Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3137362e302f32322d3234203d3e20323635373035.roa
File:                     3138362e32382e3137362e302f32322d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          /G4az39owuCZ/DRQBoGWiXYPt472CNT5pKazTbehkBc=
Subject key identifier:   EE:7A:25:1A:1B:79:BA:16:AC:5F:79:1B:64:CE:B3:A1:FB:76:45:5D
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       2A25AB0C64A96669E48EEA6ACAA802413196B1F5
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3137362e302f32322d3234203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 18:17:54 +0000
ROA not before:           Tue 04 Feb 2025 18:12:54 +0000
ROA not after:            Tue 03 Feb 2026 18:17:54 +0000
asID:                     265705
IP address blocks:        186.28.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:25:ab:0c:64:a9:66:69:e4:8e:ea:6a:ca:a8:02:41:31:96:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:54 2025 GMT
            Not After : Feb  3 18:17:54 2026 GMT
        Subject: CN=EE7A251A1B79BA16AC5F791B64CEB3A1FB76455D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:2f:97:91:b9:37:ba:18:d7:59:7c:60:d3:
                    14:ef:b0:dd:58:72:4d:81:59:1e:50:cd:b7:eb:84:
                    d3:81:d7:01:76:b2:a1:b9:db:3e:cc:ee:c9:6e:44:
                    18:16:80:27:2b:23:70:36:5b:0e:9f:fa:ff:82:ba:
                    44:9b:c0:99:8f:a6:0e:20:59:2d:91:dd:18:8f:d5:
                    cc:ca:a2:ba:96:cf:4d:88:8b:4c:d5:12:cc:73:e9:
                    65:31:ce:21:fc:be:68:f4:89:d5:40:66:40:97:bb:
                    89:40:1e:71:eb:4f:f3:f0:e2:07:99:12:ac:5e:24:
                    e3:0c:97:c3:3c:92:bc:8d:2a:97:1e:fe:32:2a:05:
                    b3:5c:4f:d3:56:df:27:8b:22:5f:c4:40:5c:f8:af:
                    99:af:7d:89:5a:eb:81:78:b8:e5:0e:49:8b:4d:a4:
                    8a:e8:f9:7f:e1:c6:1a:f9:02:cd:2c:ff:f9:0e:18:
                    2d:f9:bd:05:71:85:96:29:d1:a7:87:74:5a:d8:a8:
                    b2:d8:3d:a6:d7:35:b9:33:aa:15:a4:63:b2:d8:d0:
                    2c:60:5c:fe:26:e5:b9:80:4b:84:71:2d:fa:2c:89:
                    59:f6:52:16:3b:58:bb:af:48:07:a4:3b:66:7c:cd:
                    e5:60:72:0c:50:37:78:1e:d4:6c:04:5d:c9:d4:43:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:25:1A:1B:79:BA:16:AC:5F:79:1B:64:CE:B3:A1:FB:76:45:5D
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3137362e302f32322d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:07:0e:f9:2d:8a:94:b1:61:2c:4d:91:e2:c7:c9:49:26:c7:
         57:c9:ff:71:64:79:7c:2b:6d:49:cd:40:6d:37:2e:5f:b5:a3:
