Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa
File:                     323830303a34303a3a2f33322d3438203d3e203136383134.roa (raw, json)
Hash identifier:          nmk+gETvdx6yf9RU1SAcZRsP8JoXbeuowHXG/eOKVg4=
Subject key identifier:   B0:7B:6F:47:A2:2E:D2:8E:10:6D:93:7A:04:E9:72:C2:E7:6A:0F:A8
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       190A5FC819391D21EDFE6235C4E1764EABDAEE2B
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:07 +0000
ROA not before:           Tue 04 Feb 2025 19:59:07 +0000
ROA not after:            Tue 03 Feb 2026 20:04:07 +0000
asID:                     16814
IP address blocks:        2800:40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0a:5f:c8:19:39:1d:21:ed:fe:62:35:c4:e1:76:4e:ab:da:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:07 2025 GMT
            Not After : Feb  3 20:04:07 2026 GMT
        Subject: CN=B07B6F47A22ED28E106D937A04E972C2E76A0FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:20:38:42:46:c9:a2:49:10:ff:50:7e:d0:e1:
                    60:af:81:d0:f2:7a:1a:ae:06:60:5a:f0:fd:f9:c4:
                    ab:88:b4:cb:5f:72:e2:03:4f:de:95:b8:e5:b3:e7:
                    80:43:2e:77:47:2f:2e:5a:30:f2:60:88:a1:b0:e4:
                    f0:4d:c0:d8:f4:12:6e:c4:03:ed:05:da:8e:11:ad:
                    9e:3d:a0:2b:92:dc:81:bf:4c:8e:88:f6:5d:f9:b0:
                    d3:1c:92:6f:e7:55:f5:b0:ef:a5:77:89:65:67:63:
                    09:86:27:08:9a:28:82:fb:f8:09:e2:4c:4a:14:33:
                    32:c5:7e:35:19:32:c2:02:ee:7f:0c:b0:69:7d:43:
                    b7:4f:49:03:b7:2d:e3:02:91:8a:fe:40:4b:26:3b:
                    a5:6b:c3:2a:a6:14:7a:6c:eb:bc:c2:d9:58:b2:c2:
                    ca:d5:09:66:8f:7a:c0:e8:09:63:8d:4a:ec:e4:1a:
                    6a:91:ad:a2:1f:de:96:26:10:ee:f5:a4:0b:ec:33:
                    7c:00:92:b3:64:9c:6e:92:7c:1a:b4:97:d3:e6:21:
                    83:a5:fe:c3:6f:81:a1:37:3c:78:34:12:c1:f3:11:
                    86:15:ee:d8:c6:ec:bd:45:ca:f1:ae:dd:5d:df:a4:
                    66:81:67:7a:b7:57:9e:95:b6:db:58:71:6c:c9:f7:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7B:6F:47:A2:2E:D2:8E:10:6D:93:7A:04:E9:72:C2:E7:6A:0F:A8
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:10:89:48:2a:16:39:73:42:58:5f:17:1b:43:0a:4b:ac:
         e1:ae:57:46:c0:fa:73:7b:c7:e6:53:ea:fe:89:8b:3f:1e:2c:
         de:9c:c4:3b:f5:de:1c:77:95:84:5f:36:6d:79:95:10:01:2e:
         5b:20:77:8c:60:2b:03:5c:15:1d:1b:57:6d:50:3b:a5:0c:0c:
         ab:89:e7:24:bd:54:8f:73:4d:99:58:c9:ef:90:98:e4:36:7b:
         c8:d4:30:ee:ff:4e:b1:f8:a2:28:75:09:0b:91:76:fc:a0:e4:
         64:8f:fc:fa:31:2a:76:af:31:4a:03:20:c9:bc:de:ad:75:e5:
         fc:96:c7:83:8a:b7:0d:51:45:3b:7a:90:da:50:fe:8f:66:c8:
         72:e6:17:f0:93:4a:bc:ef:f5:e0:ea:8a:98:bb:82:52:f8:5f:
         e1:10:a0:ba:b7:7d:76:48:a5:bc:10:ef:5f:0b:35:b1:f3:d9:
         2e:7c:7e:7a:3c:56:17:48:76:7c:c6:6b:b4:53:32:ce:87:5b:
         01:8c:d2:ee:de:46:df:96:57:01:e7:7f:7c:35:23:a8:05:2a:
         a2:34:f4:03:ea:5f:28:38:b8:04:14:4f:f6:44:39:65:c6:0f:
         74:4a:b3:25:e0:93:11:b4:ce:ba:76:c6:63:02:72:cf:f6:51:
         69:84:b8:25
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUGQpfyBk5HSHt/mI1xOF2Tqva7iswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNTAyMDQxOTU5MDdaFw0yNjAyMDMyMDA0MDdaMDMxMTAvBgNV
BAMTKEIwN0I2RjQ3QTIyRUQyOEUxMDZEOTM3QTA0RTk3MkMyRTc2QTBGQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2IDhCRsmiSRD/UH7Q4WCvgdDy
ehquBmBa8P35xKuItMtfcuIDT96VuOWz54BDLndHLy5aMPJgiKGw5PBNwNj0Em7E
A+0F2o4RrZ49oCuS3IG/TI6I9l35sNMckm/nVfWw76V3iWVnYwmGJwiaKIL7+Ani
TEoUMzLFfjUZMsIC7n8MsGl9Q7dPSQO3LeMCkYr+QEsmO6VrwyqmFHps67zC2Viy
wsrVCWaPesDoCWONSuzkGmqRraIf3pYmEO71pAvsM3wAkrNknG6SfBq0l9PmIYOl
/sNvgaE3PHg0EsHzEYYV7tjG7L1FyvGu3V3fpGaBZ3q3V56VtttYcWzJ95VRAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUsHtvR6Iu0o4QbZN6BOlywudqD6gwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzgzMDMwM2EzNDMwM2EzYTJmMzMz
MjJkMzQzODIwM2QzZTIwMzEzNjM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAAEAwDQYJKoZI
hvcNAQELBQADggEBAA58EIlIKhY5c0JYXxcbQwpLrOGuV0bA+nN7x+ZT6v6Jiz8e
LN6cxDv13hx3lYRfNm15lRABLlsgd4xgKwNcFR0bV21QO6UMDKuJ5yS9VI9zTZlY
ye+QmOQ2e8jUMO7/TrH4oih1CQuRdvyg5GSP/PoxKnavMUoDIMm83q115fyWx4OK
tw1RRTt6kNpQ/o9myHLmF/CTSrzv9eDqipi7glL4X+EQoLq3fXZIpbwQ718LNbHz
2S58fno8VhdIdnzGa7RTMs6HWwGM0u7eRt+WVwHnf3w1I6gFKqI09APqXyg4uAQU
T/ZEOWXGD3RKsyXgkxG0zrp2xmMCcs/2UWmEuCU=
-----END CERTIFICATE-----