Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6230303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a6230303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          YoR/0TtnC3A97EbIfVDUUkZbwzdd56p3hKFWcl6vEZI=
Subject key identifier:   B3:F3:33:CE:74:16:B0:3C:9B:F2:46:FF:F8:85:4A:A7:D2:5B:7E:E8
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       41BC5F9F02E0E26CF706ABE4B149218202110EB3
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6230303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:08 +0000
ROA not before:           Tue 04 Feb 2025 18:33:08 +0000
ROA not after:            Tue 03 Feb 2026 18:38:08 +0000
asID:                     273127
IP address blocks:        2803:2450:b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:5f:9f:02:e0:e2:6c:f7:06:ab:e4:b1:49:21:82:02:11:0e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:08 2025 GMT
            Not After : Feb  3 18:38:08 2026 GMT
        Subject: CN=B3F333CE7416B03C9BF246FFF8854AA7D25B7EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:40:f3:41:9d:62:54:1b:2e:71:96:a1:37:
                    0d:ec:ec:ab:da:09:83:ec:1b:dc:eb:50:72:f9:c5:
                    60:ed:4b:72:25:b6:9f:a8:05:d9:99:04:80:c1:4e:
                    19:3c:00:fc:13:f0:3a:95:a9:d2:14:5d:a3:8a:0f:
                    1b:12:4c:71:bb:89:07:f9:a8:2a:53:f8:6c:bf:1a:
                    73:6f:b1:ae:60:7a:e1:d6:8f:2f:f3:77:7a:7f:1a:
                    7c:5f:7f:f5:fc:8b:1b:12:d4:98:57:23:a2:05:b9:
                    81:d8:e4:36:33:71:6d:5e:83:b2:ba:51:75:c4:9c:
                    15:65:d0:e7:1a:6f:0c:15:ca:4c:a9:95:0d:56:6d:
                    ab:4d:23:3d:bf:23:cc:da:e3:44:59:d5:c3:23:7b:
                    d8:ad:a5:5b:8b:4b:fd:b5:91:71:93:e0:4e:80:a0:
                    e7:0d:c7:e2:0c:16:26:fc:ac:25:f5:ac:15:20:41:
                    eb:32:43:36:60:a5:f6:b4:48:25:f5:18:65:83:95:
                    d0:4f:51:22:b1:32:20:64:80:53:0e:c1:ee:6e:91:
                    a2:7a:d2:56:22:5e:8f:fc:29:25:28:de:02:89:d8:
                    3d:cb:f6:9b:07:34:e2:e1:3a:92:a5:d0:69:5f:68:
                    04:91:b1:af:7f:4c:80:25:ae:b1:4f:59:d4:fa:ba:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F3:33:CE:74:16:B0:3C:9B:F2:46:FF:F8:85:4A:A7:D2:5B:7E:E8
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6230303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:de:60:c5:5a:77:8d:ca:72:31:e0:41:ba:1f:8a:36:b7:
         b1:ac:c3:b0:24:4c:e5:5b:e2:6f:f3:67:88:2d:0d:02:0b:76:
         d9:f2:fd:60:f9:7d:0e:3f:6f:da:10:fd:c3:e2:24:78:4d:6f:
         25:e6:2f:42:83:c0:43:b4:22:a3:c4:f9:bb:8c:cc:46:5d:e6:
         2d:75:d1:27:3c:2c:a1:34:be:ad:c3:f0:e7:ec:3e:c3:c3:fd:
         83:8c:b4:12:ff:3b:a7:ed:52:a8:d3:a7:c6:ec:cf:70:e8:1e:
         7b:6a:74:5a:98:db:f9:51:9c:ec:d0:c6:e6:b1:81:7a:c3:62:
         de:c9:49:d4:3e:cc:0c:e5:23:b2:c7:d8:47:5d:cb:07:b2:b7:
         00:5c:da:0f:a3:f2:5c:06:7b:a9:4f:77:39:23:da:07:95:fa:
         3a:50:e9:74:05:67:90:d6:4d:e9:c3:0c:4a:d3:7a:7b:6e:9f:
         c5:bb:af:9b:c5:30:c3:cb:7c:cf:59:37:d2:e6:f7:48:b1:d5:
         84:41:ad:a2:37:25:f5:c1:af:ce:0c:00:9d:b1:ad:50:e0:1f:
         01:65:34:44:8e:7b:d9:dc:78:09:3e:34:36:f8:62:65:95:06:
         f5:a1:dd:72:ec:0b:aa:43:68:cd:cc:e7:fb:27:5c:92:99:b2:
         a7:79:ab:78
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUQbxfnwLg4mz3BqvksUkhggIRDrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBQzFFNENFNUUxQkM4MDY4NDE4OTk5N0U0NjJFQzc0
OTk5QkY1ODAeFw0yNTAyMDQxODMzMDhaFw0yNjAyMDMxODM4MDhaMDMxMTAvBgNV
BAMTKEIzRjMzM0NFNzQxNkIwM0M5QkYyNDZGRkY4ODU0QUE3RDI1QjdFRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp0DzQZ1iVBsucZahNw3s7Kva
CYPsG9zrUHL5xWDtS3Iltp+oBdmZBIDBThk8APwT8DqVqdIUXaOKDxsSTHG7iQf5
qCpT+Gy/GnNvsa5geuHWjy/zd3p/Gnxff/X8ixsS1JhXI6IFuYHY5DYzcW1eg7K6
UXXEnBVl0OcabwwVykyplQ1WbatNIz2/I8za40RZ1cMje9itpVuLS/21kXGT4E6A
oOcNx+IMFib8rCX1rBUgQesyQzZgpfa0SCX1GGWDldBPUSKxMiBkgFMOwe5ukaJ6
0lYiXo/8KSUo3gKJ2D3L9psHNOLhOpKl0GlfaASRsa9/TIAlrrFPWdT6unOzAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUs/MzznQWsDyb8kb/+IVKp9JbfugwHwYDVR0j
BBgwFoAU3qweTOXhvIBoQYmZfkYux0mZv1gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDFDRTY5MUIwODc2MEEwNjQxRTIyMEI4RTAzQTU3ODdG
NTdDMzRFODhGMjhDQUE5OEMxMUEzQTdGQTY0NzQ3LzAvREVBQzFFNENFNUUxQkM4
MDY4NDE4OTk5N0U0NjJFQzc0OTk5QkY1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUFDMUU0Q0U1RTFCQzgwNjg0
MTg5OTk3RTQ2MkVDNzQ5OTlCRjU4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQxQ0U2OTFCMDg3NjBBMDY0MUUyMjBCOEUwM0E1Nzg3RjU3QzM0RTg4
RjI4Q0FBOThDMTFBM0E3RkE2NDc0Ny8wLzMyMzgzMDMzM2EzMjM0MzUzMDNhNjIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMkUAswDQYJKoZIhvcNAQELBQADggEBAHvL3mDFWneNynIx4EG6H4o2t7Gs
w7AkTOVb4m/zZ4gtDQILdtny/WD5fQ4/b9oQ/cPiJHhNbyXmL0KDwEO0IqPE+buM
zEZd5i110Sc8LKE0vq3D8OfsPsPD/YOMtBL/O6ftUqjTp8bsz3DoHntqdFqY2/lR
nOzQxuaxgXrDYt7JSdQ+zAzlI7LH2EddyweytwBc2g+j8lwGe6lPdzkj2geV+jpQ
6XQFZ5DWTenDDErTentun8W7r5vFMMPLfM9ZN9Lm90ix1YRBraI3JfXBr84MAJ2x
rVDgHwFlNESOe9nceAk+NDb4YmWVBvWh3XLsC6pDaM3M5/snXJKZsqd5q3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:09 2025 by rpki-client