Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa
File:                     3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa (raw, json)
Hash identifier:          ll5Dste4vSPGPPmR4rZ7MbAOp59HA9QSoN5yLDrllhM=
Subject key identifier:   A2:EA:B4:15:0A:BD:80:91:48:80:FA:F4:EB:CD:48:E2:0A:D8:A0:2F
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       4889D33312748B8F2A17806F81B58495F8F6B715
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa
Signing time:             Tue 04 Feb 2025 18:25:21 +0000
ROA not before:           Tue 04 Feb 2025 18:20:21 +0000
ROA not after:            Tue 03 Feb 2026 18:25:21 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:d3:33:12:74:8b:8f:2a:17:80:6f:81:b5:84:95:f8:f6:b7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Feb  4 18:20:21 2025 GMT
            Not After : Feb  3 18:25:21 2026 GMT
        Subject: CN=A2EAB4150ABD80914880FAF4EBCD48E20AD8A02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:b9:8e:22:1d:21:54:89:65:72:05:5f:ac:
                    a3:39:49:0d:39:5c:6c:7f:44:12:7f:17:59:6f:10:
                    bb:19:d0:02:6d:f7:b3:9a:45:65:6e:ff:5a:d2:61:
                    79:e6:e2:07:a7:e3:a8:ef:e2:f4:22:c7:2d:93:a0:
                    a7:58:ca:22:a3:87:f4:02:2a:42:44:53:d2:11:8b:
                    be:e0:9c:a6:60:ce:c2:67:59:af:30:0c:e3:1a:b6:
                    68:24:03:b3:45:08:48:7d:bb:d6:6f:51:b9:86:3f:
                    28:15:d0:c9:36:40:7e:79:71:34:83:71:60:a7:3a:
                    1c:ee:0e:b8:eb:c8:04:5b:6e:be:94:2d:4c:d2:d1:
                    3d:f3:35:20:dd:5f:08:b3:3a:e0:5b:a2:ef:a2:c6:
                    6e:50:87:b6:1c:46:1d:57:b3:e1:36:fa:05:2d:80:
                    43:ff:3d:59:e7:ea:bc:e1:ff:30:dd:ab:88:ee:ac:
                    28:d7:b5:3d:75:71:25:21:13:17:a0:0b:6d:61:57:
                    bd:0c:46:4a:6c:ea:8a:e1:9d:24:74:c5:01:53:81:
                    ef:49:ca:55:96:aa:95:4e:9d:ad:24:75:b0:b7:3d:
                    05:f9:c6:88:8a:16:26:35:66:61:3c:d0:ec:1d:6a:
                    29:97:ae:93:60:91:e3:52:a9:3a:3a:b8:5e:9d:13:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EA:B4:15:0A:BD:80:91:48:80:FA:F4:EB:CD:48:E2:0A:D8:A0:2F
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         05:91:c1:60:89:92:36:43:ce:20:57:18:f8:2c:95:b0:34:f8:
         3f:b2:cf:b9:fc:a5:fe:28:59:eb:8d:99:f9:3c:95:f5:55:00:
         60:66:25:fc:ec:8f:86:57:e0:44:2a:0a:41:8e:8b:8c:94:3f:
         fa:ad:53:8c:08:3c:08:e4:a7:a6:cb:c3:49:54:b9:ed:d0:c6:
         ff:49:01:27:ef:24:ab:91:66:8b:22:8d:9d:96:0e:45:1c:ea:
         77:71:e8:ef:31:a6:62:8b:bb:07:c6:ec:64:b0:ef:b7:fc:ae:
         9e:0c:55:1b:61:37:42:ab:84:5d:e5:89:2e:a8:a3:59:45:09:
         e4:95:a7:2d:6d:c0:b2:7b:40:f6:2b:52:cd:5f:fa:55:a0:c6:
         89:04:1e:6a:09:8e:a1:32:f7:63:74:21:fa:5d:a6:1b:72:be:
         25:a8:4e:f0:1f:78:28:a9:3b:1e:fc:13:68:25:0e:8c:e9:17:
         2d:23:d7:66:06:04:93:76:64:3d:8b:19:b0:7f:fb:82:71:ef:
         a8:ac:a7:7e:fb:3e:da:85:9d:04:57:ad:78:cc:dc:29:e4:20:
         45:3a:c1:91:e1:0d:0a:86:58:ec:f5:1c:ca:b4:3e:10:e1:a9:
         66:79:a7:da:0b:98:5e:de:dd:80:f7:86:46:b6:b3:eb:80:03:
         a9:2b:41:c7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSInTMxJ0i48qF4BvgbWElfj2txUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0ODY1NUE0NkM5MDUxNTRBNDZERjE5RDVDQUREQjIw
QjVEMTE1MzAeFw0yNTAyMDQxODIwMjFaFw0yNjAyMDMxODI1MjFaMDMxMTAvBgNV
BAMTKEEyRUFCNDE1MEFCRDgwOTE0ODgwRkFGNEVCQ0Q0OEUyMEFEOEEwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzXLmOIh0hVIllcgVfrKM5SQ05
XGx/RBJ/F1lvELsZ0AJt97OaRWVu/1rSYXnm4gen46jv4vQixy2ToKdYyiKjh/QC
KkJEU9IRi77gnKZgzsJnWa8wDOMatmgkA7NFCEh9u9ZvUbmGPygV0Mk2QH55cTSD
cWCnOhzuDrjryARbbr6ULUzS0T3zNSDdXwizOuBbou+ixm5Qh7YcRh1Xs+E2+gUt
gEP/PVnn6rzh/zDdq4jurCjXtT11cSUhExegC21hV70MRkps6orhnSR0xQFTge9J
ylWWqpVOna0kdbC3PQX5xoiKFiY1ZmE80OwdaimXrpNgkeNSqTo6uF6dE6LBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUouq0FQq9gJFIgPr0681I4grYoC8wHwYDVR0j
BBgwFoAU5EhlWkbJBRVKRt8Z1crdsgtdEVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUNEODNGNjVCM0MyOTg1QkZDMTk4MUYyRjU3ODZCMTY2
NzAxNjBBMDM1RTc5OTJDOEI1QkZFMTVGQTIzODMyLzAvRTQ0ODY1NUE0NkM5MDUx
NTRBNDZERjE5RDVDQUREQjIwQjVEMTE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDQ4NjU1QTQ2QzkwNTE1NEE0
NkRGMTlENUNBRERCMjBCNUQxMTUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFDRDgzRjY1QjNDMjk4NUJGQzE5ODFGMkY1Nzg2QjE2NjcwMTYwQTAz
NUU3OTkyQzhCNUJGRTE1RkEyMzgzMi8wLzMxMzgzNjJlMzEzNzM5MmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM3MzczNzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHurOA
MA0GCSqGSIb3DQEBCwUAA4IBAQAFkcFgiZI2Q84gVxj4LJWwNPg/ss+5/KX+KFnr
jZn5PJX1VQBgZiX87I+GV+BEKgpBjouMlD/6rVOMCDwI5Kemy8NJVLnt0Mb/SQEn
7ySrkWaLIo2dlg5FHOp3cejvMaZii7sHxuxksO+3/K6eDFUbYTdCq4Rd5YkuqKNZ
RQnklactbcCye0D2K1LNX/pVoMaJBB5qCY6hMvdjdCH6XaYbcr4lqE7wH3goqTse
/BNoJQ6M6RctI9dmBgSTdmQ9ixmwf/uCce+orKd++z7ahZ0EV614zNwp5CBFOsGR
4Q0Khljs9RzKtD4Q4almeafaC5he3t2A94ZGtrPrgAOpK0HH
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:59 2025 by rpki-client