Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/323830333a623865303a3a2f33322d3332203d3e20323639383831.roa
File:                     323830333a623865303a3a2f33322d3332203d3e20323639383831.roa (raw, json)
Hash identifier:          wUxRFRN/9T2dyhg39W3ssyI3NhD4OpT9rm26kKaydBk=
Subject key identifier:   AD:A9:53:60:F3:FB:E5:A0:2B:6D:7C:7C:B4:CB:C8:03:E9:E6:14:55
Certificate issuer:       /CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
Certificate serial:       306FBEBE7C79B78FC71878B93ED11A88DD968D98
Authority key identifier: C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/323830333a623865303a3a2f33322d3332203d3e20323639383831.roa
Signing time:             Wed 19 Mar 2025 14:12:27 +0000
ROA not before:           Wed 19 Mar 2025 14:07:27 +0000
ROA not after:            Wed 18 Mar 2026 14:12:27 +0000
asID:                     269881
IP address blocks:        2803:b8e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:be:be:7c:79:b7:8f:c7:18:78:b9:3e:d1:1a:88:dd:96:8d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
        Validity
            Not Before: Mar 19 14:07:27 2025 GMT
            Not After : Mar 18 14:12:27 2026 GMT
        Subject: CN=ADA95360F3FBE5A02B6D7C7CB4CBC803E9E61455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:e8:3d:1e:3e:53:34:99:99:36:9f:20:7b:
                    88:65:d0:ea:f6:e4:2a:5b:70:47:c4:d7:ad:03:4c:
                    5d:76:54:15:a3:62:bb:fc:06:f0:20:fa:a2:8c:ae:
                    7b:6d:85:dd:37:f4:1c:fa:21:4d:6e:d4:3c:6f:d4:
                    ef:5c:31:e5:ff:7d:d0:6a:f1:71:f2:5a:fc:fe:5e:
                    41:d7:0a:39:65:ed:fb:c1:a7:54:b0:83:43:6b:0b:
                    4e:f1:22:52:b8:6e:18:15:7b:ea:1d:ae:b6:c0:70:
                    38:a8:a7:8a:8b:b6:06:13:e2:be:17:c8:ce:c2:14:
                    04:bc:47:8e:fd:32:61:9d:aa:00:ab:49:12:f5:91:
                    0e:61:60:37:b9:01:c4:58:bd:8c:d5:f1:07:8b:8b:
                    ac:ec:17:1e:6b:91:47:20:d0:f1:93:f1:b4:68:1d:
                    dc:e4:44:74:58:7b:a4:da:25:6d:9b:9d:d5:36:3c:
                    6e:67:b3:87:21:8f:d6:13:c9:53:d2:db:62:1c:3c:
                    08:16:64:c0:fa:cf:b6:2b:7f:14:0f:a2:f9:fd:7e:
                    3f:41:dd:04:04:b2:d7:16:1d:23:d4:45:d1:9d:2f:
                    ec:74:ea:b8:ff:32:0e:72:ff:6c:8d:49:7d:92:b2:
                    3c:e4:08:61:02:b4:38:a8:12:4a:16:4c:81:95:3c:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:53:60:F3:FB:E5:A0:2B:6D:7C:7C:B4:CB:C8:03:E9:E6:14:55
            X509v3 Authority Key Identifier:
                keyid:C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/323830333a623865303a3a2f33322d3332203d3e20323639383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:a9:64:ad:88:42:e2:96:15:9a:aa:23:67:74:92:18:77:
