Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3336203d3e20323639373937.roa
File:                     323830333a6236303a3a2f33322d3336203d3e20323639373937.roa (raw, json)
Hash identifier:          ZdLoe6xWq6ZkVDwBc5I6l75FUcHR5UTd+npxGvD/E2s=
Subject key identifier:   97:EB:88:27:6C:FE:70:1B:EE:24:60:C8:35:D9:FF:86:1A:66:0F:5D
Certificate issuer:       /CN=15688E610FEC544650D7AAE0C5EEE2786FE114CD
Certificate serial:       0D504AA20D631818F23B0731D2651B8FA3CE5D95
Authority key identifier: 15:68:8E:61:0F:EC:54:46:50:D7:AA:E0:C5:EE:E2:78:6F:E1:14:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15688E610FEC544650D7AAE0C5EEE2786FE114CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3336203d3e20323639373937.roa
Signing time:             Tue 05 Mar 2024 17:50:06 +0000
ROA not before:           Tue 05 Mar 2024 17:45:06 +0000
ROA not after:            Tue 04 Mar 2025 17:50:06 +0000
asID:                     269797
IP address blocks:        2803:b60::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:50:4a:a2:0d:63:18:18:f2:3b:07:31:d2:65:1b:8f:a3:ce:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15688E610FEC544650D7AAE0C5EEE2786FE114CD
        Validity
            Not Before: Mar  5 17:45:06 2024 GMT
            Not After : Mar  4 17:50:06 2025 GMT
        Subject: CN=97EB88276CFE701BEE2460C835D9FF861A660F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:d5:11:0b:42:d4:12:04:c2:ea:53:ba:a7:
                    8f:93:b0:be:a6:1d:c9:3f:0c:45:dd:bc:a7:3a:6f:
                    51:18:cd:95:fa:65:c4:22:b0:3e:f3:c4:27:c1:94:
                    19:6d:1d:44:0d:5f:c4:8a:f4:cb:06:47:9d:23:d2:
                    f8:4e:cc:f6:63:09:68:bd:33:f7:5c:f6:3c:74:46:
                    18:1e:d6:ac:43:2f:b0:66:67:f4:dc:61:6c:a9:a0:
                    d8:47:60:5a:08:2b:1d:eb:b3:70:f2:89:82:11:80:
                    3f:25:72:f8:84:cc:7e:7b:e8:78:06:39:fd:db:e2:
                    5e:37:25:7c:bd:c4:9e:4f:e0:ac:ba:3d:05:98:24:
                    37:83:33:c6:6a:71:8e:58:a3:a9:d5:69:88:b8:69:
                    02:ba:cc:55:a1:39:e7:0d:90:f4:5a:0e:03:44:36:
                    50:7b:05:b7:c6:63:90:e6:52:b5:a0:3e:7d:36:43:
                    62:b6:de:be:96:00:04:98:c1:d1:41:44:a6:8f:bb:
                    bc:49:4e:a4:b4:88:ef:8a:82:81:f9:d9:84:09:35:
                    be:8d:0e:71:6e:75:34:85:78:56:65:2e:0d:55:3f:
                    79:7d:bc:27:c6:55:bf:e2:28:9c:fd:af:65:b6:0b:
                    aa:57:21:82:d6:78:eb:03:30:7b:9a:89:20:4f:b4:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EB:88:27:6C:FE:70:1B:EE:24:60:C8:35:D9:FF:86:1A:66:0F:5D
            X509v3 Authority Key Identifier:
                keyid:15:68:8E:61:0F:EC:54:46:50:D7:AA:E0:C5:EE:E2:78:6F:E1:14:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/15688E610FEC544650D7AAE0C5EEE2786FE114CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15688E610FEC544650D7AAE0C5EEE2786FE114CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3336203d3e20323639373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:36:02:c3:19:5b:b6:00:76:c6:ff:1f:d3:17:7d:2b:8b:71:
