMTYxRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRm1dtigVu03t1npgF/vKqmL9
4A0njjmr4hhHRVgHl9ZSm/Myh6Iea8Eh4/21JQdftsRNTukpE8V9eON3m1C86ZL6
aJCdn36RL2lNMAcgzSBukz2sYrq8XgWiM+zxCum/EpKOaB5VTO/eQf+nWUtpGx/O
LO/6jPQkdsMK0uKfog7mEGh5nOKvs4n5zgsa1cauttO7Soitvihdx9wFbkXBnaN5
WNi6sYffg1uMQUHme3h8c7/T5kuJ+tjyOlcmXcLfK18A6+YXj9n+WKsAZpIv4z83
Dwn7iAmdPsJQzDhNL10rOwnxaWl96M44FrDZ5jRtO7p8sJthEs2R6K8bvbMzAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzuq4sGZOBn9ZeYhcbFEFlALxYdEwHwYDVR0j
BBgwFoAUWsdNsuczKJrTMLXMR+/35hDSI24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODk5NUJGODYzNzUxQTVDNjA5NTE3NzAyNThERkU0Rjgy
REI3MzkwRTYyQzFCNzYyNUE1RTFGNDE5MDEyMEE5LzAvNUFDNzREQjJFNzMzMjg5
QUQzMzBCNUNDNDdFRkY3RTYxMEQyMjM2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUM3NERCMkU3MzMyODlBRDMz
MEI1Q0M0N0VGRjdFNjEwRDIyMzZFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg5OTVCRjg2Mzc1MUE1QzYwOTUxNzcwMjU4REZFNEY4MkRCNzM5MEU2
MkMxQjc2MjVBNUUxRjQxOTAxMjBBOS8wLzMyMzgzMDMzM2E2NTYxMzEzMDNhMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A+oQAAgwDQYJKoZIhvcNAQELBQADggEBABZXX69jAZtFsllWNK2hiGZSwIDJdy96
3IYyeeiHgr15TQ9TYe57A3qAMMJasBvZd7uzNxZcN4dYy3b9jeA8nak406q6HCwu
eOuQbWBpbQoKq5uJR2GnFogBvS+4yazhJhuh+8SdIedsEN+G15N14WqQKej/Y0hi
fSrxBPTowi5RJO0UgSXwDfuphsysr8Pndb17X9uzCJ90KoRjI46MWjHlbFlFHbkW
kY010eOUHLYZaLD6+Jj1pHAzz8ly7kwbMWTHv1mNCVCPWdks3q9atafXJrrzgZW8
zVTSx2gfZYBJSDZ7SL+3SQMhC8n7i1P6LGDo4rlwZ0f77iLri54Yhc4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:29 2025 by rpki-client