Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          k55sOynPOb3CDc3SlGuT2adehczXmny1r6CsGwEOSQg=
Subject key identifier:   F0:EC:5C:7D:B7:EF:3B:E4:FF:8A:7D:42:FE:AC:98:50:BD:E1:90:2B
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       21DF829993C86B07E24B14BB2D3F45A858DC0955
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:02 +0000
ROA not before:           Fri 17 Jan 2025 14:40:02 +0000
ROA not after:            Fri 16 Jan 2026 14:45:02 +0000
asID:                     269730
IP address blocks:        2803:5160:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:82:99:93:c8:6b:07:e2:4b:14:bb:2d:3f:45:a8:58:dc:09:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:02 2025 GMT
            Not After : Jan 16 14:45:02 2026 GMT
        Subject: CN=F0EC5C7DB7EF3BE4FF8A7D42FEAC9850BDE1902B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:9d:0e:3b:a5:5e:bf:fa:f7:a3:65:12:47:
                    88:c1:e9:f7:1f:1b:f9:5d:6f:3d:ab:48:de:46:da:
                    9c:26:52:b2:4d:2a:79:a5:da:c6:2a:ff:99:35:a1:
                    9e:86:75:d9:3d:de:2e:3d:e8:71:14:08:73:54:08:
                    ac:3c:b6:94:a6:80:85:b5:fc:90:55:28:2c:3e:79:
                    1b:14:94:a6:4b:c7:43:82:76:e7:4d:ef:06:75:10:
                    1f:e1:80:08:d6:0c:c7:c5:0d:a1:91:b4:94:53:d9:
                    1a:93:90:50:ba:e5:4b:38:45:38:61:5c:e6:0b:93:
                    2d:fa:4b:c0:0d:6a:11:6d:7d:8f:0e:ad:f1:56:06:
                    61:7e:2c:6a:0e:07:fe:5e:d9:60:3c:74:94:16:0f:
                    fe:e4:11:67:c3:db:89:6b:c3:89:6a:db:29:c5:30:
                    74:f5:1c:48:c9:ec:1e:4e:58:57:e7:f0:44:5c:34:
                    49:7b:b2:e7:4b:a1:1b:4b:24:a8:e5:37:33:db:be:
                    bb:bb:13:e9:9c:ca:5e:c6:3f:0d:09:c3:aa:63:66:
                    6a:df:c1:a4:29:04:71:34:f5:a6:94:7e:c5:49:42:
                    b1:c0:b6:23:17:f2:62:da:4b:ff:72:1c:3c:d8:09:
                    5e:f6:1d:d7:ce:e4:96:00:22:0c:45:89:51:4d:d5:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EC:5C:7D:B7:EF:3B:E4:FF:8A:7D:42:FE:AC:98:50:BD:E1:90:2B
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:22:38:4c:55:c5:30:97:0a:33:9c:02:c0:c7:3d:b2:f6:
         ed:a6:c4:78:25:fb:75:fd:45:f7:78:4c:93:f8:c3:46:e9:d5:
         2b:55:dc:5a:3a:44:df:0e:f1:d4:84:3a:1d:8b:e1:95:67:5a:
         7a:7b:d1:0b:02:e6:2c:7b:3e:2f:e6:28:f5:06:28:06:09:c9:
         9e:55:4a:d9:b6:46:c9:fe:e3:14:34:01:1c:43:9b:2a:c6:b5:
         ff:9c:7d:f7:a8:05:15:73:67:85:e1:0d:ec:0b:ea:33:32:30:
         a6:67:7f:00:a3:7a:cf:55:c6:12:10:fa:ee:b7:81:4b:7b:4e:
         26:9c:17:21:f2:fa:06:60:2b:ce:75:1d:01:f4:36:97:2f:92:
         92:f8:73:75:54:f7:f9:c4:96:6a:dc:dc:e7:f6:21:99:5c:ca:
         dc:6b:9f:dc:64:81:f5:2d:bf:5f:9f:df:b9:1b:d9:07:6c:fd:
         e5:6e:bd:a5:e3:83:a3:65:e7:b9:b4:c6:43:bc:4c:8a:5a:df:
         78:5d:69:da:7a:6b:4d:0f:c5:db:27:c5:4e:00:e9:f1:0f:2f:
         47:bc:c4:1f:e8:57:54:77:da:ef:7b:a0:a3:41:36:05:3d:6c:
         f0:57:8e:61:e7:f2:35:45:7e:18:5d:00:f2:3d:72:13:65:98:
         ec:d2:cd:03
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUId+CmZPIawfiSxS7LT9FqFjcCVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTAxMTcxNDQwMDJaFw0yNjAxMTYxNDQ1MDJaMDMxMTAvBgNV
BAMTKEYwRUM1QzdEQjdFRjNCRTRGRjhBN0Q0MkZFQUM5ODUwQkRFMTkwMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Op0OO6Vev/r3o2USR4jB6fcf
G/ldbz2rSN5G2pwmUrJNKnml2sYq/5k1oZ6Gddk93i496HEUCHNUCKw8tpSmgIW1
/JBVKCw+eRsUlKZLx0OCdudN7wZ1EB/hgAjWDMfFDaGRtJRT2RqTkFC65Us4RThh
XOYLky36S8ANahFtfY8OrfFWBmF+LGoOB/5e2WA8dJQWD/7kEWfD24lrw4lq2ynF
MHT1HEjJ7B5OWFfn8ERcNEl7sudLoRtLJKjlNzPbvru7E+mcyl7GPw0Jw6pjZmrf
waQpBHE09aaUfsVJQrHAtiMX8mLaS/9yHDzYCV72HdfO5JYAIgxFiVFN1eWhAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU8OxcfbfvO+T/in1C/qyYUL3hkCswHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhMzMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzMzMzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1FgMDANBgkqhkiG9w0BAQsFAAOCAQEAai8iOExVxTCXCjOcAsDHPbL2
7abEeCX7df1F93hMk/jDRunVK1XcWjpE3w7x1IQ6HYvhlWdaenvRCwLmLHs+L+Yo
9QYoBgnJnlVK2bZGyf7jFDQBHEObKsa1/5x996gFFXNnheEN7AvqMzIwpmd/AKN6
z1XGEhD67reBS3tOJpwXIfL6BmArznUdAfQ2ly+SkvhzdVT3+cSWatzc5/YhmVzK
3Guf3GSB9S2/X5/fuRvZB2z95W69peODo2XnubTGQ7xMilrfeF1p2nprTQ/F2yfF
TgDp8Q8vR7zEH+hXVHfa73ugo0E2BT1s8FeOYefyNUV+GF0A8j1yE2WY7NLNAw==
-----END CERTIFICATE-----