Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/323830333a353738303a3a2f33322d3438203d3e20323633373230.roa
File:                     323830333a353738303a3a2f33322d3438203d3e20323633373230.roa (raw, json)
Hash identifier:          GfD7J4AqFD26P+drgAsFJnx4cmGOcojv1abqkiH0jUY=
Subject key identifier:   9B:6C:CC:76:6A:03:FA:E7:CB:4F:5A:93:F0:3F:1D:A8:FF:B5:A2:F7
Certificate issuer:       /CN=54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0
Certificate serial:       4FB07F84E7D178D23A9B4CA3EE72A93FA99DEF3A
Authority key identifier: 54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/323830333a353738303a3a2f33322d3438203d3e20323633373230.roa
Signing time:             Tue 04 Feb 2025 18:54:51 +0000
ROA not before:           Tue 04 Feb 2025 18:49:51 +0000
ROA not after:            Tue 03 Feb 2026 18:54:51 +0000
asID:                     263720
IP address blocks:        2803:5780::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b0:7f:84:e7:d1:78:d2:3a:9b:4c:a3:ee:72:a9:3f:a9:9d:ef:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0
        Validity
            Not Before: Feb  4 18:49:51 2025 GMT
            Not After : Feb  3 18:54:51 2026 GMT
        Subject: CN=9B6CCC766A03FAE7CB4F5A93F03F1DA8FFB5A2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:08:d4:62:c7:1a:9c:1a:3d:aa:9d:3f:e8:
                    a1:8d:57:13:cd:12:7f:27:58:7b:cd:08:10:61:3c:
                    d9:2c:fe:3a:f6:bd:92:71:ec:82:2d:71:63:4d:16:
                    8a:37:2a:37:bf:34:06:7f:4b:96:64:39:93:5f:23:
                    dd:e6:66:99:fe:ba:ee:33:71:3e:18:83:ef:d7:f1:
                    16:4f:a6:2f:52:f2:60:cd:09:cb:9e:8f:12:86:88:
                    4c:2f:f2:3b:3c:ed:26:a9:d7:d5:f5:dd:dc:c6:b1:
                    54:d3:c9:4a:08:34:52:2e:1f:c0:f0:6f:2e:6e:5c:
                    ac:2a:07:85:89:29:da:dd:d6:c5:b5:2d:97:32:a5:
                    43:19:60:63:78:1b:13:69:05:a9:a6:02:f7:b8:6e:
                    e5:8d:5d:4f:84:3d:01:91:bd:12:6a:5a:c6:1f:9f:
                    78:13:30:15:28:ac:b0:e4:e4:d8:ad:cd:fc:94:72:
                    a2:20:cb:55:ec:ef:2b:e3:89:3c:34:47:c2:81:e0:
                    ae:c0:07:e9:3d:63:81:18:68:e3:71:90:3f:c2:8b:
                    ba:9d:ca:65:f0:3a:92:43:b7:5a:67:0e:53:21:e8:
                    ca:72:9f:8c:7b:57:77:b8:2d:08:e2:c4:60:3f:ff:
                    d1:38:d6:03:1f:9c:64:af:1e:ac:c3:a6:f2:61:e8:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:CC:76:6A:03:FA:E7:CB:4F:5A:93:F0:3F:1D:A8:FF:B5:A2:F7
            X509v3 Authority Key Identifier:
                keyid:54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/323830333a353738303a3a2f33322d3438203d3e20323633373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5780::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:90:ea:c7:a9:b6:b5:52:5c:2a:55:fe:6b:19:be:29:7a:
         83:33:68:eb:e7:1e:3f:96:ef:6b:2e:d5:cd:66:9b:12:39:52:
         ed:67:18:88:04:d2:30:cb:a9:f6:ef:a0:32:de:f5:41:72:77:
         09:d9:e5:85:5c:33:85:1c:45:63:e5:36:40:d8:54:2b:3e:61:
         4c:09:d5:e4:46:7d:ba:59:64:05:3e:7a:01:6c:62:73:e7:19:
         31:71:fd:00:aa:34:44:21:a7:50:21:fb:e7:00:b6:4a:31:cd:
         50:5f:60:c0:a7:91:af:37:8b:a3:2a:ce:a6:2a:5a:df:d4:21:
         6b:fa:1a:94:a3:d6:f3:eb:32:1b:b4:cb:10:05:ac:24:b0:ac:
         92:0b:32:7c:d2:a9:44:43:a1:21:8b:11:2a:3f:0a:2b:55:8a:
         cf:66:40:e7:0a:97:87:ee:d2:ac:c2:a2:a3:2c:32:a5:7a:01:
         f1:44:a6:7e:e3:8b:76:49:a8:f0:e2:7e:bb:a6:0c:ce:b3:78:
         56:1d:48:9d:72:4d:0f:ba:0c:a5:5b:46:32:c4:57:e2:2d:9c:
         7d:c6:bd:18:8d:d8:54:8b:4e:df:85:14:55:bb:01:89:02:1c:
         05:ae:fe:19:dd:e4:c8:ca:0d:e6:c8:f5:6b:a8:28:c5:2f:d9:
         03:a0:fe:2c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUT7B/hOfReNI6m0yj7nKpP6md7zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCRjAxRThGRUZDNDRGODdFMkZEOUNDODI5NzdFMkQ2
M0U2M0VDMDAeFw0yNTAyMDQxODQ5NTFaFw0yNjAyMDMxODU0NTFaMDMxMTAvBgNV
BAMTKDlCNkNDQzc2NkEwM0ZBRTdDQjRGNUE5M0YwM0YxREE4RkZCNUEyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMRwjUYscanBo9qp0/6KGNVxPN
En8nWHvNCBBhPNks/jr2vZJx7IItcWNNFoo3Kje/NAZ/S5ZkOZNfI93mZpn+uu4z
cT4Yg+/X8RZPpi9S8mDNCcuejxKGiEwv8js87Sap19X13dzGsVTTyUoINFIuH8Dw
by5uXKwqB4WJKdrd1sW1LZcypUMZYGN4GxNpBammAve4buWNXU+EPQGRvRJqWsYf
n3gTMBUorLDk5NitzfyUcqIgy1Xs7yvjiTw0R8KB4K7AB+k9Y4EYaONxkD/Ci7qd
ymXwOpJDt1pnDlMh6Mpyn4x7V3e4LQjixGA//9E41gMfnGSvHqzDpvJh6OpNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUm2zMdmoD+ufLT1qT8D8dqP+1ovcwHwYDVR0j
BBgwFoAUVL8B6P78RPh+L9nMgpd+LWPmPsAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTExQjg0Q0Q2MUQ5MDJDRTI4MjEzRDBDMzk5MTgxMDJG
Q0I1NjgyMkFGNjc3N0JDOUIyNEIxMDM3RDZCRjFFLzAvNTRCRjAxRThGRUZDNDRG
ODdFMkZEOUNDODI5NzdFMkQ2M0U2M0VDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEJGMDFFOEZFRkM0NEY4N0Uy
RkQ5Q0M4Mjk3N0UyRDYzRTYzRUMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUxMUI4NENENjFEOTAyQ0UyODIxM0QwQzM5OTE4MTAyRkNCNTY4MjJB
RjY3NzdCQzlCMjRCMTAzN0Q2QkYxRS8wLzMyMzgzMDMzM2EzNTM3MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM3MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDV4Aw
DQYJKoZIhvcNAQELBQADggEBACg8kOrHqba1UlwqVf5rGb4peoMzaOvnHj+W72su
1c1mmxI5Uu1nGIgE0jDLqfbvoDLe9UFydwnZ5YVcM4UcRWPlNkDYVCs+YUwJ1eRG
fbpZZAU+egFsYnPnGTFx/QCqNEQhp1Ah++cAtkoxzVBfYMCnka83i6MqzqYqWt/U
IWv6GpSj1vPrMhu0yxAFrCSwrJILMnzSqURDoSGLESo/CitVis9mQOcKl4fu0qzC
oqMsMqV6AfFEpn7ji3ZJqPDifrumDM6zeFYdSJ1yTQ+6DKVbRjLEV+ItnH3GvRiN
2FSLTt+FFFW7AYkCHAWu/hnd5MjKDebI9WuoKMUv2QOg/iw=
-----END CERTIFICATE-----