Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          1n165CEue0DdQkoUzr7FcV0PHR5IkO6q07dAumTbFN0=
Subject key identifier:   22:F0:09:6A:06:C0:B9:9E:50:F4:9D:37:7E:65:CF:59:D3:DE:4A:B2
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       4CD9E74985E92D912CE19435BDE561A866D6315E
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 04 Feb 2025 18:01:35 +0000
ROA not before:           Tue 04 Feb 2025 17:56:35 +0000
ROA not after:            Tue 03 Feb 2026 18:01:35 +0000
asID:                     264770
IP address blocks:        168.194.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:e7:49:85:e9:2d:91:2c:e1:94:35:bd:e5:61:a8:66:d6:31:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Feb  4 17:56:35 2025 GMT
            Not After : Feb  3 18:01:35 2026 GMT
        Subject: CN=22F0096A06C0B99E50F49D377E65CF59D3DE4AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:d9:7f:4a:1e:e7:47:42:e1:8e:33:c6:27:
                    9d:d1:e3:b3:e7:58:5d:a2:d2:b0:13:ac:25:ae:6c:
                    5a:ba:9a:90:17:75:ae:06:f9:8e:75:ee:27:50:0d:
                    6b:30:10:11:78:a7:84:c4:48:1d:09:69:1b:db:2e:
                    0f:19:b9:30:1a:3f:16:98:88:4d:2d:a8:f2:75:37:
                    88:51:06:97:fd:71:ec:1e:e4:cf:36:37:4b:45:98:
                    f4:65:67:a8:44:c0:5a:ea:f8:e5:b7:c3:34:bc:f4:
                    c6:cc:d8:c1:9f:02:23:57:c4:ba:0c:6c:c8:15:e5:
                    2a:33:04:b2:97:67:eb:73:f6:30:bf:84:5d:ac:45:
                    b6:d8:b9:53:0e:bc:37:25:1e:42:d5:17:13:e3:6a:
                    56:a3:70:8b:f8:b9:95:7b:34:51:ef:90:67:8c:e8:
                    81:f2:8b:9c:0b:9d:49:e1:e2:f3:71:1d:b6:ae:94:
                    eb:ef:02:ea:97:ba:72:b8:ab:f4:43:9e:c2:4a:9c:
                    73:43:b8:d8:a6:d7:f8:e5:86:5d:99:7f:1a:47:25:
                    9b:cd:58:a1:fb:9e:69:0f:26:4a:d4:0f:e6:1d:c5:
                    f6:d0:91:5f:59:7a:3d:12:88:76:43:ee:00:ea:1b:
                    98:4a:df:ab:7b:11:ae:b8:19:9d:44:51:4f:b1:7e:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:09:6A:06:C0:B9:9E:50:F4:9D:37:7E:65:CF:59:D3:DE:4A:B2
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:81:e2:09:9b:47:d4:d8:cc:56:75:29:4c:92:15:08:87:c9:
         60:ba:8f:85:a8:c1:02:2b:24:d6:70:8d:ea:f3:15:e2:c0:9d:
         ce:33:a7:c1:c7:db:a0:b3:35:3e:ca:c8:82:15:45:5c:26:c6:
         71:c9:37:6d:ff:da:de:7c:7f:0f:e4:dc:59:58:b1:fd:9f:0f:
         33:80:90:2a:97:00:b6:c2:a4:f9:4f:30:0c:26:9a:9d:d4:13:
         4e:c5:76:25:82:84:d6:07:4f:15:b3:15:1e:a2:b9:24:9a:e2:
         16:37:5a:20:fb:b5:08:c7:47:00:80:be:fd:20:a3:70:0f:8a:
         ee:b8:ff:d2:b9:4d:e0:cb:53:e5:ba:d0:7a:d2:c8:05:79:ef:
         5e:75:24:02:42:fb:ce:fd:57:7c:70:69:58:63:79:11:77:28:
         6d:7a:ee:27:8e:73:02:3b:09:44:f4:81:2b:72:b8:76:90:fe:
         53:b1:07:ca:da:31:50:4f:cb:e5:d8:d0:8b:57:f1:f7:a7:57:
         84:2b:03:ab:ba:70:81:27:fc:ab:ea:b6:74:d4:09:25:6c:bc:
         a3:82:fa:15:6a:3a:18:2c:47:16:cc:0b:3a:fe:66:60:cd:22:
         51:b2:67:e1:cd:7c:d6:59:51:98:28:74:42:e0:be:32:3d:d9:
         f3:c5:ba:d8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTNnnSYXpLZEs4ZQ1veVhqGbWMV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdBQzBDRTU1M0Y5M0ZDNUNFOTQyRjEyMzYwRTZBMTQ0
NzIzRjgyRDAeFw0yNTAyMDQxNzU2MzVaFw0yNjAyMDMxODAxMzVaMDMxMTAvBgNV
BAMTKDIyRjAwOTZBMDZDMEI5OUU1MEY0OUQzNzdFNjVDRjU5RDNERTRBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrdl/Sh7nR0LhjjPGJ53R47Pn
WF2i0rATrCWubFq6mpAXda4G+Y517idQDWswEBF4p4TESB0JaRvbLg8ZuTAaPxaY
iE0tqPJ1N4hRBpf9cewe5M82N0tFmPRlZ6hEwFrq+OW3wzS89MbM2MGfAiNXxLoM
bMgV5SozBLKXZ+tz9jC/hF2sRbbYuVMOvDclHkLVFxPjalajcIv4uZV7NFHvkGeM
6IHyi5wLnUnh4vNxHbaulOvvAuqXunK4q/RDnsJKnHNDuNim1/jlhl2ZfxpHJZvN
WKH7nmkPJkrUD+YdxfbQkV9Zej0SiHZD7gDqG5hK36t7Ea64GZ1EUU+xfpRlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUIvAJagbAuZ5Q9J03fmXPWdPeSrIwHwYDVR0j
BBgwFoAU96wM5VP5P8XOlC8SNg5qFEcj+C0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDQzNzBDNTQxOTAzOERGQUZFNDIzMzlFNkQyMzYyREJG
OUY0OEY1QTFBMjI1REZEOEVEQzcwOTY5QzFDMjMwLzAvRjdBQzBDRTU1M0Y5M0ZD
NUNFOTQyRjEyMzYwRTZBMTQ0NzIzRjgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0FDMENFNTUzRjkzRkM1Q0U5
NDJGMTIzNjBFNkExNDQ3MjNGODJELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0MzcwQzU0MTkwMzhERkFGRTQyMzM5RTZEMjM2MkRCRjlGNDhGNUEx
QTIyNURGRDhFREM3MDk2OUMxQzIzMC8wLzMxMzYzODJlMzEzOTM0MmUzMjM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM3MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wvIwDQYJKoZIhvcNAQELBQADggEBAESB4gmbR9TYzFZ1KUySFQiHyWC6j4WowQIr
JNZwjerzFeLAnc4zp8HH26CzNT7KyIIVRVwmxnHJN23/2t58fw/k3FlYsf2fDzOA
kCqXALbCpPlPMAwmmp3UE07FdiWChNYHTxWzFR6iuSSa4hY3WiD7tQjHRwCAvv0g
o3APiu64/9K5TeDLU+W60HrSyAV57151JAJC+879V3xwaVhjeRF3KG167ieOcwI7
CUT0gStyuHaQ/lOxB8raMVBPy+XY0ItX8fenV4QrA6u6cIEn/KvqtnTUCSVsvKOC
+hVqOhgsRxbMCzr+ZmDNIlGyZ+HNfNZZUZgodELgvjI92fPFutg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:54 2025 by rpki-client