         41:53:8e:27:e5:ed:1f:34:79:6b:76:89:e3:22:1d:97:0f:0e:
         41:16:93:1e:19:fa:bd:32:64:20:aa:85:b4:c3:09:2d:22:d6:
         95:56:0a:19:7a:bf:6f:ef:5e:7d:36:03:92:0b:10:f1:9c:b6:
         ca:22:03:b2:10:14:59:77:05:50:c3:e1:c5:e8:44:6f:12:1c:
         e5:05:36:3f:6e:e5:22:26:89:72:b0:94:88:00:e0:2d:ab:77:
         2f:9b:ac:a9:05:48:b9:0d:b2:0d:a2:02:66:8e:d3:c9:62:b0:
         39:3a:72:4b:36:32:8f:0a:88:1a:69:63:a0:72:d1:92:91:b7:
         ee:ed:f1:85:a3:16:37:6a:fb:1e:86:76:1d:04:df:36:e5:40:
         a2:68:27:eb:7c:25:f8:fc:a8:ea:c3:5d:e7:6f:d0:bc:a6:7e:
         cf:a9:78:b0:ce:8d:d9:44:dc:71:e8:d9:3c:c8:69:20:6c:9c:
         c6:fd:cc:52:51:61:23:f2:ab:3c:29:61:eb:fe:5a:3b:50:5b:
         83:65:e8:af:90:da:7f:f7:2e:4f:56:33:fe:f2:7e:5b:9e:2e:
         bf:01:7e:4c:4e:d2:60:f3:00:aa:a2:8b:77:d5:7b:93:c4:64:
         38:d1:00:2b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMG++vnx5t4/HGHi5PtEaiN2WjZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCNzVEMDEwQUNBNEIwQkEyMDg2QTI2NEYxQUUxRkQw
RjBDQzY1OTAeFw0yNTAzMTkxNDA3MjdaFw0yNjAzMTgxNDEyMjdaMDMxMTAvBgNV
BAMTKEFEQTk1MzYwRjNGQkU1QTAyQjZEN0M3Q0I0Q0JDODAzRTlFNjE0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYOg9Hj5TNJmZNp8ge4hl0Or2
5CpbcEfE160DTF12VBWjYrv8BvAg+qKMrntthd039Bz6IU1u1Dxv1O9cMeX/fdBq
8XHyWvz+XkHXCjll7fvBp1Swg0NrC07xIlK4bhgVe+odrrbAcDiop4qLtgYT4r4X
yM7CFAS8R479MmGdqgCrSRL1kQ5hYDe5AcRYvYzV8QeLi6zsFx5rkUcg0PGT8bRo
HdzkRHRYe6TaJW2bndU2PG5ns4chj9YTyVPS22IcPAgWZMD6z7YrfxQPovn9fj9B
3QQEstcWHSPURdGdL+x06rj/Mg5y/2yNSX2SsjzkCGECtDioEkoWTIGVPOedAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUralTYPP75aArbXx8tMvIA+nmFFUwHwYDVR0j
BBgwFoAUwbddAQrKSwuiCGomTxrh/Q8MxlkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0U5QTQ5OTFGRDg0MkQ1NjY2REYzMjAzRkQyRjQ2NzE0
MERFMDhBQjk2MzI4Q0E2NDYwQ0U0NDBBNTgxQjg4LzAvQzFCNzVEMDEwQUNBNEIw
QkEyMDg2QTI2NEYxQUUxRkQwRjBDQzY1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMUI3NUQwMTBBQ0E0QjBCQTIw
ODZBMjY0RjFBRTFGRDBGMENDNjU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNFOUE0OTkxRkQ4NDJENTY2NkRGMzIwM0ZEMkY0NjcxNDBERTA4QUI5
NjMyOENBNjQ2MENFNDQwQTU4MUI4OC8wLzMyMzgzMDMzM2E2MjM4NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM4MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDuOAw
DQYJKoZIhvcNAQELBQADggEBAE0kqWStiELilhWaqiNndJIYd0FTjifl7R80eWt2
ieMiHZcPDkEWkx4Z+r0yZCCqhbTDCS0i1pVWChl6v2/vXn02A5ILEPGctsoiA7IQ
FFl3BVDD4cXoRG8SHOUFNj9u5SImiXKwlIgA4C2rdy+brKkFSLkNsg2iAmaO08li
sDk6cks2Mo8KiBppY6By0ZKRt+7t8YWjFjdq+x6Gdh0E3zblQKJoJ+t8Jfj8qOrD
Xedv0Lymfs+peLDOjdlE3HHo2TzIaSBsnMb9zFJRYSPyqzwpYev+WjtQW4Nl6K+Q
2n/3Lk9WM/7yflueLr8BfkxO0mDzAKqii3fVe5PEZDjRACs=
-----END CERTIFICATE-----