Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/323830333a363638303a3a2f33322d3438203d3e20323637373839.roa
File:                     323830333a363638303a3a2f33322d3438203d3e20323637373839.roa (raw, json)
Hash identifier:          kTMJM7ZrfYYktXIKQjd2/1DRGGcov2qPmQeM0pm9ltc=
Subject key identifier:   1B:5C:F0:C6:37:76:3E:90:26:BA:61:4D:8C:D7:EC:6D:9D:71:4E:C7
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       548577666EC4B3A097CC41548846F2E24B467E12
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/323830333a363638303a3a2f33322d3438203d3e20323637373839.roa
Signing time:             Tue 04 Feb 2025 18:42:40 +0000
ROA not before:           Tue 04 Feb 2025 18:37:40 +0000
ROA not after:            Tue 03 Feb 2026 18:42:40 +0000
asID:                     267789
IP address blocks:        2803:6680::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:85:77:66:6e:c4:b3:a0:97:cc:41:54:88:46:f2:e2:4b:46:7e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Feb  4 18:37:40 2025 GMT
            Not After : Feb  3 18:42:40 2026 GMT
        Subject: CN=1B5CF0C637763E9026BA614D8CD7EC6D9D714EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:4a:89:9c:96:2d:fc:0c:7b:73:75:ac:07:
                    aa:9f:74:fa:75:7f:98:0c:62:9f:27:27:6d:59:ef:
                    ba:0a:2a:f5:b1:d5:bf:fd:ff:cd:9f:d4:75:57:66:
                    c1:b3:7f:8f:ca:56:32:d8:75:44:22:71:7d:38:16:
                    7f:69:f1:8a:fc:b4:e6:95:ac:20:8a:d0:62:35:fc:
                    d3:1a:15:94:b4:9e:fe:6f:f2:4c:78:f4:a6:99:f4:
                    fb:b1:f0:d8:24:d8:22:b3:7e:87:62:82:6a:84:2d:
                    52:51:03:c4:99:68:e3:55:96:e6:f0:52:15:8f:32:
                    75:ad:a7:12:2d:58:b7:6b:36:76:ba:00:10:0e:6f:
                    e4:37:52:ba:8c:87:83:13:46:e2:30:dc:2b:eb:62:
                    09:60:22:f5:2a:be:e3:05:85:65:44:b0:1d:85:31:
                    bc:fe:3a:ec:81:cd:d6:b6:c8:c5:31:f2:7d:2d:59:
                    2e:83:a7:36:a2:5e:6a:0e:83:d9:80:ad:d5:8c:a3:
                    ed:64:d6:9e:8e:6b:77:5a:52:df:69:09:93:d9:1e:
                    92:bc:af:69:75:58:48:6e:5b:33:6c:80:6a:08:b4:
                    76:93:8b:39:13:4d:10:4d:41:00:8e:48:55:2b:6d:
                    49:14:b5:72:f2:8e:c3:8a:c1:7a:46:c4:ab:b7:de:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:F0:C6:37:76:3E:90:26:BA:61:4D:8C:D7:EC:6D:9D:71:4E:C7
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/323830333a363638303a3a2f33322d3438203d3e20323637373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6680::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:14:67:ad:b8:b7:ab:ec:1f:a6:97:28:da:58:18:cd:b0:b3:
