Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa
File:                     323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa (raw, json)
Hash identifier:          5rzGVfa0LYWciY0zUKlF6wZXnAn0D3KPXiL+DplW4z0=
Subject key identifier:   9D:7A:C0:F7:BD:F3:EA:DA:8A:D5:C4:4A:6F:AE:82:E5:37:BF:26:F5
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       03D6B9C72BC421070FAD795A35356A64F9234628
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa
Signing time:             Tue 05 Mar 2024 18:02:46 +0000
ROA not before:           Tue 05 Mar 2024 17:57:46 +0000
ROA not after:            Tue 04 Mar 2025 18:02:46 +0000
asID:                     270035
IP address blocks:        2800:490:8103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d6:b9:c7:2b:c4:21:07:0f:ad:79:5a:35:35:6a:64:f9:23:46:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:46 2024 GMT
            Not After : Mar  4 18:02:46 2025 GMT
        Subject: CN=9D7AC0F7BDF3EADA8AD5C44A6FAE82E537BF26F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:64:55:bb:bc:b3:6d:22:e5:b5:40:29:60:
                    d6:ef:a3:4d:56:e1:d4:5a:0e:2f:b6:39:30:4f:ca:
                    4a:ca:73:3e:be:43:9d:e7:71:6a:9b:fa:0d:ab:34:
                    4d:93:c2:82:64:1b:36:94:dc:cf:49:6a:49:72:ca:
                    e0:da:e2:9e:1d:b7:bf:2d:2d:fc:4d:ae:ce:88:c3:
                    72:ed:97:f9:dc:f5:4f:5c:e7:83:a3:6e:e1:a9:8d:
                    ae:41:2d:18:6e:2a:0b:db:77:e1:4e:92:43:a5:64:
                    90:8b:f2:7c:f8:ab:a6:ed:4f:ec:b4:dd:1e:b4:40:
                    eb:9e:f9:92:77:b2:de:1e:54:67:3e:c7:26:93:9d:
                    ba:19:0f:cc:dd:9e:51:ca:3e:86:34:4c:63:5d:43:
                    cc:e6:98:85:d4:3c:bc:da:1d:a7:d3:3f:03:32:7f:
                    81:f7:3e:ef:10:0d:6b:3e:cd:25:7b:29:7a:93:dd:
                    c8:22:4f:63:3d:a3:bc:8c:4f:9c:38:f4:e0:96:f3:
                    16:07:90:47:e6:de:39:b4:29:57:99:0e:ed:fe:f6:
                    13:68:07:33:b6:12:db:04:27:34:26:c6:ee:98:86:
                    c3:15:2d:f5:64:3a:39:31:f7:1b:cf:7e:9f:42:c4:
                    00:96:d7:e5:03:bf:e3:6b:d3:63:ef:c6:ab:f4:0b:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:C0:F7:BD:F3:EA:DA:8A:D5:C4:4A:6F:AE:82:E5:37:BF:26:F5
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:8103::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:f5:c2:31:d3:b3:a3:f8:b0:d3:58:ee:ee:e8:d1:35:20:
         ba:3b:59:63:09:12:a6:bd:d7:58:c7:17:aa:57:d1:6e:74:b9:
         45:40:e4:df:26:54:57:ec:22:b5:85:c3:b0:c9:14:f2:19:a4:
         56:99:52:0a:82:04:ed:38:ff:17:7b:ae:0a:fe:19:ce:51:b2:
         cf:d7:f4:60:f5:33:dd:75:10:b2:4d:37:b5:1d:7e:19:7e:ce:
         16:29:4f:23:64:f2:59:fb:f1:a4:6b:49:89:99:81:50:31:25:
         05:b7:35:53:c2:d7:d5:bf:e5:11:31:ea:d9:33:ba:a7:1f:2f:
         bf:c6:2a:ac:d2:60:0c:be:20:7d:94:d4:63:42:26:3a:2a:1a:
         40:79:55:66:6c:79:43:8a:d3:c8:10:1b:25:75:d1:08:ce:c1:
         58:01:5d:37:b6:ee:09:24:c4:a4:1d:1a:66:66:a0:2b:63:93:
         23:eb:22:ae:b1:d8:b2:2d:03:2d:58:4d:20:ef:3c:a5:59:44:
         8e:a6:94:2c:58:0d:84:c5:5a:b9:ab:fa:40:70:dd:a5:16:28:
         60:e1:39:0d:5f:b7:df:a2:84:72:ef:5c:df:cf:80:72:51:60:
         47:fa:76:c1:e8:35:8e:5c:57:bc:4a:d1:d7:65:34:da:3e:60:
         ab:55:30:24
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUA9a5xyvEIQcPrXlaNTVqZPkjRigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNDAzMDUxNzU3NDZaFw0yNTAzMDQxODAyNDZaMDMxMTAvBgNV
BAMTKDlEN0FDMEY3QkRGM0VBREE4QUQ1QzQ0QTZGQUU4MkU1MzdCRjI2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7mRVu7yzbSLltUApYNbvo01W
4dRaDi+2OTBPykrKcz6+Q53ncWqb+g2rNE2TwoJkGzaU3M9JaklyyuDa4p4dt78t
LfxNrs6Iw3Ltl/nc9U9c54OjbuGpja5BLRhuKgvbd+FOkkOlZJCL8nz4q6btT+y0
3R60QOue+ZJ3st4eVGc+xyaTnboZD8zdnlHKPoY0TGNdQ8zmmIXUPLzaHafTPwMy
f4H3Pu8QDWs+zSV7KXqT3cgiT2M9o7yMT5w49OCW8xYHkEfm3jm0KVeZDu3+9hNo
BzO2EtsEJzQmxu6YhsMVLfVkOjkx9xvPfp9CxACW1+UDv+Nr02Pvxqv0C8BvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnXrA973z6tqK1cRKb66C5Te/JvUwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMyMzgzMDMwM2EzNDM5MzAzYTM4MzEz
MDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMwMzAzMzM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAEkIEDMA0GCSqGSIb3DQEBCwUAA4IBAQAX4vXCMdOzo/iw01ju7ujRNSC6
O1ljCRKmvddYxxeqV9FudLlFQOTfJlRX7CK1hcOwyRTyGaRWmVIKggTtOP8Xe64K
/hnOUbLP1/Rg9TPddRCyTTe1HX4Zfs4WKU8jZPJZ+/Gka0mJmYFQMSUFtzVTwtfV
v+URMerZM7qnHy+/xiqs0mAMviB9lNRjQiY6KhpAeVVmbHlDitPIEBslddEIzsFY
AV03tu4JJMSkHRpmZqArY5Mj6yKusdiyLQMtWE0g7zylWUSOppQsWA2ExVq5q/pA
cN2lFihg4TkNX7ffooRy71zfz4ByUWBH+nbB6DWOXFe8StHXZTTaPmCrVTAk
-----END CERTIFICATE-----