         d2:8d:a8:4a:80:03:60:33:57:27:4a:1d:0f:56:0d:ef:f8:82:
         d4:b9:7a:6d:7b:63:8b:89:73:0f:18:0b:33:cd:6c:a5:f1:e8:
         4b:12:3d:20:b2:95:1f:90:6c:96:e1:03:0a:47:b6:ad:74:7e:
         d1:da:ec:4d:79:02:88:7b:a7:34:c9:93:db:46:c1:ea:6d:41:
         fa:1b:ae:91:9e:82:b4:e2:56:d0:b6:d9:bc:9a:53:76:47:f1:
         c5:ef:d9:5b:de:ab:0c:74:4a:8d:e8:94:70:77:9c:60:9e:10:
         bb:db:8e:fd:9c:dc:80:94:ec:f9:9e:40:d8:c9:d4:dc:ee:fd:
         c9:bd:ba:4c:57:b8:81:ac:fe:d5:8b:ab:27:84:ea:06:86:65:
         e2:d4:57:3a:3e:cd:a7:bb:bc:ea:fb:83:4b:2c:d8:91:a7:2a:
         36:65:96:24:3d:d4:84:67:9c:a5:6f:6c:14:92:c6:8b:83:47:
         b2:83:17:a6:d1:12:7f:87:b8:ef:bf:fe:3a:e7:b8:e8:35:c3:
         25:80:3d:72:ed:43:96:e1:04:af:b6:fa:e6:47:a4:a3:d1:23:
         d4:66:aa:6d:95:b9:20:e9:b9:05:4e:9e:44:64:88:45:cf:22:
         d3:b0:c8:db
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDVBKog1jGBjyOwcx0mUbj6POXZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU2ODhFNjEwRkVDNTQ0NjUwRDdBQUUwQzVFRUUyNzg2
RkUxMTRDRDAeFw0yNDAzMDUxNzQ1MDZaFw0yNTAzMDQxNzUwMDZaMDMxMTAvBgNV
BAMTKDk3RUI4ODI3NkNGRTcwMUJFRTI0NjBDODM1RDlGRjg2MUE2NjBGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXStURC0LUEgTC6lO6p4+TsL6m
Hck/DEXdvKc6b1EYzZX6ZcQisD7zxCfBlBltHUQNX8SK9MsGR50j0vhOzPZjCWi9
M/dc9jx0Rhge1qxDL7BmZ/TcYWypoNhHYFoIKx3rs3DyiYIRgD8lcviEzH576HgG
Of3b4l43JXy9xJ5P4Ky6PQWYJDeDM8ZqcY5Yo6nVaYi4aQK6zFWhOecNkPRaDgNE
NlB7BbfGY5DmUrWgPn02Q2K23r6WAASYwdFBRKaPu7xJTqS0iO+KgoH52YQJNb6N
DnFudTSFeFZlLg1VP3l9vCfGVb/iKJz9r2W2C6pXIYLWeOsDMHuaiSBPtMoPAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUl+uIJ2z+cBvuJGDINdn/hhpmD10wHwYDVR0j
BBgwFoAUFWiOYQ/sVEZQ16rgxe7ieG/hFM0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMTI0RThFRTE0MDZGODIxQ0I0OUI1OUQ0RDA3RDg0MDA2
MTNEOTcwRTEwMEYzNTk0Qzk1OEMxOTMyMTZFRUMyLzAvMTU2ODhFNjEwRkVDNTQ0
NjUwRDdBQUUwQzVFRUUyNzg2RkUxMTRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTY4OEU2MTBGRUM1NDQ2NTBE
N0FBRTBDNUVFRTI3ODZGRTExNENELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTEyNEU4RUUxNDA2RjgyMUNCNDlCNTlENEQwN0Q4NDAwNjEzRDk3MEUx
MDBGMzU5NEM5NThDMTkzMjE2RUVDMi8wLzMyMzgzMDMzM2E2MjM2MzAzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwtgMA0G
CSqGSIb3DQEBCwUAA4IBAQCvNgLDGVu2AHbG/x/TF30ri3HSjahKgANgM1cnSh0P
Vg3v+ILUuXpte2OLiXMPGAszzWyl8ehLEj0gspUfkGyW4QMKR7atdH7R2uxNeQKI
e6c0yZPbRsHqbUH6G66RnoK04lbQttm8mlN2R/HF79lb3qsMdEqN6JRwd5xgnhC7
2479nNyAlOz5nkDYydTc7v3JvbpMV7iBrP7Vi6snhOoGhmXi1Fc6Ps2nu7zq+4NL
LNiRpyo2ZZYkPdSEZ5ylb2wUksaLg0eygxem0RJ/h7jvv/4657joNcMlgD1y7UOW
4QSvtvrmR6Sj0SPUZqptlbkg6bkFTp5EZIhFzyLTsMjb
-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:47 2024 by rpki-client on console-fra.rpki-client.org