         cd:5a:b9:6b:5b:ad:51:99:6b:d8:0e:0e:de:be:e6:f9:40:d1:
         6e:cb:26:a0:bc:64:d5:5f:78:10:a2:6e:fd:bd:7b:12:23:85:
         51:a5:6e:d0:7c:89:a4:3d:89:9c:91:72:11:38:74:32:a5:9a:
         16:0f:de:71:c1:2f:76:b8:7d:57:01:df:76:d4:9f:ef:2f:8c:
         a6:f1:c0:79:50:40:2e:42:80:36:f4:83:8c:86:7b:94:01:e6:
         01:f2:0e:0e:96:69:f4:85:b5:06:20:0f:34:ca:62:a7:08:5d:
         05:4d:9f:1c:bf:05:27:60:c3:d9:62:4d:ff:2b:02:1b:c1:9f:
         ee:32:86:01:2c:17:ac:d0:7f:7e:8a:42:fb:e5:0c:6c:88:1f:
         07:23:fb:c7:1d:7f:38:1c:70:1d:e8:fc:16:17:e8:1c:9a:95:
         3d:85:9f:a3:d1:19:e1:ad:11:a2:28:8b:93:65:2d:f0:ab:de:
         82:99:64:44:ba:0c:0a:a0:74:70:99:c6:bc:28:ac:b2:11:0f:
         9c:f0:7c:63:5f:ae:8a:04:a4:bb:a6:41:16:ea:2d:b1:0f:be:
         1f:cb:89:ec
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKiWrDGSpZmnkjupqyqgCQTGWsfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0N0Q0NjIzRDBENzJFMTYxOUNDNkM5NEVGODM1RTlE
M0Q1RTYyMDAeFw0yNTAyMDQxODEyNTRaFw0yNjAyMDMxODE3NTRaMDMxMTAvBgNV
BAMTKEVFN0EyNTFBMUI3OUJBMTZBQzVGNzkxQjY0Q0VCM0ExRkI3NjQ1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Yy+Xkbk3uhjXWXxg0xTvsN1Y
ck2BWR5QzbfrhNOB1wF2sqG52z7M7sluRBgWgCcrI3A2Ww6f+v+CukSbwJmPpg4g
WS2R3RiP1czKorqWz02Ii0zVEsxz6WUxziH8vmj0idVAZkCXu4lAHnHrT/Pw4geZ
EqxeJOMMl8M8kryNKpce/jIqBbNcT9NW3yeLIl/EQFz4r5mvfYla64F4uOUOSYtN
pIro+X/hxhr5As0s//kOGC35vQVxhZYp0aeHdFrYqLLYPabXNbkzqhWkY7LY0Cxg
XP4m5bmAS4RxLfosiVn2UhY7WLuvSAekO2Z8zeVgcgxQN3ge1GwEXcnUQwWHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7nolGht5uhasX3kbZM6zoft2RV0wHwYDVR0j
BBgwFoAUZEfUYj0NcuFhnMbJTvg16dPV5iAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQ4RkNGQzIzRkRGRDQyNDEwMjc3N0EwMTdENDJENjgw
NDY4MDc3MTg4QzJGMUU5QTY5MUUwMzBGNEEwQzE1LzAvNjQ0N0Q0NjIzRDBENzJF
MTYxOUNDNkM5NEVGODM1RTlEM0Q1RTYyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDQ3RDQ2MjNEMEQ3MkUxNjE5
Q0M2Qzk0RUY4MzVFOUQzRDVFNjIwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0OEZDRkMyM0ZERkQ0MjQxMDI3NzdBMDE3RDQyRDY4MDQ2ODA3NzE4
OEMyRjFFOUE2OTFFMDMwRjRBMEMxNS8wLzMxMzgzNjJlMzIzODJlMzEzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuhyw
MA0GCSqGSIb3DQEBCwUAA4IBAQB4Bw75LYqUsWEsTZHix8lJJsdXyf9xZHl8K21J
zUBtNy5ftaPNWrlrW61RmWvYDg7evub5QNFuyyagvGTVX3gQom79vXsSI4VRpW7Q
fImkPYmckXIROHQypZoWD95xwS92uH1XAd921J/vL4ym8cB5UEAuQoA29IOMhnuU
AeYB8g4Olmn0hbUGIA80ymKnCF0FTZ8cvwUnYMPZYk3/KwIbwZ/uMoYBLBes0H9+
ikL75QxsiB8HI/vHHX84HHAd6PwWF+gcmpU9hZ+j0RnhrRGiKIuTZS3wq96CmWRE
ugwKoHRwmca8KKyyEQ+c8HxjX66KBKS7pkEW6i2xD74fy4ns
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:10 2025 by rpki-client