Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
File:                     323830303a6231303a3a2f33322d3332203d3e203237383834.roa (raw, json)
Hash identifier:          ECVK9B++G1Fi66K60BNw7iGST1ylHZk7fO+LUd8wWOo=
Subject key identifier:   BF:E5:CF:7F:18:AA:C2:86:EB:00:B7:40:66:EB:A2:59:AF:CF:7B:8E
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       502887A9C5340529D2B12F3B1FAB874813386E5E
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
Signing time:             Thu 26 Dec 2024 19:20:00 +0000
ROA not before:           Thu 26 Dec 2024 19:15:00 +0000
ROA not after:            Thu 25 Dec 2025 19:20:00 +0000
asID:                     27884
IP address blocks:        2800:b10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:28:87:a9:c5:34:05:29:d2:b1:2f:3b:1f:ab:87:48:13:38:6e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Dec 26 19:15:00 2024 GMT
            Not After : Dec 25 19:20:00 2025 GMT
        Subject: CN=BFE5CF7F18AAC286EB00B74066EBA259AFCF7B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:0b:3a:b5:f9:ec:75:11:3f:b3:4f:d9:08:
                    67:a2:b4:97:9a:f8:23:bf:9e:28:be:aa:f3:25:ca:
                    e2:35:6f:3e:97:86:05:74:fd:76:e6:de:04:1e:89:
                    97:42:3c:90:1c:c6:61:f6:e2:70:e3:5e:0d:05:ea:
                    6b:cf:27:de:9d:00:18:23:1c:eb:7a:bb:01:f4:dd:
                    cc:02:ea:14:52:3b:a4:ea:a9:7e:99:82:5f:65:60:
                    3e:9b:b9:c1:87:f2:d4:b0:20:81:59:4a:b1:1c:87:
                    23:71:20:b0:82:f6:91:ec:d4:dc:1b:47:37:ee:9e:
                    f5:31:7c:8c:0b:11:4e:55:c7:42:2b:cb:74:f2:c1:
                    d4:17:7d:da:a8:58:86:5d:0b:89:34:e4:22:2e:42:
                    cc:fd:81:e2:b0:64:98:6e:3b:40:ad:65:3d:a3:fe:
                    7f:11:f3:63:ae:5e:48:da:af:b3:01:6e:a4:95:14:
                    3b:66:d1:d1:dd:4e:d4:cf:8b:33:37:ed:1d:05:67:
                    06:1e:9b:fb:7e:66:6b:51:e4:71:de:e1:cd:74:55:
                    bb:42:7e:7d:ef:24:01:52:4e:06:15:5b:ad:a7:bb:
                    dc:18:5f:cb:47:60:eb:3d:12:d3:5c:4d:b2:13:86:
                    e6:dc:9b:cd:4b:14:91:9f:44:19:33:da:67:19:5d:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:CF:7F:18:AA:C2:86:EB:00:B7:40:66:EB:A2:59:AF:CF:7B:8E
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:5e:ec:dc:48:03:08:fa:dc:a1:0b:67:2d:5b:ea:72:de:
         6a:17:c4:5a:2f:49:d4:93:24:fd:92:f3:10:6f:3d:ad:94:b1:
         01:ba:52:ba:86:0a:ab:24:8d:08:d0:a3:96:bf:1c:cb:a4:16:
         79:85:c7:b3:dd:47:09:09:6f:9a:94:77:c1:9e:dc:bd:21:b7:
         35:54:3f:53:e7:f1:00:ee:23:17:c7:69:be:ab:41:5f:f1:c8:
         ac:d7:9c:da:aa:a6:2d:77:6b:e5:57:b0:d3:40:15:06:3d:39:
         a5:ee:0d:82:79:85:18:6a:eb:e5:99:95:11:29:99:96:00:c1:
         b6:e8:82:8e:16:49:0b:b0:01:c1:f4:ee:10:ac:f0:c1:e2:28:
         07:42:9c:11:24:e2:0b:ad:7e:e2:90:aa:8c:77:dd:49:01:b1:
         8c:9a:cb:e6:58:67:01:1e:45:07:08:33:47:c1:8c:c3:bd:83:
         9d:e9:24:ee:fa:80:32:2e:9a:32:ef:e8:4d:d6:79:ff:03:8f:
         98:12:fb:42:35:a8:fe:9e:fa:9e:94:b8:c1:56:7b:ff:6f:39:
         51:06:4f:c7:2c:fc:14:e0:f8:0a:66:62:94:a8:73:13:3f:d3:
         57:99:40:f5:52:63:88:05:a0:bb:a3:14:a6:b6:58:03:de:3c:
         ef:e7:a9:c0
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUUCiHqcU0BSnSsS87H6uHSBM4bl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNDEyMjYxOTE1MDBaFw0yNTEyMjUxOTIwMDBaMDMxMTAvBgNV
BAMTKEJGRTVDRjdGMThBQUMyODZFQjAwQjc0MDY2RUJBMjU5QUZDRjdCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZgs6tfnsdRE/s0/ZCGeitJea
+CO/nii+qvMlyuI1bz6XhgV0/Xbm3gQeiZdCPJAcxmH24nDjXg0F6mvPJ96dABgj
HOt6uwH03cwC6hRSO6TqqX6Zgl9lYD6bucGH8tSwIIFZSrEchyNxILCC9pHs1Nwb
RzfunvUxfIwLEU5Vx0Iry3TywdQXfdqoWIZdC4k05CIuQsz9geKwZJhuO0CtZT2j
/n8R82OuXkjar7MBbqSVFDtm0dHdTtTPizM37R0FZwYem/t+ZmtR5HHe4c10VbtC
fn3vJAFSTgYVW62nu9wYX8tHYOs9EtNcTbIThubcm81LFJGfRBkz2mcZXesBAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUv+XPfxiqwobrALdAZuuiWa/Pe44wHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMyMzgzMDMwM2E2MjMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAALEDANBgkq
hkiG9w0BAQsFAAOCAQEAdV1e7NxIAwj63KELZy1b6nLeahfEWi9J1JMk/ZLzEG89
rZSxAbpSuoYKqySNCNCjlr8cy6QWeYXHs91HCQlvmpR3wZ7cvSG3NVQ/U+fxAO4j
F8dpvqtBX/HIrNec2qqmLXdr5Vew00AVBj05pe4NgnmFGGrr5ZmVESmZlgDBtuiC
jhZJC7ABwfTuEKzwweIoB0KcESTiC61+4pCqjHfdSQGxjJrL5lhnAR5FBwgzR8GM
w72Dnekk7vqAMi6aMu/oTdZ5/wOPmBL7QjWo/p76npS4wVZ7/285UQZPxyz8FOD4
CmZilKhzEz/TV5lA9VJjiAWgu6MUprZYA9487+epwA==
-----END CERTIFICATE-----