Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa
File:                     323830303a3232303a3a2f33322d3438203d3e203133353835.roa (raw, json)
Hash identifier:          kIzFYPOW39oSNog/cQznSZXot+/rpLL1n6ZhONaxGkc=
Subject key identifier:   DD:4C:2D:79:A1:74:32:8E:4B:3E:6A:69:B1:7D:DB:15:83:90:BE:F4
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       47A03C483B9CD7AD1EF6F754F0CB757FBE12D461
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa
Signing time:             Tue 04 Feb 2025 20:03:00 +0000
ROA not before:           Tue 04 Feb 2025 19:58:00 +0000
ROA not after:            Tue 03 Feb 2026 20:03:00 +0000
asID:                     13585
IP address blocks:        2800:220::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a0:3c:48:3b:9c:d7:ad:1e:f6:f7:54:f0:cb:75:7f:be:12:d4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Feb  4 19:58:00 2025 GMT
            Not After : Feb  3 20:03:00 2026 GMT
        Subject: CN=DD4C2D79A174328E4B3E6A69B17DDB158390BEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:2a:6a:73:b6:c4:d2:84:01:ae:26:ad:70:
                    54:fb:30:83:df:fd:a5:f3:b4:67:d8:3c:9c:e1:ed:
                    4d:b1:d5:44:32:3c:5e:d5:b4:20:ff:3a:26:47:80:
                    31:d1:f9:7d:c2:b1:9a:2f:76:b0:80:e5:48:ac:8e:
                    9e:d0:0d:eb:6b:d9:43:9b:f7:33:f5:f1:91:ae:69:
                    07:f4:42:3a:55:78:b7:f2:d7:a6:ee:b3:01:8f:54:
                    7f:d0:f7:4a:77:c4:2e:9e:df:b8:c3:22:c3:d6:16:
                    e5:e5:a1:b9:6e:dd:76:cc:0d:8b:84:e0:e2:1d:b7:
                    8f:c9:0f:bb:d9:db:c9:c9:8e:9b:9e:88:96:2a:44:
                    d8:74:d9:19:31:4a:13:e0:55:fe:bc:b3:da:9b:00:
                    74:52:c8:dd:99:5b:9d:90:39:88:a6:fb:30:ea:85:
                    f1:50:62:c7:04:84:97:ae:da:ef:27:57:da:90:3a:
                    99:6f:63:b2:27:0d:55:b8:e3:ce:df:8e:cb:c1:91:
                    31:00:38:a8:b8:e0:87:45:4a:fc:48:c4:fd:cc:63:
                    51:04:44:2a:96:9d:a9:9f:59:36:db:46:b9:1d:c1:
                    a6:d6:e2:e2:e7:9f:9f:e7:a0:08:46:ed:d0:65:03:
                    92:99:f3:ab:46:0a:b2:87:75:b3:ab:19:c9:13:28:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4C:2D:79:A1:74:32:8E:4B:3E:6A:69:B1:7D:DB:15:83:90:BE:F4
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:31:f2:aa:90:a4:b8:91:75:4d:82:b0:0f:09:63:d8:f9:fb:
         27:1a:0d:c1:89:7a:96:c0:a8:22:67:85:a5:7b:a0:b0:3a:f5:
         73:0a:02:7c:87:d4:87:f6:01:97:1d:af:fb:6b:a7:b9:68:ca:
         25:38:a0:89:e4:f0:fa:51:fb:ef:09:e7:89:b3:2a:09:3c:b1:
