Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
File:                     3138312e34322e3132382e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          NwUa3jPAbWWvsecZVEwfVN3mUmleWAnw5TIqOtfSPVI=
Subject key identifier:   D2:11:C8:20:AE:44:4E:AD:BE:1D:80:FF:5A:B6:F5:AB:F0:CC:64:6C
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       52D78892E41AB76963C69081348F4A9695DA3EEC
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 18:44:24 +0000
ROA not before:           Tue 04 Feb 2025 18:39:24 +0000
ROA not after:            Tue 03 Feb 2026 18:44:24 +0000
asID:                     27651
IP address blocks:        181.42.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d7:88:92:e4:1a:b7:69:63:c6:90:81:34:8f:4a:96:95:da:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:24 2025 GMT
            Not After : Feb  3 18:44:24 2026 GMT
        Subject: CN=D211C820AE444EADBE1D80FF5AB6F5ABF0CC646C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5b:8c:b8:aa:53:a8:e1:d5:e7:ba:ef:b6:93:
                    6f:1b:56:34:a0:82:cd:53:b0:9c:48:00:3f:e5:e8:
                    5c:15:11:71:da:43:61:4b:25:7a:0e:30:c1:4e:38:
                    43:6a:2d:00:d6:75:5f:c8:5b:c2:9b:00:05:eb:d0:
                    a8:ff:45:01:2d:68:b3:d1:03:20:bc:df:f9:16:64:
                    49:8d:a8:ef:28:5c:c9:5c:d7:9b:0d:ff:2b:59:ee:
                    fd:8c:5a:ad:8a:a5:fa:ac:f2:a0:39:d3:49:d6:8c:
                    62:be:38:b5:fc:46:3e:0f:59:cb:fb:97:98:25:93:
                    78:f4:f4:d4:5b:2d:2a:80:1f:47:fa:3d:c0:16:1d:
                    06:ae:bd:da:39:6c:2f:bf:60:6c:ea:0e:a5:12:b1:
                    00:df:91:f2:46:72:97:13:af:bd:23:a3:42:50:e7:
                    23:10:98:f5:fe:10:e0:0e:c8:6d:3d:1c:3d:60:c7:
                    c5:80:7f:7e:45:58:b8:b8:39:1f:f6:25:1e:d0:79:
                    68:27:6a:1d:a7:16:12:94:a3:31:52:19:ac:af:fe:
                    25:a1:b4:de:db:6b:3e:00:8e:3d:c1:ff:32:8c:ec:
                    2c:9a:6f:47:f3:b1:b8:e2:96:6c:b2:fe:01:d5:1d:
                    6b:f2:ce:29:6e:33:71:1b:e1:ea:8f:c9:44:ea:4c:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:11:C8:20:AE:44:4E:AD:BE:1D:80:FF:5A:B6:F5:AB:F0:CC:64:6C
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:3f:fb:e5:a0:84:00:d4:a7:75:4e:cc:7f:6a:90:db:7f:6e:
         53:b8:1f:5e:83:30:20:67:d8:1f:75:65:50:d5:cb:f6:9f:45:
         47:cc:b7:cd:64:1d:a3:2d:86:0f:ed:22:bf:da:ee:0f:9f:7e:
         33:7c:ab:72:ea:87:58:9c:9f:40:5e:fb:58:51:e5:4c:e5:1b:
         c2:a3:f0:db:88:49:03:4f:f9:cb:fe:40:38:2e:de:eb:3c:27:
         19:ad:e8:68:cf:cf:7a:f3:b9:ec:0b:0f:f7:c2:4f:81:ea:ca:
         d7:c4:b4:08:d3:21:8a:3f:1b:a1:79:54:71:27:03:fa:2c:b1:
         5a:ea:fc:94:36:89:fc:75:f1:24:15:20:00:25:44:c4:9a:e1:
         22:ec:14:63:fe:f5:40:eb:9d:dd:f0:b7:d4:1c:5d:2c:c3:a3:
         06:47:23:77:c3:9b:2b:cf:b3:82:10:5a:ed:3b:b5:dc:2c:cb:
         7f:1d:cb:be:a5:66:e7:b6:16:c9:68:76:a5:b5:47:3d:49:84:
         07:61:f1:2f:c1:51:71:2b:07:8e:85:bc:af:db:d9:ad:2e:cc:
         3f:7b:48:0e:5e:24:7a:c4:26:19:03:a2:b7:38:06:e1:51:7c:
         f9:2e:cc:d8:48:8e:2c:52:e2:88:4a:c5:cf:5d:8a:18:7f:8d:
         4c:3a:9c:f7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUteIkuQat2ljxpCBNI9KlpXaPuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNTAyMDQxODM5MjRaFw0yNjAyMDMxODQ0MjRaMDMxMTAvBgNV
BAMTKEQyMTFDODIwQUU0NDRFQURCRTFEODBGRjVBQjZGNUFCRjBDQzY0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpW4y4qlOo4dXnuu+2k28bVjSg
gs1TsJxIAD/l6FwVEXHaQ2FLJXoOMMFOOENqLQDWdV/IW8KbAAXr0Kj/RQEtaLPR
AyC83/kWZEmNqO8oXMlc15sN/ytZ7v2MWq2Kpfqs8qA500nWjGK+OLX8Rj4PWcv7
l5glk3j09NRbLSqAH0f6PcAWHQauvdo5bC+/YGzqDqUSsQDfkfJGcpcTr70jo0JQ
5yMQmPX+EOAOyG09HD1gx8WAf35FWLi4OR/2JR7QeWgnah2nFhKUozFSGayv/iWh
tN7baz4Ajj3B/zKM7Cyab0fzsbjilmyy/gHVHWvyziluM3Eb4eqPyUTqTKcJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0hHIIK5ETq2+HYD/Wrb1q/DMZGwwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzgzMTJlMzQzMjJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzIzNzM2MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7UqgDAN
BgkqhkiG9w0BAQsFAAOCAQEAYz/75aCEANSndU7Mf2qQ239uU7gfXoMwIGfYH3Vl
UNXL9p9FR8y3zWQdoy2GD+0iv9ruD59+M3yrcuqHWJyfQF77WFHlTOUbwqPw24hJ
A0/5y/5AOC7e6zwnGa3oaM/PevO57AsP98JPgerK18S0CNMhij8boXlUcScD+iyx
Wur8lDaJ/HXxJBUgACVExJrhIuwUY/71QOud3fC31BxdLMOjBkcjd8ObK8+zghBa
7Tu13CzLfx3LvqVm57YWyWh2pbVHPUmEB2HxL8FRcSsHjoW8r9vZrS7MP3tIDl4k
esQmGQOitzgG4VF8+S7M2EiOLFLiiErFz12KGH+NTDqc9w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:09 2025 by rpki-client