Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237343a3a2f34382d3438203d3e203532323334.roa
File:                     323030313a313339383a3237343a3a2f34382d3438203d3e203532323334.roa (raw, json)
Hash identifier:          MgFjJlY1s4gmMJhl1PBCV6qCXo1pL9RCIjPO6zHs1AU=
Subject key identifier:   33:64:02:47:91:6C:A9:B4:6A:4F:0E:02:5F:79:E4:D0:8E:99:88:FD
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       168043628C2BB9190D123DB74DF1F5906BB222B8
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237343a3a2f34382d3438203d3e203532323334.roa
Signing time:             Tue 04 Feb 2025 20:05:51 +0000
ROA not before:           Tue 04 Feb 2025 20:00:51 +0000
ROA not after:            Tue 03 Feb 2026 20:05:51 +0000
asID:                     52234
IP address blocks:        2001:1398:274::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:43:62:8c:2b:b9:19:0d:12:3d:b7:4d:f1:f5:90:6b:b2:22:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Feb  4 20:00:51 2025 GMT
            Not After : Feb  3 20:05:51 2026 GMT
        Subject: CN=33640247916CA9B46A4F0E025F79E4D08E9988FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:43:bc:c6:c0:c1:93:55:4b:9a:b8:e4:fe:
                    24:45:4d:66:ee:cb:de:60:a5:46:b1:10:af:19:e4:
                    d3:c1:9d:d8:b6:2f:fd:ed:67:73:7d:84:27:83:ad:
                    0c:15:6b:32:87:ee:bd:b8:71:b7:94:2d:b6:97:bf:
                    11:c8:1d:50:50:c2:ee:28:c4:14:a7:89:d7:d2:4e:
                    21:49:92:aa:5d:00:c4:12:8b:6e:79:2b:80:88:fa:
                    ca:67:21:6b:9a:a0:5e:e9:be:37:b5:81:dd:6e:31:
                    92:ba:ee:5c:5e:f5:27:65:39:e9:e6:e1:cb:a3:63:
                    ac:45:b5:3e:2b:6d:d7:84:8e:f6:7f:30:4b:cf:87:
                    80:04:e2:97:d6:5b:2f:e6:64:42:f0:52:f4:56:7e:
                    05:96:0b:86:0e:e0:99:fe:2b:31:58:be:b8:96:64:
                    6c:93:fa:1d:23:5e:4b:fa:d3:69:40:4c:70:e1:67:
                    7c:b8:7b:88:74:ab:f8:21:86:96:e5:91:4d:f5:92:
                    cb:d6:84:88:96:06:f2:83:87:9b:40:f2:30:7e:fa:
                    f9:4b:cb:49:3c:5b:ad:b4:7f:7a:f7:56:a6:b4:d8:
                    bf:39:28:e4:e3:38:0f:65:f4:85:c0:3c:5e:da:1f:
                    50:95:88:b4:f0:65:eb:c5:2a:57:97:16:7e:d9:8c:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:02:47:91:6C:A9:B4:6A:4F:0E:02:5F:79:E4:D0:8E:99:88:FD
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237343a3a2f34382d3438203d3e203532323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:274::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:f5:32:5c:24:b7:46:94:9c:e0:ee:08:c0:00:39:c8:38:
         33:26:33:91:4c:8a:e8:f3:ef:6c:95:76:6a:09:47:f6:88:62:
         f4:d5:6c:0e:f2:87:be:70:55:97:0a:cf:d5:9c:82:44:63:5e:
         40:57:b0:cd:8a:48:77:9b:43:78:ab:91:e7:dc:7e:03:89:cf:
         c4:01:88:00:83:90:e2:99:64:00:2e:90:23:60:74:d7:f6:cc:
         35:52:69:93:24:82:02:d6:2c:93:e8:18:23:3a:33:1e:c4:e2:
         37:65:7c:47:22:09:35:d8:1d:46:2f:ba:1d:c3:99:e9:20:b3:
         2e:8b:5a:9e:4d:52:25:5c:09:bc:75:da:45:9d:10:35:5e:8e:
         e0:88:06:4d:8e:84:2f:cc:77:ef:a8:17:0d:86:08:7b:49:41:
         d4:37:3d:54:af:d8:e6:6c:9c:4f:4c:c3:7a:c4:17:60:a7:35:
         5e:f1:84:c3:8a:15:18:68:ff:a5:15:67:02:6b:4e:4f:d5:0d:
         28:eb:03:58:56:e8:e1:ea:19:d4:12:d6:7a:ec:fc:ad:25:bd:
         a7:8c:14:ec:3a:8e:3d:4a:7e:80:18:e8:f2:f6:ae:df:8f:5b:
         81:47:b4:ab:ed:a7:87:7f:de:67:dc:94:93:23:e1:a4:13:0f:
         30:92:55:ed
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUFoBDYowruRkNEj23TfH1kGuyIrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RkMyNjQ2QTlGQzg5MjlCNjk0QUFBRTA0RDUyMDIz
QUE0NjgwQzAeFw0yNTAyMDQyMDAwNTFaFw0yNjAyMDMyMDA1NTFaMDMxMTAvBgNV
BAMTKDMzNjQwMjQ3OTE2Q0E5QjQ2QTRGMEUwMjVGNzlFNEQwOEU5OTg4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjUO8xsDBk1VLmrjk/iRFTWbu
y95gpUaxEK8Z5NPBndi2L/3tZ3N9hCeDrQwVazKH7r24cbeULbaXvxHIHVBQwu4o
xBSnidfSTiFJkqpdAMQSi255K4CI+spnIWuaoF7pvje1gd1uMZK67lxe9SdlOenm
4cujY6xFtT4rbdeEjvZ/MEvPh4AE4pfWWy/mZELwUvRWfgWWC4YO4Jn+KzFYvriW
ZGyT+h0jXkv602lATHDhZ3y4e4h0q/ghhpblkU31ksvWhIiWBvKDh5tA8jB++vlL
y0k8W620f3r3Vqa02L85KOTjOA9l9IXAPF7aH1CViLTwZevFKleXFn7ZjC7VAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUM2QCR5FsqbRqTw4CX3nk0I6ZiP0wHwYDVR0j
BBgwFoAU41/CZGqfyJKbaUqq4E1SAjqkaAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDBFMDU0NjIzQUM5MDQzQzBFMjk5QzJDOTBCMTQzODAz
QkQ4OTEyNUIwRTg2Mzg1NUM0OUMzQjczRjdCQUExLzAvRTM1RkMyNjQ2QTlGQzg5
MjlCNjk0QUFBRTA0RDUyMDIzQUE0NjgwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVGQzI2NDZBOUZDODkyOUI2
OTRBQUFFMDRENTIwMjNBQTQ2ODBDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QwRTA1NDYyM0FDOTA0M0MwRTI5OUMyQzkwQjE0MzgwM0JEODkxMjVC
MEU4NjM4NTVDNDlDM0I3M0Y3QkFBMS8wLzMyMzAzMDMxM2EzMTMzMzkzODNhMzIz
NzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjMyMzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABE5gCdDANBgkqhkiG9w0BAQsFAAOCAQEAZl31Mlwkt0aUnODuCMAAOcg4MyYz
kUyK6PPvbJV2aglH9ohi9NVsDvKHvnBVlwrP1ZyCRGNeQFewzYpId5tDeKuR59x+
A4nPxAGIAIOQ4plkAC6QI2B01/bMNVJpkySCAtYsk+gYIzozHsTiN2V8RyIJNdgd
Ri+6HcOZ6SCzLotank1SJVwJvHXaRZ0QNV6O4IgGTY6EL8x376gXDYYIe0lB1Dc9
VK/Y5mycT0zDesQXYKc1XvGEw4oVGGj/pRVnAmtOT9UNKOsDWFbo4eoZ1BLWeuz8
rSW9p4wU7DqOPUp+gBjo8vau349bgUe0q+2nh3/eZ9yUkyPhpBMPMJJV7Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:34:58 2025 by rpki-client