Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36323a3a2f34382d3438203d3e203134363138.roa
File:                     323830313a303a36323a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          e1LBCOrN4fY35hXCaddoweFypml+juJh6QYB/54fHnQ=
Subject key identifier:   57:33:42:87:E9:52:1B:4A:51:0F:3E:12:84:80:F3:DD:03:9C:E6:AE
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       4878E1F07514BCC8F037FAA4C8D93D28E4A8DF0A
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36323a3a2f34382d3438203d3e203134363138.roa
Signing time:             Tue 04 Feb 2025 18:05:33 +0000
ROA not before:           Tue 04 Feb 2025 18:00:33 +0000
ROA not after:            Tue 03 Feb 2026 18:05:33 +0000
asID:                     14618
IP address blocks:        2801:0:62::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:e1:f0:75:14:bc:c8:f0:37:fa:a4:c8:d9:3d:28:e4:a8:df:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Feb  4 18:00:33 2025 GMT
            Not After : Feb  3 18:05:33 2026 GMT
        Subject: CN=57334287E9521B4A510F3E128480F3DD039CE6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:db:4c:47:04:91:07:0b:d7:6c:47:4a:30:
                    d2:94:86:c5:92:4c:0a:a1:7c:c3:cd:32:05:38:91:
                    13:0f:bd:67:e9:8f:7f:f5:3a:87:28:05:84:23:9e:
                    a0:6a:dc:18:97:ec:29:cc:b8:de:95:60:d9:77:9b:
                    47:e0:aa:3e:8c:ed:2d:a0:b5:a4:65:df:d0:1d:06:
                    8a:39:f2:48:9b:6a:2e:85:81:b5:b0:8e:4a:7d:c9:
                    15:e7:76:fb:76:a0:23:63:d2:93:64:f5:e5:4a:14:
                    8f:5c:8b:04:8e:1b:4a:09:b6:55:a7:bf:d0:e5:d8:
                    f7:4f:43:49:de:77:bd:6c:7f:93:57:dd:6e:31:ca:
                    25:6a:5c:e9:9f:95:ab:09:0d:a9:e5:4b:75:07:11:
                    f4:e0:9e:c9:37:7e:79:f3:8f:99:0f:6c:b4:bb:72:
                    51:00:7a:7d:d7:f6:2b:2f:4a:e3:88:32:bc:c6:f9:
                    85:67:9c:4d:46:16:d8:e8:ad:e5:9e:21:cb:71:ce:
                    67:95:f2:20:0a:1a:bc:24:db:38:44:72:e2:30:00:
                    8d:c5:15:70:68:40:55:35:0c:96:9d:d9:74:be:c9:
                    ab:7c:51:b6:98:f3:87:09:bf:9a:35:6b:9a:9a:af:
                    68:08:e6:b8:28:f4:c7:d7:5c:6a:05:ae:1e:a1:c9:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:42:87:E9:52:1B:4A:51:0F:3E:12:84:80:F3:DD:03:9C:E6:AE
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36323a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:e2:d2:4c:49:17:90:34:40:f3:d2:55:2b:97:9f:d3:70:93:
         39:3e:c7:d9:e7:7f:8b:81:b5:59:e8:88:d2:73:a3:64:35:6e:
         1f:96:0c:91:e9:c3:a1:3b:3b:6e:3b:ea:8d:52:8d:f4:84:6f:
         8b:be:e5:54:94:6f:80:98:03:a1:53:05:67:18:43:15:57:d1:
         bf:51:9b:7e:f4:56:7f:a7:e4:98:1a:c0:5f:67:ec:34:3e:0f:
         2a:8d:74:3f:8a:ad:8f:3d:b9:ae:62:56:44:15:3b:3b:0a:cb:
         ad:3c:d6:80:0e:89:f9:81:93:73:8f:67:7e:cb:de:bc:82:ff:
         50:4e:1a:06:bf:08:f5:c6:a3:9b:3d:7e:f4:a7:ef:4f:66:2f:
         1e:53:ca:56:43:34:ac:9f:5f:82:ac:1f:d3:bf:32:90:a2:67:
         5a:08:49:33:a9:cb:1f:8f:1c:86:64:08:ad:b3:b1:7b:e4:63:
         06:45:32:06:57:cd:01:87:9e:fe:6e:3f:8d:98:79:aa:18:12:
         a0:ad:4a:d1:43:49:23:5d:25:dd:81:78:ae:37:ae:9f:f1:60:
         56:43:cd:73:8b:14:99:9f:f0:17:28:eb:16:2b:8e:a9:38:f3:
         f9:b4:5b:cd:44:78:ae:81:a9:c8:9d:d1:12:8e:fd:99:3e:00:
         e9:0a:a3:2d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSHjh8HUUvMjwN/qkyNk9KOSo3wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MDk4OUEwMjQwNDIxQjlFNjJGOTNCNTk4QkUzOTBG
RDZDRENDNjAeFw0yNTAyMDQxODAwMzNaFw0yNjAyMDMxODA1MzNaMDMxMTAvBgNV
BAMTKDU3MzM0Mjg3RTk1MjFCNEE1MTBGM0UxMjg0ODBGM0REMDM5Q0U2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnttMRwSRBwvXbEdKMNKUhsWS
TAqhfMPNMgU4kRMPvWfpj3/1OocoBYQjnqBq3BiX7CnMuN6VYNl3m0fgqj6M7S2g
taRl39AdBoo58kibai6FgbWwjkp9yRXndvt2oCNj0pNk9eVKFI9ciwSOG0oJtlWn
v9Dl2PdPQ0ned71sf5NX3W4xyiVqXOmflasJDanlS3UHEfTgnsk3fnnzj5kPbLS7
clEAen3X9isvSuOIMrzG+YVnnE1GFtjoreWeIctxzmeV8iAKGrwk2zhEcuIwAI3F
FXBoQFU1DJad2XS+yat8UbaY84cJv5o1a5qar2gI5rgo9MfXXGoFrh6hyd9NAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVzNCh+lSG0pRDz4ShIDz3QOc5q4wHwYDVR0j
BBgwFoAUP2CYmgJAQhueYvk7WYvjkP1s3MYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUZDRjAwNkRFMjMxQzFFOEY5QUY0MzMwNkREQTVGN0ZB
MUQyRDhENEU2RjhEQjJGMEIwOEM2M0QyRkZCREZELzAvM0Y2MDk4OUEwMjQwNDIx
QjlFNjJGOTNCNTk4QkUzOTBGRDZDRENDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjYwOTg5QTAyNDA0MjFCOUU2
MkY5M0I1OThCRTM5MEZENkNEQ0M2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFGQ0YwMDZERTIzMUMxRThGOUFGNDMzMDZEREE1RjdGQTFEMkQ4RDRF
NkY4REIyRjBCMDhDNjNEMkZGQkRGRC8wLzMyMzgzMDMxM2EzMDNhMzYzMjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQAAAGIw
DQYJKoZIhvcNAQELBQADggEBAMvi0kxJF5A0QPPSVSuXn9Nwkzk+x9nnf4uBtVno
iNJzo2Q1bh+WDJHpw6E7O2476o1SjfSEb4u+5VSUb4CYA6FTBWcYQxVX0b9Rm370
Vn+n5JgawF9n7DQ+DyqNdD+KrY89ua5iVkQVOzsKy6081oAOifmBk3OPZ37L3ryC
/1BOGga/CPXGo5s9fvSn709mLx5TylZDNKyfX4KsH9O/MpCiZ1oISTOpyx+PHIZk
CK2zsXvkYwZFMgZXzQGHnv5uP42YeaoYEqCtStFDSSNdJd2BeK43rp/xYFZDzXOL
FJmf8Bco6xYrjqk48/m0W81EeK6Bqcid0RKO/Zk+AOkKoy0=
-----END CERTIFICATE-----