Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa
File:                     323830333a373036303a3a2f33322d3332203d3e20323637383137.roa (raw, json)
Hash identifier:          5gvbDDmwPRwmBQ69fRRubGDvlc3hSen75pvPukESgj0=
Subject key identifier:   C1:E3:A4:D9:63:1C:6B:73:E2:76:54:D5:DA:D1:23:92:79:FD:A0:72
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       45C5E7AAD6C6019C47225A3F7C171D64572852B8
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa
Signing time:             Tue 04 Feb 2025 18:51:15 +0000
ROA not before:           Tue 04 Feb 2025 18:46:15 +0000
ROA not after:            Tue 03 Feb 2026 18:51:15 +0000
asID:                     267817
IP address blocks:        2803:7060::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:e7:aa:d6:c6:01:9c:47:22:5a:3f:7c:17:1d:64:57:28:52:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Feb  4 18:46:15 2025 GMT
            Not After : Feb  3 18:51:15 2026 GMT
        Subject: CN=C1E3A4D9631C6B73E27654D5DAD1239279FDA072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:22:a5:a5:f1:bf:e9:04:26:02:1a:bd:b6:
                    01:30:40:97:8e:16:9d:18:09:2b:a3:97:a2:c7:6d:
                    a7:14:ee:9c:74:4f:be:56:8e:42:67:43:d8:ed:37:
                    9f:cf:b6:82:fd:5e:7e:40:28:11:c5:1f:85:3a:9c:
                    47:c0:a4:ea:a7:47:f4:9f:8c:1c:c8:cd:02:cf:52:
                    d8:7c:d6:dd:e3:d9:57:00:52:d8:e3:00:c6:da:75:
                    50:68:2b:3a:2f:66:fa:a9:46:ac:0a:fc:e9:17:80:
                    c5:d2:4f:99:a0:0c:83:86:a9:38:81:b6:e5:b1:f3:
                    93:ed:e1:9e:4e:1e:32:b6:3a:76:f4:b4:e8:09:2c:
                    12:51:4f:5e:b9:d4:b3:ce:d5:bd:8a:5d:f5:de:ca:
                    40:86:83:b0:a8:2f:24:73:a5:cc:5e:db:31:44:15:
                    64:87:d7:ee:50:af:db:47:59:8b:50:63:69:62:ab:
                    6e:b6:10:b3:47:f6:6a:1e:29:f5:8a:4b:12:d4:3b:
                    a6:ea:2e:2f:81:67:38:9d:b9:1a:46:33:04:44:46:
                    a4:7d:2c:03:f2:94:5f:6a:e2:d3:a1:75:c7:de:43:
                    77:c6:a0:08:bb:de:83:07:70:3f:36:91:c3:ef:0c:
                    f8:42:74:ec:fe:42:19:52:fd:58:af:53:93:3f:9a:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E3:A4:D9:63:1C:6B:73:E2:76:54:D5:DA:D1:23:92:79:FD:A0:72
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:74:7d:45:bb:65:86:a3:7d:77:64:00:56:46:ad:44:38:75:
         a5:a7:e5:d3:21:36:23:25:b5:2a:92:71:76:07:ca:18:64:cd:
         3f:95:ae:3a:b7:74:f4:31:c8:d2:25:25:cc:03:36:7d:1f:06:
