Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a383030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a383030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          3MDENgFa8jYN6rCt6r14UfXsS0yUUE8HmN+kbi3oJHE=
Subject key identifier:   97:33:BD:74:9B:DA:AB:9F:63:60:88:21:AB:04:B8:10:C7:FB:E3:43
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       14512531662DA27B907CE8CCE16F9633743A76FE
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a383030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:30 +0000
ROA not before:           Tue 04 Feb 2025 18:47:30 +0000
ROA not after:            Tue 03 Feb 2026 18:52:30 +0000
asID:                     263762
IP address blocks:        2803:5180:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:51:25:31:66:2d:a2:7b:90:7c:e8:cc:e1:6f:96:33:74:3a:76:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:30 2025 GMT
            Not After : Feb  3 18:52:30 2026 GMT
        Subject: CN=9733BD749BDAAB9F63608821AB04B810C7FBE343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:7b:55:af:8a:98:3c:98:83:7d:5c:98:59:
                    00:30:34:ce:e9:7b:00:96:50:45:ff:98:1d:c0:58:
                    79:8b:86:a7:ba:cc:bd:9c:e0:71:00:55:77:42:2e:
                    ff:e5:c5:fa:fc:4b:d6:64:3a:ed:df:b5:e4:fa:65:
                    e7:92:5c:01:c9:e6:5e:11:6a:b4:ba:a2:3a:b3:63:
                    73:25:cd:a3:f3:e0:2b:f5:b1:0d:74:44:c1:fb:d8:
                    19:bc:db:bb:70:37:4c:03:92:e5:83:16:02:f8:c4:
                    8b:fd:0a:84:99:04:9a:94:1c:14:5b:45:15:47:2d:
                    da:6e:74:9f:54:61:79:65:05:bd:7d:90:5d:8e:83:
                    61:0e:f9:ae:65:22:07:eb:3d:ee:f2:7e:a6:47:8c:
                    56:cd:4b:7e:cb:a3:5e:6f:c5:0c:45:06:e1:44:0d:
                    67:65:66:5c:3c:89:3f:78:59:7e:93:41:3b:16:95:
                    bb:7a:fe:c5:11:fb:f4:66:e1:a3:e1:d0:c2:ff:67:
                    bb:94:57:a4:31:94:85:b3:b3:73:56:7b:7e:bc:e5:
                    06:9d:96:1a:52:25:70:34:fa:30:a6:25:49:fd:09:
                    e1:cf:90:eb:de:15:4f:32:dd:94:60:13:55:42:d7:
                    92:da:69:5a:90:8a:0e:68:ae:5d:50:96:a2:cd:b6:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:BD:74:9B:DA:AB:9F:63:60:88:21:AB:04:B8:10:C7:FB:E3:43
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a383030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:ac:4a:4e:c9:93:15:48:a0:1f:06:d2:f8:41:51:f5:b9:
         61:8b:a1:4b:23:ad:28:68:5d:b1:06:9b:0f:67:8a:2c:da:99:
         de:87:99:fc:42:b9:6c:ce:92:22:9c:c7:65:97:e3:d5:cc:df:
         1c:82:72:9d:83:78:9f:39:85:01:23:4b:22:e8:47:21:b4:ca:
         32:0f:9a:81:fd:00:ae:0b:fa:05:7e:0b:94:77:29:31:de:61:
         2b:a8:ce:5f:6e:89:09:09:40:85:c3:b2:7b:cb:3c:bb:c9:6a:
         e4:50:d0:c5:77:47:16:7c:ae:da:33:6d:15:30:d2:9a:79:e3:
         b9:6f:58:7a:0f:1a:a7:ad:5d:f9:23:92:f8:01:f8:10:32:15:
         cf:f8:99:0e:61:c7:56:35:a4:f0:12:07:81:2c:75:e7:98:32:
         c0:ee:75:97:7e:0d:15:47:b2:fa:8e:e6:1e:3d:55:fc:c7:f3:
         f7:88:e1:39:6f:e7:44:82:5d:b1:67:71:59:f2:5d:28:8d:5f:
         0d:52:ab:44:3b:b6:b7:1d:2d:d8:d8:a6:7f:6c:93:6a:23:1f:
         fc:9f:af:85:56:fa:66:80:1b:2a:05:8a:ee:a7:99:fc:f3:e7:
         11:5e:ef:75:b9:0f:63:ad:73:13:92:74:e2:fc:dc:b7:ac:7f:
         72:f6:d4:fe
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUFFElMWYtonuQfOjM4W+WM3Q6dv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNTAyMDQxODQ3MzBaFw0yNjAyMDMxODUyMzBaMDMxMTAvBgNV
BAMTKDk3MzNCRDc0OUJEQUFCOUY2MzYwODgyMUFCMDRCODEwQzdGQkUzNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDII3tVr4qYPJiDfVyYWQAwNM7p
ewCWUEX/mB3AWHmLhqe6zL2c4HEAVXdCLv/lxfr8S9ZkOu3fteT6ZeeSXAHJ5l4R
arS6ojqzY3MlzaPz4Cv1sQ10RMH72Bm827twN0wDkuWDFgL4xIv9CoSZBJqUHBRb
RRVHLdpudJ9UYXllBb19kF2Og2EO+a5lIgfrPe7yfqZHjFbNS37Lo15vxQxFBuFE
DWdlZlw8iT94WX6TQTsWlbt6/sUR+/Rm4aPh0ML/Z7uUV6QxlIWzs3NWe3685Qad
lhpSJXA0+jCmJUn9CeHPkOveFU8y3ZRgE1VC15LaaVqQig5orl1QlqLNtuT7AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUlzO9dJvaq59jYIghqwS4EMf740MwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzgz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1GAgDANBgkqhkiG9w0BAQsFAAOCAQEAVSysSk7JkxVIoB8G0vhBUfW5
YYuhSyOtKGhdsQabD2eKLNqZ3oeZ/EK5bM6SIpzHZZfj1czfHIJynYN4nzmFASNL
IuhHIbTKMg+agf0Argv6BX4LlHcpMd5hK6jOX26JCQlAhcOye8s8u8lq5FDQxXdH
Fnyu2jNtFTDSmnnjuW9Yeg8ap61d+SOS+AH4EDIVz/iZDmHHVjWk8BIHgSx155gy
wO51l34NFUey+o7mHj1V/Mfz94jhOW/nRIJdsWdxWfJdKI1fDVKrRDu2tx0t2Nim
f2yTaiMf/J+vhVb6ZoAbKgWK7qeZ/PPnEV7vdbkPY61zE5J04vzct6x/cvbU/g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:52:37 2025 by rpki-client