Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          KrTi4enHN7C8Ek/mk38opeXHZy9LN+usvOEtkf6JbyQ=
Subject key identifier:   BD:52:0E:8F:68:2B:40:97:D6:95:89:BF:DD:4F:0B:BB:59:B7:97:15
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       10BD37F4C85CBB31FCDCEE1D44A3E5DCF1A97E78
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:31 +0000
ROA not before:           Tue 04 Feb 2025 18:47:31 +0000
ROA not after:            Tue 03 Feb 2026 18:52:31 +0000
asID:                     263762
IP address blocks:        2803:5180:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:37:f4:c8:5c:bb:31:fc:dc:ee:1d:44:a3:e5:dc:f1:a9:7e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:31 2025 GMT
            Not After : Feb  3 18:52:31 2026 GMT
        Subject: CN=BD520E8F682B4097D69589BFDD4F0BBB59B79715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:63:d0:0c:f5:cf:33:f3:cf:7d:3c:45:dd:
                    0c:4a:67:da:84:65:63:fc:48:38:a3:2f:2f:7d:6e:
                    ce:0f:db:3b:5b:b0:54:ad:25:2b:2f:9d:36:3d:05:
                    ed:cb:05:a8:cc:04:88:9f:08:cd:c4:70:ac:c5:8c:
                    0a:03:68:81:ae:e7:07:ba:74:14:3b:86:df:62:39:
                    25:8d:fb:f9:31:18:dc:51:0a:c2:4f:f2:4d:f4:07:
                    e5:74:65:d5:47:42:71:87:bc:62:94:4d:00:19:6f:
                    da:d8:ab:28:4a:6d:7c:03:58:ca:54:56:ba:0d:82:
                    36:3e:8e:cf:83:2d:40:74:de:e9:93:6e:8e:31:14:
                    d5:f0:f8:fa:c4:3d:bf:44:27:75:1c:63:a1:10:17:
                    87:a1:30:c9:98:e3:b5:f4:72:27:36:15:f8:b5:7e:
                    2d:96:c6:de:79:73:74:bd:72:06:23:44:e2:71:40:
                    94:57:ad:66:54:5e:18:ce:68:8e:c9:31:d0:24:16:
                    d0:8e:83:d9:3f:2a:3b:20:39:15:72:e4:6d:34:f8:
                    b1:b6:84:b8:7c:7b:cd:cc:f6:11:28:d4:f2:99:a2:
                    5f:72:cd:32:90:aa:32:02:a6:a8:28:70:68:2c:32:
                    65:71:25:2f:5d:0e:0a:58:e7:5a:45:72:44:89:f0:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:52:0E:8F:68:2B:40:97:D6:95:89:BF:DD:4F:0B:BB:59:B7:97:15
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         59:48:01:65:31:cf:d4:44:93:40:b5:3f:12:07:4a:77:e9:77:
         75:81:29:31:af:81:63:97:68:48:3d:1c:7f:cd:21:3b:79:7f:
         98:f2:05:78:ee:7b:98:7b:54:86:1b:06:4d:72:de:7d:6d:e1:
         77:7a:67:fb:ea:c2:72:61:18:6c:fc:63:7d:dc:e7:ee:77:68:
         be:da:25:10:49:5f:de:d3:ea:61:15:13:50:58:cc:28:7a:3d:
         23:e6:92:3a:d1:b9:11:94:d8:ef:3a:70:68:1e:00:5b:4a:53:
         33:7d:35:6c:cf:3b:ff:17:bd:c5:44:1e:1f:1d:2a:85:d7:4a:
         6c:3d:7f:30:fb:02:7c:66:b6:04:8f:53:ed:2c:a1:cb:bb:8b:
         61:da:6c:b3:8b:c1:3f:24:54:42:e1:99:8e:fc:f1:6a:e4:ff:
         d5:46:27:53:8a:fa:ae:f0:74:e8:2f:72:09:b0:1b:b7:86:b1:
         91:2c:73:94:5d:3c:69:ca:17:4f:f3:16:72:b4:93:8f:3b:b3:
         c3:59:60:ad:84:de:af:3a:4d:74:2d:74:3b:bd:cc:65:06:90:
         42:69:d7:a6:21:ea:c8:c6:55:e2:a3:b9:0c:35:c4:5e:1f:4e:
         99:0e:76:58:8a:1c:be:0b:c5:be:c7:7f:c6:52:0d:13:20:ab:
         3d:46:f8:cc
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUEL039MhcuzH83O4dRKPl3PGpfngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNTAyMDQxODQ3MzFaFw0yNjAyMDMxODUyMzFaMDMxMTAvBgNV
BAMTKEJENTIwRThGNjgyQjQwOTdENjk1ODlCRkRENEYwQkJCNTlCNzk3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPGPQDPXPM/PPfTxF3QxKZ9qE
ZWP8SDijLy99bs4P2ztbsFStJSsvnTY9Be3LBajMBIifCM3EcKzFjAoDaIGu5we6
dBQ7ht9iOSWN+/kxGNxRCsJP8k30B+V0ZdVHQnGHvGKUTQAZb9rYqyhKbXwDWMpU
VroNgjY+js+DLUB03umTbo4xFNXw+PrEPb9EJ3UcY6EQF4ehMMmY47X0cic2Ffi1
fi2Wxt55c3S9cgYjROJxQJRXrWZUXhjOaI7JMdAkFtCOg9k/KjsgORVy5G00+LG2
hLh8e83M9hEo1PKZol9yzTKQqjICpqgocGgsMmVxJS9dDgpY51pFckSJ8Dg9AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUvVIOj2grQJfWlYm/3U8Lu1m3lxUwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1GAIDANBgkqhkiG9w0BAQsFAAOCAQEAWUgBZTHP1ESTQLU/EgdKd+l3
dYEpMa+BY5doSD0cf80hO3l/mPIFeO57mHtUhhsGTXLefW3hd3pn++rCcmEYbPxj
fdzn7ndovtolEElf3tPqYRUTUFjMKHo9I+aSOtG5EZTY7zpwaB4AW0pTM301bM87
/xe9xUQeHx0qhddKbD1/MPsCfGa2BI9T7Syhy7uLYdpss4vBPyRUQuGZjvzxauT/
1UYnU4r6rvB06C9yCbAbt4axkSxzlF08acoXT/MWcrSTjzuzw1lgrYTerzpNdC10
O73MZQaQQmnXpiHqyMZV4qO5DDXEXh9OmQ52WIocvgvFvsd/xlINEyCrPUb4zA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:31 2025 by rpki-client