Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32332d3233203d3e20323634373730.roa
File:                     3136382e3139342e3234322e302f32332d3233203d3e20323634373730.roa (raw, json)
Hash identifier:          VJR6eyhh+orxjkoVZQEAzGFEZW8qZQ1EQsclXy8g6xs=
Subject key identifier:   60:8E:89:72:1E:E3:16:3F:70:C1:A6:68:44:E5:AC:DF:C1:C8:FC:65
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       253F4A810A42CD3F6980DB5513F6C2595B06C196
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32332d3233203d3e20323634373730.roa
Signing time:             Tue 04 Feb 2025 18:01:35 +0000
ROA not before:           Tue 04 Feb 2025 17:56:35 +0000
ROA not after:            Tue 03 Feb 2026 18:01:35 +0000
asID:                     264770
IP address blocks:        168.194.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:4a:81:0a:42:cd:3f:69:80:db:55:13:f6:c2:59:5b:06:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Feb  4 17:56:35 2025 GMT
            Not After : Feb  3 18:01:35 2026 GMT
        Subject: CN=608E89721EE3163F70C1A66844E5ACDFC1C8FC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:57:5f:78:4c:23:43:23:da:3f:8d:2e:e2:
                    39:ef:c2:8c:f6:b7:2d:8f:ef:fa:f7:ca:7e:e9:1e:
                    5a:c3:5b:37:7d:01:04:2a:c7:da:c3:82:14:37:5e:
                    37:ed:70:59:44:1b:1c:e7:a3:9b:39:56:29:89:4f:
                    89:bd:ae:fa:da:fa:41:4b:58:56:b2:09:6b:c0:0e:
                    da:38:0a:c4:36:61:5b:3d:e1:26:73:8e:e9:79:88:
                    15:be:0b:c8:7d:c1:09:e5:5d:d2:6f:0b:0f:9b:da:
                    1d:3f:c2:ef:7a:6c:a6:b8:d9:2a:7d:d0:de:a3:d4:
                    65:e7:b7:85:33:be:47:2f:eb:3a:e9:23:cb:f8:e3:
                    9b:f5:e3:53:fa:89:87:f3:51:e0:96:c6:46:6e:75:
                    d8:bd:ca:e8:3c:f7:ef:34:d2:3a:08:f8:3c:da:6b:
                    70:8e:f6:a5:db:22:f2:0c:d9:4d:c9:72:5b:83:e5:
                    b0:29:9a:91:e8:b8:12:f9:92:69:61:87:d7:6c:e8:
                    21:ec:76:83:ac:7a:b3:e3:9c:0b:cf:2f:2f:79:78:
                    e6:ba:04:01:b4:52:f2:4f:42:0a:2b:a9:09:26:ea:
                    81:1d:85:86:7b:7d:dd:2e:e2:05:24:be:0d:b6:a7:
                    14:ca:00:07:d4:42:ae:8b:50:5c:96:f8:33:76:a9:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8E:89:72:1E:E3:16:3F:70:C1:A6:68:44:E5:AC:DF:C1:C8:FC:65
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32332d3233203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:93:09:e4:23:9d:e1:6b:dc:b0:93:4e:fb:d6:7c:78:9b:c2:
         9a:70:c4:40:54:df:00:bb:77:ae:84:4b:09:a5:d2:d9:1f:1f:
         83:c0:ac:d9:1f:e2:9d:7e:74:a3:4a:e4:c6:5a:05:b3:f3:b2:
