Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
File:                     323830333a653563303a3a2f34382d3438203d3e20323636373235.roa (raw, json)
Hash identifier:          JndPcTT1rJm1tvLpFo7wkopcCg1ZBXq/fpeaZ7t60ow=
Subject key identifier:   92:36:42:7A:43:33:B5:0B:74:0E:A8:7B:4A:05:55:E6:57:90:68:2E
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       3B8CE7179B2F1BED4BB84EC65B9516EEA61A777B
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:14 +0000
ROA not before:           Tue 04 Feb 2025 18:23:14 +0000
ROA not after:            Tue 03 Feb 2026 18:28:14 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:e7:17:9b:2f:1b:ed:4b:b8:4e:c6:5b:95:16:ee:a6:1a:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:14 2025 GMT
            Not After : Feb  3 18:28:14 2026 GMT
        Subject: CN=9236427A4333B50B740EA87B4A0555E65790682E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:c4:7a:dd:61:f3:48:c0:e2:a6:9c:96:f0:
                    73:37:97:60:b1:52:1e:71:6a:c9:c9:d6:49:47:22:
                    5a:51:85:c9:61:ea:63:1a:75:c9:55:30:8b:d4:60:
                    c5:35:78:06:fe:84:f3:98:76:8f:f9:da:de:62:24:
                    43:d7:52:ab:9a:80:39:42:aa:f2:3c:8c:12:f5:ff:
                    85:33:7f:6a:a6:7d:7c:e9:0f:0c:7f:e4:59:fc:ec:
                    b9:27:e8:7c:fb:97:d1:bb:d6:7a:83:27:35:b3:19:
                    23:b2:ae:6d:cb:d9:ce:b3:c7:97:33:81:c1:3f:6f:
                    53:09:c4:43:62:80:83:33:f0:8b:33:2a:02:c7:93:
                    f1:8b:ce:d2:92:e8:5a:29:6f:89:57:a7:f4:cf:86:
                    27:f7:65:ed:d1:a0:46:5f:8e:7c:d3:31:9c:9a:7a:
                    d2:ae:cb:f2:d0:80:aa:e4:76:33:57:12:a0:a2:37:
                    2d:7c:d5:a6:27:b2:34:09:5d:8c:e4:08:3d:05:e7:
                    74:64:47:ee:48:27:ae:43:8a:61:a0:4f:3a:60:1c:
                    e7:ec:73:d8:df:80:1c:eb:fe:fb:c4:d4:b2:fd:4c:
                    ef:3d:8f:cc:33:77:fa:7c:4c:77:6b:2f:d3:00:4c:
                    22:6a:2d:34:09:5f:22:b6:27:8a:ed:02:e3:40:06:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:42:7A:43:33:B5:0B:74:0E:A8:7B:4A:05:55:E6:57:90:68:2E
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:bc:ab:f5:f7:d3:1c:11:d7:24:25:9f:7a:59:5f:93:73:
         84:65:f9:65:5d:91:2f:1d:8a:a5:30:ac:ae:93:af:96:f4:d1:
         9c:5a:64:23:23:f5:0e:2c:12:40:74:24:c1:6c:1e:68:ae:89:
         c5:51:ba:f4:e6:49:a1:e4:2d:ee:76:b9:ca:46:3b:61:16:d5:
         98:71:57:ff:4a:69:6e:c9:72:75:33:9e:e7:ab:46:8b:8d:72:
         ee:66:ff:e6:ea:e5:2a:aa:cc:2d:39:8f:fa:76:be:4e:b5:65:
         73:20:f0:88:d1:1d:01:c2:be:f5:54:2f:69:a1:f5:2d:52:b6:
         ba:76:58:68:bf:e4:3e:c0:92:9a:6e:81:10:56:ea:ee:21:ee:
         72:ab:e8:54:60:36:d2:8a:8c:15:76:c4:84:9e:06:69:81:10:
         d2:53:fc:f9:50:b9:da:5c:7f:75:bc:26:bf:43:2d:f5:ac:38:
         55:31:0a:a6:f7:bb:b1:d4:a6:4c:47:1e:f5:c5:75:8f:7c:f3:
         70:95:84:fd:b4:b9:2d:9d:a1:4f:38:57:ee:5b:d2:59:e3:3b:
         82:75:26:c7:a6:cb:ca:63:eb:94:b7:24:2a:12:12:3b:46:6c:
         e0:8c:0d:69:3d:66:af:88:c2:24:42:2d:1e:08:74:5c:1d:49:
         a6:61:6d:97
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUO4znF5svG+1LuE7GW5UW7qYad3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMTg5NUM4RjY0QUVDNTIyMDlFQTJGREU3RDMwOEFF
RDJEQTY0MDAeFw0yNTAyMDQxODIzMTRaFw0yNjAyMDMxODI4MTRaMDMxMTAvBgNV
BAMTKDkyMzY0MjdBNDMzM0I1MEI3NDBFQTg3QjRBMDU1NUU2NTc5MDY4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw18R63WHzSMDippyW8HM3l2Cx
Uh5xasnJ1klHIlpRhclh6mMadclVMIvUYMU1eAb+hPOYdo/52t5iJEPXUquagDlC
qvI8jBL1/4Uzf2qmfXzpDwx/5Fn87Lkn6Hz7l9G71nqDJzWzGSOyrm3L2c6zx5cz
gcE/b1MJxENigIMz8IszKgLHk/GLztKS6Fopb4lXp/TPhif3Ze3RoEZfjnzTMZya
etKuy/LQgKrkdjNXEqCiNy181aYnsjQJXYzkCD0F53RkR+5IJ65DimGgTzpgHOfs
c9jfgBzr/vvE1LL9TO89j8wzd/p8THdrL9MATCJqLTQJXyK2J4rtAuNABkN1AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUkjZCekMztQt0Dqh7SgVV5leQaC4wHwYDVR0j
BBgwFoAUm+GJXI9krsUiCeov3n0wiu0tpkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0RCNzNGQ0YxRTZCRDAwMkRDQjA2QkQ2MDUyNjkxRDYy
MkVEMDkxMEE3RjJGMDUxQUVDNjkyRERFOTg0QUVGLzAvOUJFMTg5NUM4RjY0QUVD
NTIyMDlFQTJGREU3RDMwOEFFRDJEQTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkUxODk1QzhGNjRBRUM1MjIw
OUVBMkZERTdEMzA4QUVEMkRBNjQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNEQjczRkNGMUU2QkQwMDJEQ0IwNkJENjA1MjY5MUQ2MjJFRDA5MTBB
N0YyRjA1MUFFQzY5MkRERTk4NEFFRi8wLzMyMzgzMDMzM2E2NTM1NjMzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgD5cAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAKA+8q/X30xwR1yQln3pZX5NzhGX5ZV2RLx2K
pTCsrpOvlvTRnFpkIyP1DiwSQHQkwWweaK6JxVG69OZJoeQt7na5ykY7YRbVmHFX
/0ppbslydTOe56tGi41y7mb/5urlKqrMLTmP+na+TrVlcyDwiNEdAcK+9VQvaaH1
LVK2unZYaL/kPsCSmm6BEFbq7iHucqvoVGA20oqMFXbEhJ4GaYEQ0lP8+VC52lx/
dbwmv0Mt9aw4VTEKpve7sdSmTEce9cV1j3zzcJWE/bS5LZ2hTzhX7lvSWeM7gnUm
x6bLymPrlLckKhISO0Zs4IwNaT1mr4jCJEItHgh0XB1JpmFtlw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:20:35 2025 by rpki-client