Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/381473f7cce7700da69ea02bd41ed07db51f53e1.roa
File:                     381473f7cce7700da69ea02bd41ed07db51f53e1.roa (raw, json)
Hash identifier:          zU5DruEB7qxTa4H7Npf5Z0/YoY2cNVyIb16axn062z4=
Subject key identifier:   19:C2:C1:F1:47:C7:9A:4D:3A:4C:4D:09:5E:1F:D1:5E:43:F5:0D:AA
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       244C09
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/381473f7cce7700da69ea02bd41ed07db51f53e1.roa
Signing time:             Sun 24 Sep 2023 01:41:48 +0000
ROA not before:           Sat 23 Sep 2023 01:41:48 +0000
ROA not after:            Wed 24 Sep 2025 01:41:48 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378761 (0x244c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Sep 23 01:41:48 2023 GMT
            Not After : Sep 24 01:41:48 2025 GMT
        Subject: CN=381473f7cce7700da69ea02bd41ed07db51f53e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:c6:70:01:a8:ca:1c:67:62:f5:04:60:98:
                    43:a6:6f:b9:b6:8a:24:d7:c0:0f:f1:ca:5c:11:95:
                    7a:59:a0:94:15:da:cc:c4:a6:62:1f:68:b5:51:c4:
                    d0:10:87:ff:48:f2:54:81:66:8d:55:9f:ce:35:b0:
                    1f:50:3d:75:d2:76:bd:5d:41:40:6f:ee:aa:c7:24:
                    f8:8f:f4:18:eb:45:99:f7:28:66:60:0a:a7:37:35:
                    b6:93:37:86:49:b0:25:3b:42:b4:b1:36:8a:98:10:
                    d1:40:02:b2:c9:a8:9b:46:46:77:77:9a:7a:2e:fb:
                    df:7f:20:12:1d:0b:c7:0c:1d:7f:07:a0:9c:7a:53:
                    91:ef:c3:cc:f3:13:94:b5:9c:65:22:2d:3d:3a:ae:
                    fb:3b:ae:18:fd:24:5a:e4:6c:c4:55:9b:0e:b6:5c:
                    fb:1a:a5:14:90:2e:60:0a:4b:6f:b0:51:71:2f:98:
                    ee:76:f1:69:ef:31:4e:5d:60:04:33:70:e3:d5:96:
                    c1:81:b1:4d:30:c9:7f:0b:9f:a5:50:4c:93:69:b9:
                    af:b9:6f:94:50:ea:7f:fc:d6:4e:df:0b:67:e9:e2:
                    e8:7a:d2:43:ba:a0:c8:dd:3c:bd:ff:27:ef:fb:b3:
                    e5:0d:4d:1d:fe:e9:28:ac:af:21:00:9d:27:b8:f1:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C2:C1:F1:47:C7:9A:4D:3A:4C:4D:09:5E:1F:D1:5E:43:F5:0D:AA
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/381473f7cce7700da69ea02bd41ed07db51f53e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:32:6e:1f:7a:77:a5:f0:24:3c:44:0d:14:04:08:a7:a3:
         09:2c:c6:4f:a0:b5:fe:9a:c5:e8:75:0f:5d:f4:f8:f1:90:61:
         9b:30:15:a5:99:98:2c:6b:f6:8c:74:7c:f1:dc:4c:ad:fa:fe:
         76:f8:ec:99:08:6f:3a:4e:16:3e:0e:a8:4f:80:33:84:a4:44:
         73:bd:90:ad:4c:35:f2:23:d7:f0:d0:c8:41:00:dc:e2:93:73:
         e0:70:6b:dd:97:6f:1b:12:df:25:ad:8a:b8:1b:d9:dc:9c:e9:
         26:90:e5:42:ab:f9:0d:d4:7d:9d:d7:c1:4a:3e:b4:81:28:7f:
         0f:b9:d0:b5:1c:ce:8f:82:0d:c1:d8:d0:b8:86:61:3f:34:1c:
         d0:c9:84:82:e2:e5:7b:62:c0:12:ac:5f:ca:7d:97:60:a7:46:
         dc:62:36:d5:d7:d8:aa:92:81:6f:1d:ad:fb:42:74:bd:a8:9d:
         30:fd:79:a5:f7:86:49:d2:c5:a1:b8:96:a0:55:f8:d2:37:71:
         b0:2f:fb:43:8f:52:58:97:0c:11:13:05:31:33:fd:56:3c:00:
         58:39:27:27:13:b7:53:a1:e9:33:96:11:92:0c:6e:ae:b5:50:
         1b:72:45:b4:d3:2d:a9:99:38:99:16:d8:cb:7f:d4:90:49:68:
         c6:f8:99:55
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJEwJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwOTIz
MDE0MTQ4WhcNMjUwOTI0MDE0MTQ4WjAzMTEwLwYDVQQDEygzODE0NzNmN2NjZTc3
MDBkYTY5ZWEwMmJkNDFlZDA3ZGI1MWY1M2UxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAplTGcAGoyhxnYvUEYJhDpm+5took18AP8cpcEZV6WaCUFdrM
xKZiH2i1UcTQEIf/SPJUgWaNVZ/ONbAfUD110na9XUFAb+6qxyT4j/QY60WZ9yhm
YAqnNzW2kzeGSbAlO0K0sTaKmBDRQAKyyaibRkZ3d5p6LvvffyASHQvHDB1/B6Cc
elOR78PM8xOUtZxlIi09Oq77O64Y/SRa5GzEVZsOtlz7GqUUkC5gCktvsFFxL5ju
dvFp7zFOXWAEM3Dj1ZbBgbFNMMl/C5+lUEyTabmvuW+UUOp//NZO3wtn6eLoetJD
uqDI3Ty9/yfv+7PlDU0d/ukorK8hAJ0nuPHGowIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFBnCwfFHx5pNOkxNCV4f0V5D9Q2qMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzM4MTQ3M2Y3Y2NlNzcwMGRhNjllYTAyYmQ0MWVkMDdkYjUxZjUzZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD3YAwDQYJKoZIhvcNAQELBQADggEBAB/UMm4fenel8CQ8
RA0UBAinowksxk+gtf6axeh1D130+PGQYZswFaWZmCxr9ox0fPHcTK36/nb47JkI
bzpOFj4OqE+AM4SkRHO9kK1MNfIj1/DQyEEA3OKTc+Bwa92XbxsS3yWtirgb2dyc
6SaQ5UKr+Q3UfZ3XwUo+tIEofw+50LUczo+CDcHY0LiGYT80HNDJhILi5XtiwBKs
X8p9l2CnRtxiNtXX2KqSgW8drftCdL2onTD9eaX3hknSxaG4lqBV+NI3cbAv+0OP
UliXDBETBTEz/VY8AFg5JycTt1Oh6TOWEZIMbq61UBtyRbTTLamZOJkW2Mt/1JBJ
aMb4mVU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:49 2025 by rpki-client