Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa
File:                     323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (raw, json)
Hash identifier:          Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=
Subject key identifier:   F7:62:8D:D8:59:DE:EE:78:FD:0E:30:BE:82:57:B4:E6:05:D5:87:6F
Certificate issuer:       /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
Certificate serial:       256E0887DAEAFC2E5D55C9B61D2D39AA1A9BA49D
Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa
Signing time:             Tue 04 Feb 2025 18:10:49 +0000
ROA not before:           Tue 04 Feb 2025 18:05:49 +0000
ROA not after:            Tue 03 Feb 2026 18:10:49 +0000
asID:                     271808
IP address blocks:        2803:3010::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6e:08:87:da:ea:fc:2e:5d:55:c9:b6:1d:2d:39:aa:1a:9b:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
        Validity
            Not Before: Feb  4 18:05:49 2025 GMT
            Not After : Feb  3 18:10:49 2026 GMT
        Subject: CN=F7628DD859DEEE78FD0E30BE8257B4E605D5876F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:ff:42:81:0d:cc:2c:bd:6a:f5:39:b9:9b:
                    57:72:14:b9:6a:eb:db:7e:0b:cc:06:bf:01:fa:94:
                    99:02:5f:97:c9:23:09:e9:7f:72:a7:93:20:ac:1b:
                    72:16:34:2c:14:c1:63:7d:79:17:1a:da:f0:74:da:
                    22:dd:f0:71:d4:74:ba:25:7b:e5:1e:47:1b:0c:db:
                    52:f5:ba:64:52:82:6e:b8:46:a5:a5:43:fc:a9:55:
                    9b:a3:10:7d:f8:0c:8c:1b:11:a5:0f:76:e3:1e:f3:
                    74:19:33:07:d1:73:22:8c:dd:61:68:9e:34:15:a9:
                    07:94:74:12:f2:ea:6c:27:94:c4:b0:02:08:45:0e:
                    4a:d6:b5:45:c5:d6:47:b5:9b:eb:cb:6d:91:05:52:
                    7d:53:6d:21:d4:93:29:be:47:8f:1d:48:92:ff:9c:
                    fc:77:b3:7c:d8:6d:70:b6:b2:87:a1:0c:57:63:fa:
                    5a:98:0d:96:ea:b5:df:37:28:d8:2b:27:1e:1e:18:
                    e5:1e:d7:eb:4c:53:9f:c8:ce:af:7d:aa:6d:58:37:
                    eb:1c:59:ba:22:2f:11:b0:11:9f:a7:67:6b:f7:b4:
                    1d:d0:e8:19:ae:5a:75:95:76:47:48:76:60:45:1e:
                    df:ad:0b:18:c4:31:f9:a8:4d:ad:23:e2:c1:ef:dd:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:62:8D:D8:59:DE:EE:78:FD:0E:30:BE:82:57:B4:E6:05:D5:87:6F
            X509v3 Authority Key Identifier:
                keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3010::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:69:fb:a8:26:73:aa:8b:34:82:36:96:6c:fa:6c:72:6a:57:
         ca:f6:fc:33:a9:0c:91:ca:03:3c:91:fe:bd:3f:f3:7c:67:7b:
         91:55:18:09:ca:51:45:77:af:df:18:b0:86:c4:9f:74:83:b9:
         ed:da:da:4b:be:97:ec:b8:b6:19:4e:3e:07:08:01:cd:fe:d0:
         31:c1:f5:54:3e:db:e3:1d:15:f4:1c:34:00:3f:79:82:ef:67:
         21:d7:94:f2:47:31:77:ab:57:f5:46:5b:fb:30:04:6b:ce:f9:
         2f:09:5d:48:03:a5:b4:af:05:16:3f:44:ae:72:a0:ec:01:67:
         ba:bf:05:33:34:0e:e5:33:55:23:07:31:aa:57:bd:80:46:70:
         f2:79:6f:e9:56:08:c6:9a:b3:84:8d:dd:7d:18:a3:0d:c1:ed:
         06:dc:d2:c1:49:44:50:28:20:b1:37:07:0c:05:89:92:6f:92:
         e5:96:dd:ae:39:3e:ac:a1:8f:ba:cf:d3:2b:62:64:39:e2:f6:
         df:ef:4e:f6:63:d9:09:56:a7:3f:07:a9:f0:fa:74:b0:c8:14:
         4f:c5:da:bb:5a:ba:3e:37:98:70:4e:19:86:e5:44:2d:c0:86:
         fb:c3:a2:00:72:ed:38:60:78:17:8a:c7:43:b9:06:da:d5:4a:
         78:af:a0:b6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJW4Ih9rq/C5dVcm2HS05qhqbpJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG
QTA4RDIwQTAeFw0yNTAyMDQxODA1NDlaFw0yNjAyMDMxODEwNDlaMDMxMTAvBgNV
BAMTKEY3NjI4REQ4NTlERUVFNzhGRDBFMzBCRTgyNTdCNEU2MDVENTg3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PP9CgQ3MLL1q9Tm5m1dyFLlq
69t+C8wGvwH6lJkCX5fJIwnpf3KnkyCsG3IWNCwUwWN9eRca2vB02iLd8HHUdLol
e+UeRxsM21L1umRSgm64RqWlQ/ypVZujEH34DIwbEaUPduMe83QZMwfRcyKM3WFo
njQVqQeUdBLy6mwnlMSwAghFDkrWtUXF1ke1m+vLbZEFUn1TbSHUkym+R48dSJL/
nPx3s3zYbXC2soehDFdj+lqYDZbqtd83KNgrJx4eGOUe1+tMU5/Izq99qm1YN+sc
WboiLxGwEZ+nZ2v3tB3Q6BmuWnWVdkdIdmBFHt+tCxjEMfmoTa0j4sHv3ctZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU92KN2Fne7nj9DjC+gle05gXVh28wHwYDVR0j
BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0
NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG
Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1
OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0
RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzMyMzgzMDMzM2EzMzMwMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzAzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDMBAw
DQYJKoZIhvcNAQELBQADggEBAHZp+6gmc6qLNII2lmz6bHJqV8r2/DOpDJHKAzyR
/r0/83xne5FVGAnKUUV3r98YsIbEn3SDue3a2ku+l+y4thlOPgcIAc3+0DHB9VQ+
2+MdFfQcNAA/eYLvZyHXlPJHMXerV/VGW/swBGvO+S8JXUgDpbSvBRY/RK5yoOwB
Z7q/BTM0DuUzVSMHMapXvYBGcPJ5b+lWCMaas4SN3X0Yow3B7Qbc0sFJRFAoILE3
BwwFiZJvkuWW3a45Pqyhj7rP0ytiZDni9t/vTvZj2QlWpz8HqfD6dLDIFE/F2rta
uj43mHBOGYblRC3AhvvDogBy7ThgeBeKx0O5BtrVSnivoLY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:17 2025 by rpki-client