Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6530303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a6530303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          3SytYwhx1GZm/r9/eSEHG+sSCfTsim6CejeDiWHfp54=
Subject key identifier:   28:8C:1C:BE:9A:80:B5:81:FA:A4:89:CD:22:A5:B0:73:0A:F7:A2:FE
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       21AB1587D6203D8210801BF18A57D199AF419DD3
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6530303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:00 +0000
ROA not before:           Fri 17 Jan 2025 14:40:00 +0000
ROA not after:            Fri 16 Jan 2026 14:45:00 +0000
asID:                     269730
IP address blocks:        2803:5160:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ab:15:87:d6:20:3d:82:10:80:1b:f1:8a:57:d1:99:af:41:9d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:00 2025 GMT
            Not After : Jan 16 14:45:00 2026 GMT
        Subject: CN=288C1CBE9A80B581FAA489CD22A5B0730AF7A2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:ca:36:6f:72:56:14:9e:87:cb:63:83:6d:
                    77:67:73:53:99:a2:9c:5b:e2:01:55:0b:0c:d4:39:
                    63:19:ba:c9:d9:2c:7e:1f:b9:ea:f1:a4:fc:a4:2d:
                    a2:38:5d:ff:71:ee:72:13:0f:49:fd:a1:6d:d4:fd:
                    3d:56:cd:df:9e:1a:6e:6b:02:76:2a:36:3a:ea:89:
                    5a:c1:27:84:11:38:24:f5:bb:0c:42:55:b7:2b:0f:
                    44:7e:a6:3e:ef:8a:2a:af:50:bc:39:60:8c:60:6a:
                    06:9c:1f:8e:19:16:6c:2a:88:9f:1c:1d:7b:b4:e7:
                    ca:b2:91:67:dc:82:1a:c2:59:34:74:ee:76:39:40:
                    66:c3:53:7b:4d:de:0d:51:19:b5:26:74:82:43:58:
                    a6:10:77:b5:7f:99:e3:88:72:3f:1e:3e:6c:bc:41:
                    35:9b:39:e7:8f:d3:6b:9f:85:dd:0c:1a:5e:75:b0:
                    9a:dd:93:12:d1:ce:7e:84:8e:f3:ed:59:df:a6:b3:
                    f3:46:58:dd:c7:9d:2d:85:f7:b3:f9:a0:7f:0e:ba:
                    31:56:cc:87:1f:12:d0:5d:6b:48:b2:9c:d1:09:1f:
                    2c:c6:63:8c:63:93:44:62:44:7c:46:2f:8c:15:bc:
                    db:45:70:69:f3:0c:17:5e:2e:fb:15:04:4d:e2:72:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8C:1C:BE:9A:80:B5:81:FA:A4:89:CD:22:A5:B0:73:0A:F7:A2:FE
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6530303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:5e:eb:65:65:37:76:d1:c5:cf:82:1b:5e:dd:5a:8c:b9:
         32:c6:29:7b:87:8e:e0:ee:d3:44:cf:6b:4f:6a:93:78:79:01:
         db:6a:0e:70:a0:fb:d0:0b:1f:17:8b:ec:9a:ee:e0:ab:b5:9b:
         38:ef:f1:c7:32:de:92:2f:e8:a8:18:ef:21:78:b4:d2:3a:71:
         17:cc:86:15:5a:71:f3:ac:94:a2:43:d3:a1:58:b1:79:fe:5d:
         a0:b6:e8:7e:f0:af:11:50:bc:3f:e1:ae:d9:c6:d0:23:fd:35:
         06:a5:8f:71:c0:40:76:b7:2e:38:29:ab:a0:05:7a:6a:a5:23:
         40:3d:a1:92:52:a4:9d:17:b4:4c:61:3f:35:02:08:e5:86:01:
         f8:47:8d:af:c9:0e:7a:bc:35:13:58:2b:74:2c:f5:bf:a2:23:
         a9:84:b2:19:cb:00:82:78:e1:74:bc:f8:48:1e:2a:93:d5:5d:
         19:95:0e:c8:37:c7:47:25:07:1f:3e:01:26:e1:23:30:bb:02:
         3e:43:d7:62:99:21:ca:00:48:1e:3b:31:40:e8:e1:07:e6:5e:
         c4:d4:18:8c:5d:70:93:d9:2e:c7:e1:77:3a:d5:97:24:99:6d:
         5a:01:62:fb:ce:b3:31:4a:3f:bc:16:fd:c1:9a:48:83:e5:09:
         13:7a:d3:06
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIasVh9YgPYIQgBvxilfRma9BndMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTAxMTcxNDQwMDBaFw0yNjAxMTYxNDQ1MDBaMDMxMTAvBgNV
BAMTKDI4OEMxQ0JFOUE4MEI1ODFGQUE0ODlDRDIyQTVCMDczMEFGN0EyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzMo2b3JWFJ6Hy2ODbXdnc1OZ
opxb4gFVCwzUOWMZusnZLH4fuerxpPykLaI4Xf9x7nITD0n9oW3U/T1Wzd+eGm5r
AnYqNjrqiVrBJ4QROCT1uwxCVbcrD0R+pj7viiqvULw5YIxgagacH44ZFmwqiJ8c
HXu058qykWfcghrCWTR07nY5QGbDU3tN3g1RGbUmdIJDWKYQd7V/meOIcj8ePmy8
QTWbOeeP02ufhd0MGl51sJrdkxLRzn6EjvPtWd+ms/NGWN3HnS2F97P5oH8OujFW
zIcfEtBda0iynNEJHyzGY4xjk0RiRHxGL4wVvNtFcGnzDBdeLvsVBE3icmIlAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUKIwcvpqAtYH6pInNIqWwcwr3ov4wHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANRYA4wDQYJKoZIhvcNAQELBQADggEBADyAXutlZTd20cXPghte3VqMuTLG
KXuHjuDu00TPa09qk3h5AdtqDnCg+9ALHxeL7Jru4Ku1mzjv8ccy3pIv6KgY7yF4
tNI6cRfMhhVacfOslKJD06FYsXn+XaC26H7wrxFQvD/hrtnG0CP9NQalj3HAQHa3
Ljgpq6AFemqlI0A9oZJSpJ0XtExhPzUCCOWGAfhHja/JDnq8NRNYK3Qs9b+iI6mE
shnLAIJ44XS8+EgeKpPVXRmVDsg3x0clBx8+ASbhIzC7Aj5D12KZIcoASB47MUDo
4QfmXsTUGIxdcJPZLsfhdzrVlySZbVoBYvvOszFKP7wW/cGaSIPlCRN60wY=
-----END CERTIFICATE-----