         f5:81:de:a5:82:a7:31:93:b5:8e:d6:ce:a7:a4:8a:c8:11:98:
         d6:b4:1c:89:d1:67:09:03:97:98:f1:ac:cf:9a:e7:59:3f:e2:
         c9:db:8b:d5:b9:6c:ad:7a:3a:b3:bc:7a:4d:e3:57:31:0d:c8:
         1e:1e:94:6b:ee:3e:17:22:7e:78:de:25:10:f7:7a:12:09:76:
         4d:26:c7:8d:bd:de:3d:27:d3:84:ef:32:ad:31:ba:28:35:c5:
         1e:c2:15:7e:f2:6f:74:e1:2c:c1:d5:0f:f1:90:ab:18:04:fd:
         76:fb:46:07:fc:ae:da:85:e6:cd:92:95:db:17:a7:04:ce:84:
         10:39:73:7e:30:62:8e:37:6d:87:8a:bb:ae:af:c2:4c:27:13:
         be:c0:61:81:4a:80:b5:8b:c4:9d:b9:6b:ba:78:74:a5:ea:b0:
         1d:30:44:2a:39:41:49:83:96:93:07:2f:cc:70:00:9a:ae:d6:
         19:c7:9e:c7
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUR6A8SDuc160e9vdU8Mt1f74S1GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0QkM4NzhBMDExNjczMzkxN0ZBRTcxQTk4RDc5OUNB
NDQ0MkQ2NjAeFw0yNTAyMDQxOTU4MDBaFw0yNjAyMDMyMDAzMDBaMDMxMTAvBgNV
BAMTKERENEMyRDc5QTE3NDMyOEU0QjNFNkE2OUIxN0REQjE1ODM5MEJFRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0ypqc7bE0oQBriatcFT7MIPf
/aXztGfYPJzh7U2x1UQyPF7VtCD/OiZHgDHR+X3CsZovdrCA5Uisjp7QDetr2UOb
9zP18ZGuaQf0QjpVeLfy16buswGPVH/Q90p3xC6e37jDIsPWFuXloblu3XbMDYuE
4OIdt4/JD7vZ28nJjpueiJYqRNh02RkxShPgVf68s9qbAHRSyN2ZW52QOYim+zDq
hfFQYscEhJeu2u8nV9qQOplvY7InDVW4487fjsvBkTEAOKi44IdFSvxIxP3MY1EE
RCqWnamfWTbbRrkdwabW4uLnn5/noAhG7dBlA5KZ86tGCrKHdbOrGckTKAe3AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU3UwteaF0Mo5LPmppsX3bFYOQvvQwHwYDVR0j
BBgwFoAUGUvIeKARZzORf65xqY15nKRELWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDJDOUY2MjAyRTZCMkUwQjBENzIwOTIxNTU4RThDNjNB
RTZEMzcwNTMzNTg1NjYyRjJENjk0M0Y5MDlCQjdDLzAvMTk0QkM4NzhBMDExNjcz
MzkxN0ZBRTcxQTk4RDc5OUNBNDQ0MkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTRCQzg3OEEwMTE2NzMzOTE3
RkFFNzFBOThENzk5Q0E0NDQyRDY2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyQzlGNjIwMkU2QjJFMEIwRDcyMDkyMTU1OEU4QzYzQUU2RDM3MDUz
MzU4NTY2MkYyRDY5NDNGOTA5QkI3Qy8wLzMyMzgzMDMwM2EzMjMyMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTMzMzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAACIDANBgkq
hkiG9w0BAQsFAAOCAQEAHTHyqpCkuJF1TYKwDwlj2Pn7JxoNwYl6lsCoImeFpXug
sDr1cwoCfIfUh/YBlx2v+2unuWjKJTigieTw+lH77wnnibMqCTyx9YHepYKnMZO1
jtbOp6SKyBGY1rQcidFnCQOXmPGsz5rnWT/iyduL1blsrXo6s7x6TeNXMQ3IHh6U
a+4+FyJ+eN4lEPd6Egl2TSbHjb3ePSfThO8yrTG6KDXFHsIVfvJvdOEswdUP8ZCr
GAT9dvtGB/yu2oXmzZKV2xenBM6EEDlzfjBijjdth4q7rq/CTCcTvsBhgUqAtYvE
nblrunh0peqwHTBEKjlBSYOWkwcvzHAAmq7WGceexw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:22:54 2025 by rpki-client