Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa
File:                     323830363a3336363a3a2f34382d3438203d3e203238343335.roa (raw, json)
Hash identifier:          yaSLmGnsalv+4yk2jrl9HCu/P5iGRsqbaWxC+lmYDRY=
Subject key identifier:   93:F1:01:A4:7F:9B:BE:0C:88:9B:EE:7B:29:AB:A4:18:3A:EC:35:7E
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       37C8F7F904286D7233F3C4D56A55B86721D78C09
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa
Signing time:             Tue 04 Feb 2025 19:57:17 +0000
ROA not before:           Tue 04 Feb 2025 19:52:17 +0000
ROA not after:            Tue 03 Feb 2026 19:57:17 +0000
asID:                     28435
IP address blocks:        2806:366::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c8:f7:f9:04:28:6d:72:33:f3:c4:d5:6a:55:b8:67:21:d7:8c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Feb  4 19:52:17 2025 GMT
            Not After : Feb  3 19:57:17 2026 GMT
        Subject: CN=93F101A47F9BBE0C889BEE7B29ABA4183AEC357E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:e6:0b:3f:aa:c3:ba:ff:cf:ea:9f:a8:66:
                    77:a8:55:83:f5:35:2c:a8:13:a3:13:ab:ef:d0:2c:
                    00:de:f8:52:5d:36:71:c8:f5:46:8e:78:f5:dc:05:
                    1a:9a:3b:85:53:62:a9:3e:eb:f6:ec:af:75:1b:9b:
                    af:4d:8e:35:d1:52:df:84:b4:7f:df:76:2e:24:f1:
                    db:2a:c0:9b:0a:1d:2e:70:62:c0:98:16:5f:f5:19:
                    aa:f3:fe:7c:4a:65:f0:f9:11:9f:41:45:88:b9:f9:
                    01:d2:1d:91:30:84:af:d9:5d:3e:fe:1c:fd:95:ce:
                    8f:5a:6b:d8:f2:60:c3:c6:1c:31:f4:59:63:40:3b:
                    c0:90:a2:59:44:3f:42:e5:35:2e:16:80:99:7c:60:
                    92:29:a5:bb:b0:ba:de:28:da:b4:5d:1e:1f:1c:08:
                    60:e2:ed:1e:34:d5:72:c4:cc:4f:34:00:55:8a:7c:
                    ad:13:41:d7:62:57:a9:4e:8b:6e:21:44:5b:c9:2d:
                    5f:4a:5e:b3:b5:64:89:28:db:47:79:3f:1d:b6:2e:
                    24:49:6a:5a:1a:d0:51:60:17:7d:1b:a5:19:83:2a:
                    7f:81:f7:9e:c8:d6:00:a9:77:fb:59:f1:25:96:6a:
                    1e:cd:1d:26:38:c1:1e:0e:ec:b9:e8:7b:e0:ba:05:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F1:01:A4:7F:9B:BE:0C:88:9B:EE:7B:29:AB:A4:18:3A:EC:35:7E
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f34382d3438203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:41:bc:3a:67:c1:ac:a1:99:26:a8:7d:a5:ed:fc:bb:84:e0:
         52:70:5f:c0:c3:89:ae:ea:46:07:4e:8c:b2:c1:e9:80:66:17:
         48:a2:0f:fe:ab:e3:af:f2:77:80:de:98:13:2d:53:8a:22:17:
         f1:9d:67:6e:33:e7:8c:e2:26:21:05:93:22:e5:45:01:cd:02:
         e4:30:2c:de:dc:d9:67:d2:8c:2f:2c:6d:e0:56:7a:e0:ea:55:
         61:f8:67:1b:6e:79:2e:ed:7b:40:bc:c8:cc:5c:12:07:ba:4d:
         cc:19:82:9b:38:66:ca:fc:25:3c:79:04:b3:b7:26:dd:72:27:
         06:59:1d:81:aa:0b:b4:2c:ff:6a:28:bd:dd:11:08:eb:a8:56:
         06:5d:db:a9:da:c2:2e:dd:44:9b:84:e9:f8:61:e0:14:f0:59:
         19:6f:5a:45:3b:41:8f:50:66:fb:d1:d3:35:d3:30:22:3a:d7:
         ad:3d:71:1f:c1:34:dc:77:d7:4d:64:da:ad:51:f5:f1:e7:87:
         50:fe:f2:d4:65:4c:14:de:cb:7a:24:7b:e2:bb:06:4e:c4:6e:
         aa:a3:12:0f:d1:75:68:fc:36:17:3a:57:d1:7a:06:89:a7:72:
         7a:16:6a:4c:23:23:c1:8f:c4:3d:f1:cd:a9:cd:77:e1:06:39:
         54:5a:28:48
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUN8j3+QQobXIz88TValW4ZyHXjAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNTAyMDQxOTUyMTdaFw0yNjAyMDMxOTU3MTdaMDMxMTAvBgNV
BAMTKDkzRjEwMUE0N0Y5QkJFMEM4ODlCRUU3QjI5QUJBNDE4M0FFQzM1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiOYLP6rDuv/P6p+oZneoVYP1
NSyoE6MTq+/QLADe+FJdNnHI9UaOePXcBRqaO4VTYqk+6/bsr3Ubm69NjjXRUt+E
tH/fdi4k8dsqwJsKHS5wYsCYFl/1Garz/nxKZfD5EZ9BRYi5+QHSHZEwhK/ZXT7+
HP2Vzo9aa9jyYMPGHDH0WWNAO8CQollEP0LlNS4WgJl8YJIppbuwut4o2rRdHh8c
CGDi7R401XLEzE80AFWKfK0TQddiV6lOi24hRFvJLV9KXrO1ZIko20d5Px22LiRJ
aloa0FFgF30bpRmDKn+B957I1gCpd/tZ8SWWah7NHSY4wR4O7Lnoe+C6BSjXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUk/EBpH+bvgyIm+57KaukGDrsNX4wHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzMyMzgzMDM2M2EzMzM2MzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM4MzQzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYDZgAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBUQbw6Z8GsoZkmqH2l7fy7hOBScF/Aw4mu6kYHToyy
wemAZhdIog/+q+Ov8neA3pgTLVOKIhfxnWduM+eM4iYhBZMi5UUBzQLkMCze3Nln
0owvLG3gVnrg6lVh+Gcbbnku7XtAvMjMXBIHuk3MGYKbOGbK/CU8eQSztybdcicG
WR2Bqgu0LP9qKL3dEQjrqFYGXdup2sIu3USbhOn4YeAU8FkZb1pFO0GPUGb70dM1
0zAiOtetPXEfwTTcd9dNZNqtUfXx54dQ/vLUZUwU3st6JHviuwZOxG6qoxIP0XVo
/DYXOlfRegaJp3J6FmpMIyPBj8Q98c2pzXfhBjlUWihI
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:00 2025 by rpki-client