Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa
File:                     323830333a323230303a3a2f33322d3332203d3e20323633313734.roa (raw, json)
Hash identifier:          qOGPNheX5Gc4EzTAQSY1LxCrKuhpywY/a54VqXlal74=
Subject key identifier:   0A:AF:02:58:8A:45:AB:94:9D:79:AB:BF:9D:3B:23:E9:8B:9D:50:F2
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       064FE25644644B97EE9E96FC7393EBE475EB7784
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa
Signing time:             Tue 04 Feb 2025 18:50:00 +0000
ROA not before:           Tue 04 Feb 2025 18:45:00 +0000
ROA not after:            Tue 03 Feb 2026 18:50:00 +0000
asID:                     263174
IP address blocks:        2803:2200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4f:e2:56:44:64:4b:97:ee:9e:96:fc:73:93:eb:e4:75:eb:77:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Feb  4 18:45:00 2025 GMT
            Not After : Feb  3 18:50:00 2026 GMT
        Subject: CN=0AAF02588A45AB949D79ABBF9D3B23E98B9D50F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:d3:e3:84:11:aa:c1:76:6b:e1:d1:5a:2a:
                    00:d6:3e:8f:98:7b:b5:25:43:b2:a1:cc:80:83:2f:
                    6b:23:29:af:4e:77:41:8d:a8:bf:4e:c1:f6:5c:5e:
                    4c:b8:5a:87:b1:be:c2:07:e1:61:f5:3c:16:50:0a:
                    a5:61:56:3c:95:9f:c2:dc:99:a6:c7:31:ee:4a:ef:
                    e3:3c:d6:f2:47:8c:81:33:5a:93:86:11:e5:72:1c:
                    eb:aa:9c:06:c3:0e:8e:ed:3c:43:b9:d1:49:00:75:
                    1c:27:39:38:eb:86:4d:b8:29:16:c2:11:c3:ab:28:
                    12:f1:59:e6:53:49:d2:a3:8f:a2:85:29:b4:07:80:
                    01:eb:da:40:d8:f5:82:8b:f1:71:42:f7:08:e9:c7:
                    13:5d:77:0e:36:92:66:40:48:ff:fd:fb:14:d3:f6:
                    45:16:21:03:3f:46:6a:1b:14:a2:9f:2e:a8:a2:95:
                    f3:bf:a8:38:1b:f8:eb:02:6b:ea:e0:3c:c4:c9:8f:
                    b9:68:04:6e:e1:dc:72:a3:84:3d:d8:a7:bf:e4:d2:
                    00:07:0d:50:d8:42:bd:75:02:e4:39:5a:e3:fc:80:
                    d8:e0:3c:dc:4a:d4:62:b8:aa:77:c6:4d:27:a7:52:
                    aa:4b:6d:c0:d8:b7:31:2e:f7:23:18:c4:21:8f:65:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:02:58:8A:45:AB:94:9D:79:AB:BF:9D:3B:23:E9:8B:9D:50:F2
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:0f:c8:4d:4f:5e:82:67:d4:9f:f3:2c:7d:0d:43:77:47:
         64:0c:c0:fa:7d:96:10:dc:b5:4f:60:ca:f8:f5:6c:7b:1f:9f:
         6b:a1:67:44:4c:99:f5:2c:24:17:37:07:81:ab:ae:9e:e6:57:
         cb:ca:8f:e8:57:16:e1:6d:36:fc:7e:77:7f:45:73:76:21:7b:
         8a:f9:23:18:d6:7e:82:49:4a:b6:75:8f:78:7f:f0:28:1c:62:
         77:ed:86:db:22:f1:77:ee:bb:2c:b2:5e:35:9a:31:dd:66:88:
         ee:9d:8d:2b:f7:91:32:c1:78:1a:ed:c2:08:4e:a5:58:55:0e:
         1c:b0:b7:64:fa:b3:7d:f4:76:b0:2c:b6:7f:e3:35:70:10:91:
         bb:70:a9:de:3a:b2:e6:9e:e2:b2:94:ea:21:37:9a:84:bf:30:
         26:d3:59:f0:73:64:96:d0:3e:b6:98:a6:ae:6c:ff:46:59:23:
         84:db:c6:c3:af:39:b5:12:76:c9:0c:1b:a6:36:36:2a:4d:43:
         c2:4b:a8:82:74:3a:7e:9c:92:fd:0e:2c:36:56:d3:02:55:4c:
         1d:e7:b2:e5:71:26:24:a1:e3:54:0a:df:06:06:31:f9:18:c0:
         e7:8f:8a:a7:7d:3c:1e:53:89:18:31:b8:66:9d:9e:1f:40:c9:
         2d:29:a5:62
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBk/iVkRkS5funpb8c5Pr5HXrd4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENzkzQTdDREQxREUzOEQyRjQ1RTVFNDA4NjIyQjk1
QUJGRkY4QjAeFw0yNTAyMDQxODQ1MDBaFw0yNjAyMDMxODUwMDBaMDMxMTAvBgNV
BAMTKDBBQUYwMjU4OEE0NUFCOTQ5RDc5QUJCRjlEM0IyM0U5OEI5RDUwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdl9PjhBGqwXZr4dFaKgDWPo+Y
e7UlQ7KhzICDL2sjKa9Od0GNqL9OwfZcXky4WoexvsIH4WH1PBZQCqVhVjyVn8Lc
mabHMe5K7+M81vJHjIEzWpOGEeVyHOuqnAbDDo7tPEO50UkAdRwnOTjrhk24KRbC
EcOrKBLxWeZTSdKjj6KFKbQHgAHr2kDY9YKL8XFC9wjpxxNddw42kmZASP/9+xTT
9kUWIQM/RmobFKKfLqiilfO/qDgb+OsCa+rgPMTJj7loBG7h3HKjhD3Yp7/k0gAH
DVDYQr11AuQ5WuP8gNjgPNxK1GK4qnfGTSenUqpLbcDYtzEu9yMYxCGPZWX9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUCq8CWIpFq5Sdeau/nTsj6YudUPIwHwYDVR0j
BBgwFoAUk9eTp83R3jjS9F5eQIYiuVq//4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EN0QxMDcxODUxQTJFQzUyNjQzNjI2QUMzRjFBQkMwNjg1
NkRBRDI1MEUwNDJCMTY4OTczQzBEQ0EyNEUxRjgzLzAvOTNENzkzQTdDREQxREUz
OEQyRjQ1RTVFNDA4NjIyQjk1QUJGRkY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q3OTNBN0NERDFERTM4RDJG
NDVFNUU0MDg2MjJCOTVBQkZGRjhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDdEMTA3MTg1MUEyRUM1MjY0MzYyNkFDM0YxQUJDMDY4NTZEQUQyNTBF
MDQyQjE2ODk3M0MwRENBMjRFMUY4My8wLzMyMzgzMDMzM2EzMjMyMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMxMzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIgAw
DQYJKoZIhvcNAQELBQADggEBAAWuD8hNT16CZ9Sf8yx9DUN3R2QMwPp9lhDctU9g
yvj1bHsfn2uhZ0RMmfUsJBc3B4Grrp7mV8vKj+hXFuFtNvx+d39Fc3Yhe4r5IxjW
foJJSrZ1j3h/8CgcYnfthtsi8XfuuyyyXjWaMd1miO6djSv3kTLBeBrtwghOpVhV
Dhywt2T6s330drAstn/jNXAQkbtwqd46suae4rKU6iE3moS/MCbTWfBzZJbQPraY
pq5s/0ZZI4TbxsOvObUSdskMG6Y2NipNQ8JLqIJ0On6ckv0OLDZW0wJVTB3nsuVx
JiSh41QK3wYGMfkYwOePiqd9PB5TiRgxuGadnh9AyS0ppWI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client