Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa
File:                     323830333a3532303a3a2f33322d3332203d3e20323730303839.roa (raw, json)
Hash identifier:          v18LDlP3SgyUA00YGjB9P6Bk+lkbs1LecdL1YJJHlZY=
Subject key identifier:   41:2B:48:D7:84:09:DB:4E:05:DB:AD:FB:45:66:28:34:23:83:0B:0A
Certificate issuer:       /CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
Certificate serial:       7BB0D132B83BCC6658F5DD9DF3D5B9C63B5FA141
Authority key identifier: A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa
Signing time:             Tue 04 Feb 2025 18:32:20 +0000
ROA not before:           Tue 04 Feb 2025 18:27:20 +0000
ROA not after:            Tue 03 Feb 2026 18:32:20 +0000
asID:                     270089
IP address blocks:        2803:520::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b0:d1:32:b8:3b:cc:66:58:f5:dd:9d:f3:d5:b9:c6:3b:5f:a1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
        Validity
            Not Before: Feb  4 18:27:20 2025 GMT
            Not After : Feb  3 18:32:20 2026 GMT
        Subject: CN=412B48D78409DB4E05DBADFB4566283423830B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:33:4d:61:ff:65:c2:fb:b4:01:2f:27:4f:
                    a0:aa:cd:2a:3d:19:5d:2f:c8:13:80:7b:2c:19:25:
                    8c:20:e3:73:83:55:47:e8:36:04:af:5a:05:01:11:
                    27:61:88:d6:93:2d:c6:c2:9a:ed:2d:ff:1d:c4:0f:
                    2a:96:94:2c:e2:bd:88:4d:f4:33:90:ef:66:cf:16:
                    2f:ec:ff:39:26:1a:17:71:00:c5:7d:c4:7e:d0:03:
                    52:81:0e:98:cb:b5:5e:37:b0:13:7f:f2:1c:e4:c0:
                    02:4f:38:5e:85:17:08:67:12:e9:76:b3:cc:b6:2f:
                    87:c4:07:4d:9d:3f:30:8d:cd:94:c6:9b:18:59:a1:
                    07:79:56:d6:1e:05:b9:6e:99:a0:28:e7:0e:1e:d4:
                    43:8b:4d:a1:03:d8:d3:d8:29:08:10:17:a8:72:08:
                    31:80:a8:ea:31:ed:ae:38:a4:9c:7c:be:06:ea:03:
                    3f:10:b7:f0:a3:99:8f:09:26:d1:32:f3:c3:2a:e2:
                    40:9a:54:43:bb:c2:e2:9a:f4:71:0b:f0:f2:4a:80:
                    cb:59:4a:71:30:91:88:8c:c0:f2:6a:8f:19:e3:1d:
                    8e:e7:91:e1:29:92:a2:d9:59:94:72:0a:b9:65:e6:
                    a4:b9:ae:78:08:20:17:88:c5:d5:e1:f5:64:3d:97:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2B:48:D7:84:09:DB:4E:05:DB:AD:FB:45:66:28:34:23:83:0B:0A
            X509v3 Authority Key Identifier:
                keyid:A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:520::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:02:ee:0e:89:1c:6d:32:00:e8:3c:ca:9f:4c:39:77:89:
         21:25:d3:be:d7:0c:e2:fb:70:f7:ab:0e:9f:19:5e:c5:9d:30:
         64:97:b5:cb:2a:3f:51:a7:df:97:a6:ac:32:ca:9a:ff:05:73:
         60:39:01:cc:24:97:98:5a:32:0e:9e:18:26:47:a3:92:61:e2:
         84:22:4f:08:ea:07:6d:e9:32:ed:c0:94:ed:47:1a:b2:af:31:
         82:df:a5:76:fb:b8:51:c0:7c:81:7b:ec:7e:d0:44:23:6c:bd:
         e7:61:1d:cd:c3:e9:ae:1c:b0:cf:b8:87:5e:87:04:bc:30:bf:
         93:2f:cd:1d:38:4b:66:a5:02:47:48:92:2c:0b:e2:51:7a:36:
         95:2c:71:78:78:5c:76:20:ee:25:ab:0c:d5:4e:52:3d:ef:1c:
         67:d2:d2:fd:a9:db:e8:54:82:5d:66:0b:92:03:46:97:5a:a4:
         44:f9:07:72:85:b4:14:db:53:78:76:d0:1a:00:f3:20:5c:2f:
         93:e7:f1:b3:e6:ca:e0:66:ef:67:5d:ad:e8:12:a1:66:2e:41:
         3d:36:de:af:80:82:84:21:4d:ba:16:ce:9a:fe:fe:4c:a9:a7:
         a4:cc:3f:2f:35:b0:25:d0:51:bf:b6:55:34:92:21:01:1c:24:
         fc:4b:fa:85
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUe7DRMrg7zGZY9d2d89W5xjtfoUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQjkxRTdEQkUyRkM2NkFCQkQwQjJGNjJCQjkyNDQ1
MDVCNzVCMzAeFw0yNTAyMDQxODI3MjBaFw0yNjAyMDMxODMyMjBaMDMxMTAvBgNV
BAMTKDQxMkI0OEQ3ODQwOURCNEUwNURCQURGQjQ1NjYyODM0MjM4MzBCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJDNNYf9lwvu0AS8nT6CqzSo9
GV0vyBOAeywZJYwg43ODVUfoNgSvWgUBESdhiNaTLcbCmu0t/x3EDyqWlCzivYhN
9DOQ72bPFi/s/zkmGhdxAMV9xH7QA1KBDpjLtV43sBN/8hzkwAJPOF6FFwhnEul2
s8y2L4fEB02dPzCNzZTGmxhZoQd5VtYeBblumaAo5w4e1EOLTaED2NPYKQgQF6hy
CDGAqOox7a44pJx8vgbqAz8Qt/CjmY8JJtEy88Mq4kCaVEO7wuKa9HEL8PJKgMtZ
SnEwkYiMwPJqjxnjHY7nkeEpkqLZWZRyCrll5qS5rngIIBeIxdXh9WQ9l1MxAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUQStI14QJ204F2637RWYoNCODCwowHwYDVR0j
BBgwFoAUphuR59vi/GarvQsvYruSRFBbdbMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMEY4Mjc3NkRFRkRENjlGQTk0RUQ5MDAxMkNERUVCQ0I3
NzA1RDNDOEUwQUI0NDMzNDQ0MkEwQzJDQkJCMTA1LzAvQTYxQjkxRTdEQkUyRkM2
NkFCQkQwQjJGNjJCQjkyNDQ1MDVCNzVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjFCOTFFN0RCRTJGQzY2QUJC
RDBCMkY2MkJCOTI0NDUwNUI3NUIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTBGODI3NzZERUZERDY5RkE5NEVEOTAwMTJDREVFQkNCNzcwNUQzQzhF
MEFCNDQzMzQ0NDJBMEMyQ0JCQjEwNS8wLzMyMzgzMDMzM2EzNTMyMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwUgMA0G
CSqGSIb3DQEBCwUAA4IBAQAWLALuDokcbTIA6DzKn0w5d4khJdO+1wzi+3D3qw6f
GV7FnTBkl7XLKj9Rp9+Xpqwyypr/BXNgOQHMJJeYWjIOnhgmR6OSYeKEIk8I6gdt
6TLtwJTtRxqyrzGC36V2+7hRwHyBe+x+0EQjbL3nYR3Nw+muHLDPuIdehwS8ML+T
L80dOEtmpQJHSJIsC+JRejaVLHF4eFx2IO4lqwzVTlI97xxn0tL9qdvoVIJdZguS
A0aXWqRE+QdyhbQU21N4dtAaAPMgXC+T5/Gz5srgZu9nXa3oEqFmLkE9Nt6vgIKE
IU26Fs6a/v5MqaekzD8vNbAl0FG/tlU0kiEBHCT8S/qF
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:47 2025 by rpki-client