Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431323a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a383431323a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          v4QuoYo/eaU0yC/WB1OyxEH4dpRsSn2TO14TaKDGbcY=
Subject key identifier:   01:87:F2:D4:46:43:2E:97:68:E2:47:2A:74:C8:B8:AB:E6:0B:71:0F
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       7525C7E558C78CD0ABF44586624E0EA2568A0D3F
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431323a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:37 +0000
ROA not before:           Tue 04 Feb 2025 20:00:37 +0000
ROA not after:            Tue 03 Feb 2026 20:05:37 +0000
asID:                     27882
IP address blocks:        2800:320:8412::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:25:c7:e5:58:c7:8c:d0:ab:f4:45:86:62:4e:0e:a2:56:8a:0d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:37 2025 GMT
            Not After : Feb  3 20:05:37 2026 GMT
        Subject: CN=0187F2D446432E9768E2472A74C8B8ABE60B710F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:b5:f7:0a:ff:52:85:6b:e0:af:7a:b8:e2:
                    58:7d:f5:09:34:72:9f:d5:14:9a:fc:69:e6:02:f4:
                    dd:52:6a:6b:a7:58:7e:64:3f:79:42:22:b6:ca:3b:
                    b0:33:c7:f6:de:30:ce:0f:12:49:f0:e3:0b:60:d8:
                    2f:47:fe:40:aa:1f:98:6f:e5:d6:19:5c:26:bb:e0:
                    11:a0:5b:fa:dd:48:77:c9:3e:32:26:fb:22:45:3b:
                    30:40:3b:08:54:5c:09:7b:eb:71:52:fb:22:8c:bd:
                    c8:89:12:3e:46:19:ab:bf:15:72:15:60:f7:7e:9a:
                    0e:f4:1d:a8:ab:31:a6:73:3b:f7:ff:ea:a2:0b:9f:
                    17:5a:5f:a5:3d:f9:30:fa:75:73:21:8a:5b:00:f9:
                    e3:cf:e6:41:4c:0c:ef:64:d3:2e:1c:90:cb:fc:4a:
                    93:d6:f3:ae:1d:ab:ae:0c:ca:ba:80:c7:92:e3:f0:
                    cb:b2:01:bf:c1:b2:1f:51:97:d6:76:9c:7f:0f:ab:
                    08:46:3d:ff:9d:a0:01:73:96:ec:18:6d:63:f4:2a:
                    a8:a0:1d:82:43:66:57:5f:4c:a8:64:a4:3a:f5:ae:
                    e6:ad:0a:0f:7c:7b:dd:99:11:27:8e:13:e4:60:86:
                    11:81:6f:73:c7:7a:e2:8c:62:d8:e3:9a:6e:ce:14:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:87:F2:D4:46:43:2E:97:68:E2:47:2A:74:C8:B8:AB:E6:0B:71:0F
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431323a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8412::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:db:c8:0a:d3:c6:bf:4b:70:02:20:20:48:26:6c:a0:27:
         03:0e:67:03:bf:a9:22:e6:1e:d8:0e:fc:5c:10:49:63:68:85:
         b8:de:4e:b5:87:28:b2:7f:44:6f:c9:ba:72:d1:53:ba:9e:71:
         29:c9:06:c9:ba:9d:80:25:6f:e2:f1:96:f2:77:0d:82:5d:14:
         4c:b4:f6:f8:20:77:c1:a1:6d:98:92:50:a3:5c:4d:0b:ac:46:
         bd:ea:43:fa:f0:0d:66:c3:2e:30:cb:8f:70:38:ab:24:b7:e2:
         b3:ad:2a:0d:3a:a7:fd:d4:cd:74:da:01:10:85:34:74:01:23:
         92:7c:40:87:4b:d7:b5:64:4a:1c:cd:f3:78:dc:1d:54:02:03:
         af:a9:5e:22:ac:e8:54:cd:86:b0:78:db:28:91:08:5f:73:32:
         08:5d:98:6e:7b:a6:3a:20:c7:02:5c:67:dc:cd:16:06:f2:b9:
         8c:89:41:19:7a:3c:c8:dd:d5:15:01:77:00:de:eb:84:bf:e9:
         c6:34:d4:2e:51:31:e0:5f:aa:45:3c:37:02:07:90:c1:cb:45:
         49:37:a6:71:c6:b8:5f:45:a2:a3:06:65:b8:ef:d1:8d:be:7c:
         2d:f6:8b:cb:e8:3a:e9:4d:5f:52:d4:df:75:28:c0:87:22:0c:
         c3:67:c9:7b
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUdSXH5VjHjNCr9EWGYk4OolaKDT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4NjY4MTMxNzhGRjU1MEU2RkNBQkNENDkyMzg3REQx
RDBFMDhBNTAeFw0yNTAyMDQyMDAwMzdaFw0yNjAyMDMyMDA1MzdaMDMxMTAvBgNV
BAMTKDAxODdGMkQ0NDY0MzJFOTc2OEUyNDcyQTc0QzhCOEFCRTYwQjcxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0rX3Cv9ShWvgr3q44lh99Qk0
cp/VFJr8aeYC9N1SamunWH5kP3lCIrbKO7Azx/beMM4PEknw4wtg2C9H/kCqH5hv
5dYZXCa74BGgW/rdSHfJPjIm+yJFOzBAOwhUXAl763FS+yKMvciJEj5GGau/FXIV
YPd+mg70HairMaZzO/f/6qILnxdaX6U9+TD6dXMhilsA+ePP5kFMDO9k0y4ckMv8
SpPW864dq64MyrqAx5Lj8MuyAb/Bsh9Rl9Z2nH8PqwhGPf+doAFzluwYbWP0Kqig
HYJDZldfTKhkpDr1ruatCg98e92ZESeOE+RghhGBb3PHeuKMYtjjmm7OFFLnAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUAYfy1EZDLpdo4kcqdMi4q+YLcQ8wHwYDVR0j
BBgwFoAUs4ZoExeP9VDm/KvNSSOH3R0OCKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTU3QkQ1OURBQkNCNkQ5NjFBQzBGMkQwMEJBNTk2NzU5
RkFDODJBMEVBRURFN0QxMjlERjI0MUNCRUZCRjE5LzAvQjM4NjY4MTMxNzhGRjU1
MEU2RkNBQkNENDkyMzg3REQxRDBFMDhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzg2NjgxMzE3OEZGNTUwRTZG
Q0FCQ0Q0OTIzODdERDFEMEUwOEE1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1N0JENTlEQUJDQjZEOTYxQUMwRjJEMDBCQTU5Njc1OUZBQzgyQTBF
QUVERTdEMTI5REYyNDFDQkVGQkYxOS8wLzMyMzgzMDMwM2EzMzMyMzAzYTM4MzQz
MTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAAyCEEjANBgkqhkiG9w0BAQsFAAOCAQEAV+7byArTxr9LcAIgIEgmbKAnAw5n
A7+pIuYe2A78XBBJY2iFuN5OtYcosn9Eb8m6ctFTup5xKckGybqdgCVv4vGW8ncN
gl0UTLT2+CB3waFtmJJQo1xNC6xGvepD+vANZsMuMMuPcDirJLfis60qDTqn/dTN
dNoBEIU0dAEjknxAh0vXtWRKHM3zeNwdVAIDr6leIqzoVM2GsHjbKJEIX3MyCF2Y
bnumOiDHAlxn3M0WBvK5jIlBGXo8yN3VFQF3AN7rhL/pxjTULlEx4F+qRTw3AgeQ
wctFSTemcca4X0WiowZluO/Rjb58LfaLy+g66U1fUtTfdSjAhyIMw2fJew==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:46:06 2025 by rpki-client