Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a343a3a2f34382d3438203d3e203238353438.roa
File:                     323830363a3261303a343a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier:          k31xfVL0ymR/qf4/OfK9vFoT7Z49/ZIWsB0IHJEGyek=
Subject key identifier:   44:E1:7A:B2:B4:71:9D:4C:C5:6A:E5:32:EC:C3:70:38:3F:A5:0E:DC
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       1F3A3E0748F079C9A29ECC8645105490F8DD0F9B
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a343a3a2f34382d3438203d3e203238353438.roa
Signing time:             Thu 12 Sep 2024 11:45:05 +0000
ROA not before:           Thu 12 Sep 2024 11:40:05 +0000
ROA not after:            Thu 11 Sep 2025 11:45:05 +0000
asID:                     28548
IP address blocks:        2806:2a0:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:3e:07:48:f0:79:c9:a2:9e:cc:86:45:10:54:90:f8:dd:0f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:05 2024 GMT
            Not After : Sep 11 11:45:05 2025 GMT
        Subject: CN=44E17AB2B4719D4CC56AE532ECC370383FA50EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:bc:b7:88:7c:df:4c:29:e7:64:e0:73:8f:
                    cf:8f:fb:8a:9d:b6:84:31:27:d5:0a:bd:4f:4e:7a:
                    ff:f8:e4:16:f6:66:ba:54:18:f3:e8:1f:cc:15:da:
                    c9:59:eb:a1:5f:ef:9a:1d:ee:77:65:48:ee:9f:52:
                    24:ab:a6:20:64:80:73:0d:aa:bf:97:c2:e3:1e:32:
                    16:4b:52:2b:c3:6e:ff:7d:7a:d9:79:5f:a0:74:ba:
                    dd:98:a0:25:ed:36:ae:27:e6:59:a1:50:16:22:09:
                    5b:05:2d:1b:11:7a:de:78:24:77:36:cc:0a:3c:6b:
                    1b:d4:0a:26:cd:ef:e6:aa:5e:4a:e2:3d:c8:f0:63:
                    d9:ce:4a:10:97:c9:50:0a:e0:d7:10:5b:1f:6c:5a:
                    e3:be:57:d4:85:e7:cf:70:47:51:09:3b:90:0e:a8:
                    90:28:41:d2:73:bd:80:06:fb:97:29:e3:f5:16:0b:
                    0e:1c:40:89:f5:1b:fa:52:2d:a7:09:13:ba:0c:75:
                    32:10:a0:40:90:a0:52:a2:b6:e4:a1:b8:7f:24:5e:
                    dc:32:8e:56:0d:6f:0c:a7:4c:43:ac:e2:03:c7:d6:
                    eb:cf:58:75:dd:b2:d6:e6:59:7a:ee:aa:74:65:60:
                    c5:85:98:7b:f4:ae:62:ed:f7:54:9b:21:a3:02:58:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:7A:B2:B4:71:9D:4C:C5:6A:E5:32:EC:C3:70:38:3F:A5:0E:DC
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a343a3a2f34382d3438203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:33:7a:86:5e:2e:72:b4:a2:01:5b:17:9f:6a:cf:ea:68:
         f3:4b:f8:5c:17:d1:bb:3f:5c:94:41:d2:00:15:14:0c:ed:aa:
         cc:33:6c:19:f2:ae:20:72:06:f2:2c:0d:53:16:9c:5f:2d:4f:
         cc:a4:a5:e1:9c:42:42:de:3c:ea:eb:6d:b5:2a:82:a4:7f:28:
         89:51:4d:fa:eb:72:76:a3:c8:55:5f:06:ec:93:52:0d:4d:dd:
         7d:bb:0e:d6:63:ed:f1:d4:7a:3b:e4:c4:5b:13:8d:a6:cd:0b:
         87:df:e0:d0:c6:95:8e:11:2e:73:f6:68:b9:c0:fa:93:cd:0a:
         1f:b7:8c:08:4d:98:04:4e:e0:73:75:d0:36:0a:65:c7:5e:0c:
         00:1c:12:dc:9d:7c:36:a4:ae:4c:7c:71:99:0e:26:f7:e7:2a:
         69:23:be:94:40:28:85:40:b5:90:b1:bb:16:52:d4:fd:ea:12:
         6c:c5:19:ce:4a:67:b4:ae:40:61:9f:9f:7f:9d:7b:a3:51:98:
         17:98:54:10:6a:c3:69:49:c8:96:ca:8d:c0:c0:17:bc:0b:88:
         aa:e3:38:1b:ee:d6:a3:f7:a0:dd:62:00:65:8c:ec:d9:cf:bf:
         31:85:58:e8:4f:43:2f:96:f8:49:fc:57:29:bf:95:05:99:5c:
         ca:b6:56:cd
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUHzo+B0jwecminsyGRRBUkPjdD5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MzhCOEI4RUM4NTg3QzA3M0RDRDQ1MTk1ODUwOUFB
MEE5NEY1QTAeFw0yNDA5MTIxMTQwMDVaFw0yNTA5MTExMTQ1MDVaMDMxMTAvBgNV
BAMTKDQ0RTE3QUIyQjQ3MTlENENDNTZBRTUzMkVDQzM3MDM4M0ZBNTBFREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjl7y3iHzfTCnnZOBzj8+P+4qd
toQxJ9UKvU9Oev/45Bb2ZrpUGPPoH8wV2slZ66Ff75od7ndlSO6fUiSrpiBkgHMN
qr+XwuMeMhZLUivDbv99etl5X6B0ut2YoCXtNq4n5lmhUBYiCVsFLRsRet54JHc2
zAo8axvUCibN7+aqXkriPcjwY9nOShCXyVAK4NcQWx9sWuO+V9SF589wR1EJO5AO
qJAoQdJzvYAG+5cp4/UWCw4cQIn1G/pSLacJE7oMdTIQoECQoFKituShuH8kXtwy
jlYNbwynTEOs4gPH1uvPWHXdstbmWXruqnRlYMWFmHv0rmLt91SbIaMCWITvAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUROF6srRxnUzFauUy7MNwOD+lDtwwHwYDVR0j
BBgwFoAUU4OLi47IWHwHPc1FGVhQmqCpT1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTVERENDRTVDQjE4NUIyMkI2RjhFNDFGRkJDNzZDNTZB
ODA5QkZDNjYyMjkwRjcyQ0RCNTU0Mzk1NTQxNDk1LzAvNTM4MzhCOEI4RUM4NTg3
QzA3M0RDRDQ1MTk1ODUwOUFBMEE5NEY1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzgzOEI4QjhFQzg1ODdDMDcz
RENENDUxOTU4NTA5QUEwQTk0RjVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjU1RERDQ0U1Q0IxODVCMjJCNkY4RTQxRkZCQzc2QzU2QTgwOUJGQzY2
MjI5MEY3MkNEQjU1NDM5NTU0MTQ5NS8wLzMyMzgzMDM2M2EzMjYxMzAzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODM1MzQzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgGAqAA
BDANBgkqhkiG9w0BAQsFAAOCAQEAgD0zeoZeLnK0ogFbF59qz+po80v4XBfRuz9c
lEHSABUUDO2qzDNsGfKuIHIG8iwNUxacXy1PzKSl4ZxCQt486utttSqCpH8oiVFN
+utydqPIVV8G7JNSDU3dfbsO1mPt8dR6O+TEWxONps0Lh9/g0MaVjhEuc/ZoucD6
k80KH7eMCE2YBE7gc3XQNgplx14MABwS3J18NqSuTHxxmQ4m9+cqaSO+lEAohUC1
kLG7FlLU/eoSbMUZzkpntK5AYZ+ff517o1GYF5hUEGrDaUnIlsqNwMAXvAuIquM4
G+7Wo/eg3WIAZYzs2c+/MYVY6E9DL5b4SfxXKb+VBZlcyrZWzQ==
-----END CERTIFICATE-----
Generated at Sun May 18 10:52:48 2025 by rpki-client