         f2:db:ff:cc:df:0d:25:b0:db:d9:87:8d:ad:5a:f3:03:28:1d:
         a8:aa:d7:ba:1c:c9:c9:8c:5c:24:41:f3:35:cd:34:8e:eb:61:
         be:9c:76:db:01:a0:5a:25:4b:87:1a:20:68:4e:ed:f9:f5:21:
         ef:b0:f1:3f:f9:3d:8b:b1:ea:d5:25:a1:a7:46:7c:b5:0c:b9:
         31:0f:cb:ca:ba:bb:c3:e7:3c:b8:63:71:79:ec:e2:0c:80:8c:
         fb:1c:93:60:05:d0:a2:0a:72:16:6e:fe:07:2c:ac:15:f2:0c:
         7c:cb:9d:94:4c:60:c0:50:6b:1c:a1:60:93:2a:59:0b:c9:22:
         08:ac:04:df:5e:9a:5d:e0:0b:16:fc:ce:be:68:91:f0:6c:c1:
         28:1d:51:e8:3d:a5:ea:57:f5:c1:40:c4:b3:b0:1f:50:c3:96:
         77:8a:11:c8:09:12:77:24:e4:af:25:ed:ae:ab:25:f5:9a:64:
         f3:d0:c6:1a:e6:e7:3e:d7:62:db:2a:df:fa:e7:35:36:4e:c0:
         44:85:29:74
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJT9KgQpCzT9pgNtVE/bCWVsGwZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdBQzBDRTU1M0Y5M0ZDNUNFOTQyRjEyMzYwRTZBMTQ0
NzIzRjgyRDAeFw0yNTAyMDQxNzU2MzVaFw0yNjAyMDMxODAxMzVaMDMxMTAvBgNV
BAMTKDYwOEU4OTcyMUVFMzE2M0Y3MEMxQTY2ODQ0RTVBQ0RGQzFDOEZDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oFdfeEwjQyPaP40u4jnvwoz2
ty2P7/r3yn7pHlrDWzd9AQQqx9rDghQ3XjftcFlEGxzno5s5VimJT4m9rvra+kFL
WFayCWvADto4CsQ2YVs94SZzjul5iBW+C8h9wQnlXdJvCw+b2h0/wu96bKa42Sp9
0N6j1GXnt4Uzvkcv6zrpI8v445v141P6iYfzUeCWxkZuddi9yug89+800joI+Dza
a3CO9qXbIvIM2U3JcluD5bApmpHouBL5kmlhh9ds6CHsdoOserPjnAvPLy95eOa6
BAG0UvJPQgorqQkm6oEdhYZ7fd0u4gUkvg22pxTKAAfUQq6LUFyW+DN2qRIjAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUYI6Jch7jFj9wwaZoROWs38HI/GUwHwYDVR0j
BBgwFoAU96wM5VP5P8XOlC8SNg5qFEcj+C0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDQzNzBDNTQxOTAzOERGQUZFNDIzMzlFNkQyMzYyREJG
OUY0OEY1QTFBMjI1REZEOEVEQzcwOTY5QzFDMjMwLzAvRjdBQzBDRTU1M0Y5M0ZD
NUNFOTQyRjEyMzYwRTZBMTQ0NzIzRjgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0FDMENFNTUzRjkzRkM1Q0U5
NDJGMTIzNjBFNkExNDQ3MjNGODJELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0MzcwQzU0MTkwMzhERkFGRTQyMzM5RTZEMjM2MkRCRjlGNDhGNUEx
QTIyNURGRDhFREM3MDk2OUMxQzIzMC8wLzMxMzYzODJlMzEzOTM0MmUzMjM0MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzNzM3MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo
wvIwDQYJKoZIhvcNAQELBQADggEBAKCTCeQjneFr3LCTTvvWfHibwppwxEBU3wC7
d66ESwml0tkfH4PArNkf4p1+dKNK5MZaBbPzsvLb/8zfDSWw29mHja1a8wMoHaiq
17ocycmMXCRB8zXNNI7rYb6cdtsBoFolS4caIGhO7fn1Ie+w8T/5PYux6tUloadG
fLUMuTEPy8q6u8PnPLhjcXns4gyAjPsck2AF0KIKchZu/gcsrBXyDHzLnZRMYMBQ
axyhYJMqWQvJIgisBN9eml3gCxb8zr5okfBswSgdUeg9pepX9cFAxLOwH1DDlneK
EcgJEnck5K8l7a6rJfWaZPPQxhrm5z7XYtsq3/rnNTZOwESFKXQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:04 2025 by rpki-client