Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6330303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a6330303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          XcbsHJU3tw3PgamebRtmFY38ECxokCDx8JWzxJE37MI=
Subject key identifier:   BE:7B:A1:DB:71:E7:B0:97:23:A3:2D:EB:B2:7A:C4:FA:1D:23:76:B9
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       3B6A84511C59B4BF513C1C66D32FA0A0D8396738
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6330303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:06 +0000
ROA not before:           Fri 17 Jan 2025 14:40:06 +0000
ROA not after:            Fri 16 Jan 2026 14:45:06 +0000
asID:                     269730
IP address blocks:        2803:5160:c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6a:84:51:1c:59:b4:bf:51:3c:1c:66:d3:2f:a0:a0:d8:39:67:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:06 2025 GMT
            Not After : Jan 16 14:45:06 2026 GMT
        Subject: CN=BE7BA1DB71E7B09723A32DEBB27AC4FA1D2376B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:78:03:a9:a6:39:ea:33:22:8b:3d:31:ea:
                    0e:7b:69:9a:31:cd:50:65:8f:c9:a7:08:12:7f:c8:
                    50:5b:50:43:6b:8f:c7:a8:02:d5:62:c0:41:65:84:
                    7c:9b:ad:5c:df:e9:6a:a1:be:38:29:c6:43:4d:73:
                    01:5f:2c:e5:39:94:8a:21:4e:d2:7d:22:ee:67:b2:
                    58:d8:9e:bd:e2:6b:75:28:de:98:8e:c4:d0:6c:55:
                    6f:6d:6c:38:b1:a5:bb:df:fb:10:83:7b:dc:96:27:
                    c2:0b:d0:87:e6:a4:4e:2f:a3:6d:f9:bd:25:8d:90:
                    53:2c:56:c1:51:a0:11:a8:2a:e0:28:23:28:b2:70:
                    79:7c:61:a7:35:2f:f8:f2:71:40:5c:5a:92:f4:13:
                    2e:be:dd:9d:bb:42:0b:c6:71:47:f4:3c:2d:43:44:
                    8b:c8:33:83:ff:e3:d1:f8:01:b6:97:46:7f:f3:a4:
                    33:61:f0:21:9b:57:73:71:d7:be:e0:fd:0c:9f:d8:
                    bf:3d:69:7c:9d:f9:88:d9:39:b4:b9:32:b8:3d:de:
                    8e:99:af:f8:a7:8c:e5:45:ce:cf:9c:ac:e6:fb:09:
                    e2:fe:13:27:b3:56:af:4c:9e:88:38:44:54:da:22:
                    08:ff:1b:b1:97:06:1a:4d:92:3a:c1:9d:42:a6:3f:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:A1:DB:71:E7:B0:97:23:A3:2D:EB:B2:7A:C4:FA:1D:23:76:B9
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6330303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:b9:20:e3:09:96:12:bd:50:61:f3:a9:aa:a1:93:09:21:
         c9:a1:9e:f7:ea:8e:93:f2:ec:ae:dd:c2:99:37:35:29:97:36:
         a6:13:87:df:3a:0b:a1:dc:17:e8:8e:03:a7:a2:a3:21:5e:ca:
         cc:a9:9e:a4:0d:ca:1d:91:40:97:60:c4:66:22:b5:96:72:ce:
         83:04:1a:4a:68:f1:c5:7e:e1:5f:b1:14:cc:6c:55:94:89:c4:
         5b:66:b3:88:3d:de:67:ca:c2:a3:50:c7:2a:a3:0e:8a:64:b7:
         da:27:1c:47:4c:71:2f:8e:17:c8:42:51:e5:47:bb:f9:d0:f7:
         76:a7:cb:11:59:61:08:28:22:96:47:59:82:fb:cf:03:e0:02:
         77:c4:1d:8d:da:55:c0:c8:93:1d:cd:72:fe:8c:22:aa:63:5a:
         3f:48:ce:00:1f:ab:ad:79:53:e3:0f:7a:08:02:50:d0:05:8a:
         3c:52:8a:3c:79:a3:ba:b5:43:6d:6c:03:48:13:8a:a6:20:c7:
         eb:14:97:08:26:7b:c4:66:fb:d6:29:b4:4a:9d:42:5f:b6:59:
         84:74:ad:c5:20:9d:88:f2:09:71:5e:9e:db:7c:ef:33:63:74:
         04:1a:cd:ac:1c:2f:b3:6e:15:bf:cc:5b:00:de:6d:5c:d2:6e:
         b0:2b:77:9b
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUO2qEURxZtL9RPBxm0y+goNg5ZzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTAxMTcxNDQwMDZaFw0yNjAxMTYxNDQ1MDZaMDMxMTAvBgNV
BAMTKEJFN0JBMURCNzFFN0IwOTcyM0EzMkRFQkIyN0FDNEZBMUQyMzc2QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZ3gDqaY56jMiiz0x6g57aZox
zVBlj8mnCBJ/yFBbUENrj8eoAtViwEFlhHybrVzf6WqhvjgpxkNNcwFfLOU5lIoh
TtJ9Iu5nsljYnr3ia3Uo3piOxNBsVW9tbDixpbvf+xCDe9yWJ8IL0IfmpE4vo235
vSWNkFMsVsFRoBGoKuAoIyiycHl8Yac1L/jycUBcWpL0Ey6+3Z27QgvGcUf0PC1D
RIvIM4P/49H4AbaXRn/zpDNh8CGbV3Nx177g/Qyf2L89aXyd+YjZObS5Mrg93o6Z
r/injOVFzs+crOb7CeL+EyezVq9Mnog4RFTaIgj/G7GXBhpNkjrBnUKmPzOpAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUvnuh23HnsJcjoy3rsnrE+h0jdrkwHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANRYAwwDQYJKoZIhvcNAQELBQADggEBAIXRuSDjCZYSvVBh86mqoZMJIcmh
nvfqjpPy7K7dwpk3NSmXNqYTh986C6HcF+iOA6eioyFeysypnqQNyh2RQJdgxGYi
tZZyzoMEGkpo8cV+4V+xFMxsVZSJxFtms4g93mfKwqNQxyqjDopkt9onHEdMcS+O
F8hCUeVHu/nQ93anyxFZYQgoIpZHWYL7zwPgAnfEHY3aVcDIkx3Ncv6MIqpjWj9I
zgAfq615U+MPeggCUNAFijxSijx5o7q1Q21sA0gTiqYgx+sUlwgme8Rm+9YptEqd
Ql+2WYR0rcUgnYjyCXFentt87zNjdAQazawcL7NuFb/MWwDebVzSbrArd5s=
-----END CERTIFICATE-----