Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E28F5212CE4C9CAF4D667451D9F45DC31A35F191A7F081D03D2ABF8D35ACE362/0/323830333a356631303a3a2f33322d3438203d3e20323732313133.roa
File:                     323830333a356631303a3a2f33322d3438203d3e20323732313133.roa (raw, json)
Hash identifier:          2KcEWoGbcsEWbJNt0/scmgWSVuW1FwEOxmaRRRv7Gdk=
Subject key identifier:   26:55:CD:93:28:5C:CF:84:09:77:75:38:CB:97:6E:A5:8E:45:35:A1
Certificate issuer:       /CN=C6B60CEDA93B5F8F2679744ECD1BDAFAB2B8A96E
Certificate serial:       6DED53136A22095693FAA820BD34F0DB499DD59F
Authority key identifier: C6:B6:0C:ED:A9:3B:5F:8F:26:79:74:4E:CD:1B:DA:FA:B2:B8:A9:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6B60CEDA93B5F8F2679744ECD1BDAFAB2B8A96E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E28F5212CE4C9CAF4D667451D9F45DC31A35F191A7F081D03D2ABF8D35ACE362/0/323830333a356631303a3a2f33322d3438203d3e20323732313133.roa
Signing time:             Tue 04 Feb 2025 18:40:59 +0000
ROA not before:           Tue 04 Feb 2025 18:35:59 +0000
ROA not after:            Tue 03 Feb 2026 18:40:59 +0000
asID:                     272113
IP address blocks:        2803:5f10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ed:53:13:6a:22:09:56:93:fa:a8:20:bd:34:f0:db:49:9d:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B60CEDA93B5F8F2679744ECD1BDAFAB2B8A96E
        Validity
            Not Before: Feb  4 18:35:59 2025 GMT
            Not After : Feb  3 18:40:59 2026 GMT
        Subject: CN=2655CD93285CCF8409777538CB976EA58E4535A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:f9:31:2f:ed:d2:3b:98:bc:35:3a:7f:20:
                    de:96:c6:fd:a7:8f:43:a1:c7:9d:1a:5d:a1:c3:7b:
                    5f:5a:05:38:55:54:48:9d:bc:33:3b:b4:e4:8b:4a:
                    a7:15:df:d0:e0:97:b1:49:0a:41:c6:50:4d:89:ad:
                    b6:6b:1d:e1:58:a4:c3:27:c9:ca:9d:6d:fa:e8:f3:
                    44:6c:41:cb:c1:15:4b:7f:9a:d1:11:fb:02:91:7b:
                    77:a0:1f:eb:f3:02:eb:20:e5:e6:db:95:b5:e0:bb:
                    a7:db:de:85:85:f6:fe:21:06:a7:64:6d:d9:3d:5b:
                    2f:10:53:54:ab:c5:21:ff:74:d5:bf:ba:89:fc:26:
                    4b:7a:ff:a6:8b:58:d1:04:00:e4:1d:b0:27:2c:b6:
                    9e:e4:4e:a0:c2:9c:61:6e:c3:4b:a0:93:f6:5e:ec:
                    7f:29:b3:f4:2e:0e:e8:7d:89:16:e8:1a:08:e1:d9:
                    aa:87:fb:e4:bd:a1:9e:51:24:13:cb:74:8e:40:9a:
                    1f:bd:f4:ab:12:1e:e8:f4:d5:8b:da:da:33:57:5d:
                    a1:5f:9b:f6:63:4f:10:ad:f2:39:6f:b2:a9:44:07:
                    d1:32:8e:bf:78:ea:5e:3b:06:9a:69:ac:b2:b1:88:
                    3e:a8:e7:94:db:0e:9e:6a:da:55:3b:42:f9:93:97:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:CD:93:28:5C:CF:84:09:77:75:38:CB:97:6E:A5:8E:45:35:A1
            X509v3 Authority Key Identifier:
                keyid:C6:B6:0C:ED:A9:3B:5F:8F:26:79:74:4E:CD:1B:DA:FA:B2:B8:A9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E28F5212CE4C9CAF4D667451D9F45DC31A35F191A7F081D03D2ABF8D35ACE362/0/C6B60CEDA93B5F8F2679744ECD1BDAFAB2B8A96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6B60CEDA93B5F8F2679744ECD1BDAFAB2B8A96E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E28F5212CE4C9CAF4D667451D9F45DC31A35F191A7F081D03D2ABF8D35ACE362/0/323830333a356631303a3a2f33322d3438203d3e20323732313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:61:1e:48:4b:4c:46:b3:94:f6:b6:66:a1:10:20:8b:c7:8f:
         bc:ee:d1:2c:82:f4:57:88:b5:e7:ac:e5:b4:d1:b4:e5:4d:8d:
         24:bc:d2:3b:4e:50:f1:dd:1f:e5:41:2e:f8:6e:9f:35:19:11:
         d8:0f:85:dc:0e:ff:2d:3d:6c:f3:d2:5f:04:b2:e8:39:33:9b:
         ce:4d:43:90:f7:68:9b:fd:54:b6:66:ba:9e:7a:5c:59:ab:c2:
         56:95:5e:45:dc:08:56:ac:b7:3b:c1:57:11:c5:5f:a7:d4:e0:
         8b:4f:fc:85:94:04:f7:77:e7:99:b9:d0:1a:24:b2:22:09:f8:
         f7:80:16:bd:2f:fa:ec:43:05:2e:13:99:bd:28:f1:71:d4:ed:
         ac:cb:46:d5:96:5f:01:c5:d7:7f:99:5a:39:e9:c8:33:83:7f:
         30:3f:4b:f2:4d:0a:bb:1f:d7:bc:02:d8:7a:e5:a3:1e:09:97:
         1c:04:32:35:ec:92:9a:41:ee:a7:5c:a6:56:5a:99:b1:59:a4:
         30:6d:5d:bf:51:4c:8d:50:b1:76:a8:ca:d9:1f:20:de:9c:f6:
         ce:ca:c5:06:b9:c6:c0:d5:2d:22:63:ab:5d:70:3f:ed:8a:72:
         d3:1b:e1:fd:0d:8c:59:12:0e:32:1b:91:fb:63:9c:df:8c:9d:
         e3:cf:ed:b5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbe1TE2oiCVaT+qggvTTw20md1Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZCNjBDRURBOTNCNUY4RjI2Nzk3NDRFQ0QxQkRBRkFC
MkI4QTk2RTAeFw0yNTAyMDQxODM1NTlaFw0yNjAyMDMxODQwNTlaMDMxMTAvBgNV
BAMTKDI2NTVDRDkzMjg1Q0NGODQwOTc3NzUzOENCOTc2RUE1OEU0NTM1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7PkxL+3SO5i8NTp/IN6Wxv2n
j0Ohx50aXaHDe19aBThVVEidvDM7tOSLSqcV39Dgl7FJCkHGUE2JrbZrHeFYpMMn
ycqdbfro80RsQcvBFUt/mtER+wKRe3egH+vzAusg5ebblbXgu6fb3oWF9v4hBqdk
bdk9Wy8QU1SrxSH/dNW/uon8Jkt6/6aLWNEEAOQdsCcstp7kTqDCnGFuw0ugk/Ze
7H8ps/QuDuh9iRboGgjh2aqH++S9oZ5RJBPLdI5Amh+99KsSHuj01Yva2jNXXaFf
m/ZjTxCt8jlvsqlEB9Eyjr946l47BppprLKxiD6o55TbDp5q2lU7QvmTl9vXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJlXNkyhcz4QJd3U4y5dupY5FNaEwHwYDVR0j
BBgwFoAUxrYM7ak7X48meXROzRva+rK4qW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMjhGNTIxMkNFNEM5Q0FGNEQ2Njc0NTFEOUY0NURDMzFB
MzVGMTkxQTdGMDgxRDAzRDJBQkY4RDM1QUNFMzYyLzAvQzZCNjBDRURBOTNCNUY4
RjI2Nzk3NDRFQ0QxQkRBRkFCMkI4QTk2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkI2MENFREE5M0I1RjhGMjY3
OTc0NEVDRDFCREFGQUIyQjhBOTZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTI4RjUyMTJDRTRDOUNBRjRENjY3NDUxRDlGNDVEQzMxQTM1RjE5MUE3
RjA4MUQwM0QyQUJGOEQzNUFDRTM2Mi8wLzMyMzgzMDMzM2EzNTY2MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMxMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDXxAw
DQYJKoZIhvcNAQELBQADggEBAIZhHkhLTEazlPa2ZqEQIIvHj7zu0SyC9FeItees
5bTRtOVNjSS80jtOUPHdH+VBLvhunzUZEdgPhdwO/y09bPPSXwSy6Dkzm85NQ5D3
aJv9VLZmup56XFmrwlaVXkXcCFastzvBVxHFX6fU4ItP/IWUBPd355m50BoksiIJ
+PeAFr0v+uxDBS4Tmb0o8XHU7azLRtWWXwHF13+ZWjnpyDODfzA/S/JNCrsf17wC
2Hrlox4JlxwEMjXskppB7qdcplZambFZpDBtXb9RTI1QsXaoytkfIN6c9s7KxQa5
xsDVLSJjq11wP+2KctMb4f0NjFkSDjIbkftjnN+MnePP7bU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:56:50 2025 by rpki-client