         89:1a:29:ce:09:42:68:79:c7:9b:2f:3e:7a:32:06:ce:20:58:
         53:a1:4f:40:c3:3d:b6:b8:5a:d4:4f:5d:29:b0:cb:60:2e:73:
         11:a5:fc:51:12:25:8a:72:32:e8:16:56:81:8e:86:1c:42:d7:
         9d:6b:c8:e2:10:f1:da:cf:bd:8c:6d:04:68:7f:35:26:9b:4e:
         4b:f9:93:ee:db:22:76:8f:bd:1c:56:33:20:07:db:93:38:b5:
         52:cd:94:2c:6d:72:4f:5a:0a:a1:28:71:24:41:54:f4:e3:46:
         9b:2a:06:71:53:8d:b1:dc:3c:29:59:7c:e3:9c:dd:b5:cb:c1:
         c7:20:00:d7:63:fe:71:8a:56:17:56:6c:21:69:cd:36:64:5b:
         7f:94:00:e9:d2:5c:2e:c1:c0:7d:a7:6d:97:a3:32:2a:c4:bd:
         4b:5c:3c:62:4a:19:bf:8f:5d:37:b4:22:d2:fd:d0:0b:0b:87:
         59:3e:33:79:58:4e:6b:16:ad:3b:e1:89:20:cf:1a:6e:cc:27:
         46:07:41:43
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIURcXnqtbGAZxHIlo/fBcdZFcoUrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExMUUyMkI4OEFCM0RGNzEzRUNFRjNCNDNEOTcxOTdG
MTQzNDdENzAeFw0yNTAyMDQxODQ2MTVaFw0yNjAyMDMxODUxMTVaMDMxMTAvBgNV
BAMTKEMxRTNBNEQ5NjMxQzZCNzNFMjc2NTRENURBRDEyMzkyNzlGREEwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjCKlpfG/6QQmAhq9tgEwQJeO
Fp0YCSujl6LHbacU7px0T75WjkJnQ9jtN5/PtoL9Xn5AKBHFH4U6nEfApOqnR/Sf
jBzIzQLPUth81t3j2VcAUtjjAMbadVBoKzovZvqpRqwK/OkXgMXST5mgDIOGqTiB
tuWx85Pt4Z5OHjK2Onb0tOgJLBJRT1651LPO1b2KXfXeykCGg7CoLyRzpcxe2zFE
FWSH1+5Qr9tHWYtQY2liq262ELNH9moeKfWKSxLUO6bqLi+BZziduRpGMwRERqR9
LAPylF9q4tOhdcfeQ3fGoAi73oMHcD82kcPvDPhCdOz+QhlS/VivU5M/mqKlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUweOk2WMca3PidlTV2tEjknn9oHIwHwYDVR0j
BBgwFoAUwRHiK4irPfcT7O87Q9lxl/FDR9cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUM2MzU1QkY4QkJBMDJBRkRFQzAxNzQwNDE4Q0JEQTUy
RkFGRDExOUUxNkQ1MzlDMTFDQTk5NzY4RUE5NzdGLzAvQzExMUUyMkI4OEFCM0RG
NzEzRUNFRjNCNDNEOTcxOTdGMTQzNDdENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTExRTIyQjg4QUIzREY3MTNF
Q0VGM0I0M0Q5NzE5N0YxNDM0N0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVDNjM1NUJGOEJCQTAyQUZERUMwMTc0MDQxOENCREE1MkZBRkQxMTlF
MTZENTM5QzExQ0E5OTc2OEVBOTc3Ri8wLzMyMzgzMDMzM2EzNzMwMzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDcGAw
DQYJKoZIhvcNAQELBQADggEBADl0fUW7ZYajfXdkAFZGrUQ4daWn5dMhNiMltSqS
cXYHyhhkzT+Vrjq3dPQxyNIlJcwDNn0fBokaKc4JQmh5x5svPnoyBs4gWFOhT0DD
Pba4WtRPXSmwy2AucxGl/FESJYpyMugWVoGOhhxC151ryOIQ8drPvYxtBGh/NSab
Tkv5k+7bInaPvRxWMyAH25M4tVLNlCxtck9aCqEocSRBVPTjRpsqBnFTjbHcPClZ
fOOc3bXLwccgANdj/nGKVhdWbCFpzTZkW3+UAOnSXC7BwH2nbZejMirEvUtcPGJK
Gb+PXTe0ItL90AsLh1k+M3lYTmsWrTvhiSDPGm7MJ0YHQUM=
-----END CERTIFICATE-----