         18:fb:9c:d0:3b:87:7c:95:1d:e6:28:c1:77:01:44:a3:75:23:
         23:4b:14:94:c8:65:c7:23:c1:67:3f:23:0a:9f:55:ce:46:56:
         77:6c:4c:91:18:f3:85:69:78:46:1d:02:8d:cc:cd:da:7d:31:
         09:19:7c:0d:a1:28:6b:ff:af:0d:24:e0:54:aa:1b:02:36:73:
         42:9e:b4:80:5d:41:18:21:46:c2:d5:13:de:a2:71:25:9d:e9:
         87:1b:00:23:51:e7:91:5b:a6:89:c3:ef:70:c5:91:1c:90:54:
         b6:42:ef:3b:94:7e:c2:b0:b6:30:72:68:cd:71:0a:b8:1f:10:
         ce:0f:4e:05:ee:d4:09:e0:a6:30:8b:38:05:00:66:cf:ff:ed:
         c2:1e:4b:2c:1e:7d:a2:dd:aa:49:de:b6:7a:8e:42:62:3a:8b:
         0f:9c:f4:da:27:5e:b3:22:b1:6f:0d:88:97:a7:95:a1:9c:fd:
         c9:4d:61:cf:c7:bb:8c:13:8a:2c:d2:cd:30:c1:8d:05:1e:71:
         14:ed:1b:d3:e1:fe:ac:0c:e0:ee:58:82:b7:95:ae:05:3e:cb:
         4b:10:28:e1:22:34:7f:2c:18:52:94:0b:9e:92:03:e1:7b:8e:
         43:b3:a0:5f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVIV3Zm7Es6CXzEFUiEby4ktGfhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREExMDU3QkNGNjdFN0JEOThEQThBRjEwQjcxRjU2Q0ND
RDJENDM1MTAeFw0yNTAyMDQxODM3NDBaFw0yNjAyMDMxODQyNDBaMDMxMTAvBgNV
BAMTKDFCNUNGMEM2Mzc3NjNFOTAyNkJBNjE0RDhDRDdFQzZEOUQ3MTRFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKkqJnJYt/Ax7c3WsB6qfdPp1
f5gMYp8nJ21Z77oKKvWx1b/9/82f1HVXZsGzf4/KVjLYdUQicX04Fn9p8Yr8tOaV
rCCK0GI1/NMaFZS0nv5v8kx49KaZ9Pux8Ngk2CKzfodigmqELVJRA8SZaONVlubw
UhWPMnWtpxItWLdrNna6ABAOb+Q3UrqMh4MTRuIw3CvrYglgIvUqvuMFhWVEsB2F
Mbz+OuyBzda2yMUx8n0tWS6DpzaiXmoOg9mArdWMo+1k1p6Oa3daUt9pCZPZHpK8
r2l1WEhuWzNsgGoItHaTizkTTRBNQQCOSFUrbUkUtXLyjsOKwXpGxKu33n/XAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUG1zwxjd2PpAmumFNjNfsbZ1xTscwHwYDVR0j
BBgwFoAU2hBXvPZ+e9mNqK8Qtx9WzM0tQ1EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkQzOTUyMUNCNzBEMzdEMURDNkNGNDhFNTUyRTJFMDc5
Njk3Q0EwOERDNThBMTRGQjQxOEJGNjMyNjNENEI4LzAvREExMDU3QkNGNjdFN0JE
OThEQThBRjEwQjcxRjU2Q0NDRDJENDM1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTEwNTdCQ0Y2N0U3QkQ5OERB
OEFGMTBCNzFGNTZDQ0NEMkQ0MzUxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZEMzk1MjFDQjcwRDM3RDFEQzZDRjQ4RTU1MkUyRTA3OTY5N0NBMDhE
QzU4QTE0RkI0MThCRjYzMjYzRDRCOC8wLzMyMzgzMDMzM2EzNjM2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDZoAw
DQYJKoZIhvcNAQELBQADggEBAGQUZ624t6vsH6aXKNpYGM2wsxj7nNA7h3yVHeYo
wXcBRKN1IyNLFJTIZccjwWc/IwqfVc5GVndsTJEY84VpeEYdAo3Mzdp9MQkZfA2h
KGv/rw0k4FSqGwI2c0KetIBdQRghRsLVE96icSWd6YcbACNR55FbponD73DFkRyQ
VLZC7zuUfsKwtjByaM1xCrgfEM4PTgXu1AngpjCLOAUAZs//7cIeSywefaLdqkne
tnqOQmI6iw+c9NonXrMisW8NiJenlaGc/clNYc/Hu4wTiizSzTDBjQUecRTtG9Ph
/qwM4O5YgreVrgU+y0sQKOEiNH8sGFKUC56SA+F7jkOzoF8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:00:46 2025 by rpki-client