Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/323830303a3965303a3a2f33322d3332203d3e203236353035.roa
File:                     323830303a3965303a3a2f33322d3332203d3e203236353035.roa (raw, json)
Hash identifier:          AO3JmsJ4faP9caUqyXKhYIGp7GrHFSPXu2Iuo+dy8qk=
Subject key identifier:   96:11:04:53:4E:B0:5D:05:B8:AA:0C:F3:64:0D:87:84:03:39:85:64
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       3FFF135A3BFE2642F596561818B3B116AE9C5164
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/323830303a3965303a3a2f33322d3332203d3e203236353035.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     26505
IP address blocks:        2800:9e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ff:13:5a:3b:fe:26:42:f5:96:56:18:18:b3:b1:16:ae:9c:51:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=961104534EB05D05B8AA0CF3640D878403398564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:ab:f5:9f:6d:13:94:d5:40:06:60:be:79:
                    9f:94:87:21:10:95:0f:fd:25:4c:2c:c8:dd:f9:aa:
                    46:48:85:60:eb:01:52:c9:6f:e2:c2:9e:a1:d3:5a:
                    da:29:25:bf:08:8f:2b:36:ad:dd:5d:fe:ec:80:04:
                    48:6a:25:0c:d3:a9:5d:bd:3c:2c:b2:4e:f0:47:33:
                    a3:fe:cd:26:2e:b8:13:e7:52:98:89:8c:93:06:15:
                    4b:79:7d:a6:fc:12:6b:4a:76:1f:02:e0:a9:ff:2c:
                    61:09:88:8c:34:31:6f:55:49:c9:a7:4a:c4:13:2b:
                    64:36:27:c8:be:22:05:a7:d5:31:53:53:26:69:fe:
                    89:28:77:fd:99:26:0a:9b:7a:77:68:fd:51:19:97:
                    f0:15:eb:a4:07:7e:14:5a:d1:76:64:1f:90:ff:f4:
                    24:82:fa:09:ab:49:c0:35:3b:74:23:90:be:de:25:
                    62:ae:32:a4:c9:34:b7:fd:58:af:2f:56:08:ef:73:
                    ad:5f:fe:77:b6:14:6a:2a:93:66:4d:99:36:08:c9:
                    c5:b9:d5:a5:ba:fb:ca:fc:64:60:89:e6:ff:e9:aa:
                    37:d4:b7:41:cd:f5:96:8e:23:1e:c0:4c:0a:cb:8e:
                    aa:b3:17:89:b1:5a:18:2b:23:3e:a1:79:dc:c7:62:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:04:53:4E:B0:5D:05:B8:AA:0C:F3:64:0D:87:84:03:39:85:64
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/323830303a3965303a3a2f33322d3332203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:a7:17:9d:bd:78:22:e2:22:ac:3b:b3:f0:48:0d:f6:51:
         3c:14:aa:98:35:2c:d5:04:01:b5:68:09:9c:2d:1e:17:69:17:
         84:47:7a:43:ad:66:91:ed:6b:3f:0c:ec:35:ec:06:ad:0c:d9:
         d2:ab:93:52:d4:cd:48:6b:b0:75:71:8d:5f:65:5e:8d:fb:b2:
         e2:47:3c:81:e7:65:86:1a:aa:bf:59:d5:a2:00:98:b0:f5:94:
         b7:30:62:35:27:79:16:72:87:f9:e4:93:7d:68:dd:b1:59:a4:
         85:4a:04:ea:40:49:dc:d6:44:c0:c7:ff:a9:e3:ee:3a:75:42:
         6a:75:5b:54:aa:f1:9f:7a:6b:01:4f:9d:02:34:43:b8:6e:f3:
         47:b2:54:f2:9c:17:0d:cf:e2:31:30:28:5e:06:81:41:9b:0d:
         05:1f:4b:10:57:a7:63:26:63:e5:04:a1:27:b2:a5:50:29:f3:
         b0:f9:41:5d:4a:ac:d5:f5:6d:e9:82:63:ef:a8:05:e1:48:28:
         a6:2e:bb:1a:e4:a9:d3:fb:1b:69:82:cd:ee:fa:15:d8:56:66:
         34:71:55:8b:0f:ad:97:e8:47:98:7e:08:ac:bd:ea:09:98:71:
         f2:4f:09:03:e9:5d:b4:2e:b8:fe:79:b2:47:97:94:f6:da:f2:
         89:fc:37:4e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUP/8TWjv+JkL1llYYGLOxFq6cUWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1NDY0RjQ1RUVCMEVEMDg5NEJCRDY0NjYzMjAzNzAx
RTc2OUExMjAeFw0yNDAzMDUxODEyMDRaFw0yNTAzMDQxODE3MDRaMDMxMTAvBgNV
BAMTKDk2MTEwNDUzNEVCMDVEMDVCOEFBMENGMzY0MEQ4Nzg0MDMzOTg1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5Kv1n20TlNVABmC+eZ+UhyEQ
lQ/9JUwsyN35qkZIhWDrAVLJb+LCnqHTWtopJb8Ijys2rd1d/uyABEhqJQzTqV29
PCyyTvBHM6P+zSYuuBPnUpiJjJMGFUt5fab8EmtKdh8C4Kn/LGEJiIw0MW9VScmn
SsQTK2Q2J8i+IgWn1TFTUyZp/okod/2ZJgqbendo/VEZl/AV66QHfhRa0XZkH5D/
9CSC+gmrScA1O3QjkL7eJWKuMqTJNLf9WK8vVgjvc61f/ne2FGoqk2ZNmTYIycW5
1aW6+8r8ZGCJ5v/pqjfUt0HN9ZaOIx7ATArLjqqzF4mxWhgrIz6hedzHYuAhAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUlhEEU06wXQW4qgzzZA2HhAM5hWQwHwYDVR0j
BBgwFoAU4FRk9F7rDtCJS71kZjIDcB52mhIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNENERkU3MkMyNzZFQzdBQTE5OTI0OTIzMUYwQTQ1MkQ5
QjRCNUIxMzI0QTU1M0M0ODEwN0Y2NjYyMEQ4N0Q5LzAvRTA1NDY0RjQ1RUVCMEVE
MDg5NEJCRDY0NjYzMjAzNzAxRTc2OUExMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDU0NjRGNDVFRUIwRUQwODk0
QkJENjQ2NjMyMDM3MDFFNzY5QTEyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzRDREZFNzJDMjc2RUM3QUExOTkyNDkyMzFGMEE0NTJEOUI0QjVCMTMy
NEE1NTNDNDgxMDdGNjY2MjBEODdEOS8wLzMyMzgzMDMwM2EzOTY1MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAJ4DANBgkq
hkiG9w0BAQsFAAOCAQEAMA+nF529eCLiIqw7s/BIDfZRPBSqmDUs1QQBtWgJnC0e
F2kXhEd6Q61mke1rPwzsNewGrQzZ0quTUtTNSGuwdXGNX2Vejfuy4kc8gedlhhqq
v1nVogCYsPWUtzBiNSd5FnKH+eSTfWjdsVmkhUoE6kBJ3NZEwMf/qePuOnVCanVb
VKrxn3prAU+dAjRDuG7zR7JU8pwXDc/iMTAoXgaBQZsNBR9LEFenYyZj5QShJ7Kl
UCnzsPlBXUqs1fVt6YJj76gF4Ugopi67GuSp0/sbaYLN7voV2FZmNHFViw+tl+hH
mH4IrL3qCZhx8k8JA+ldtC64/nmyR5eU9tryifw3Tg==
-----END CERTIFICATE-----