Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
File:                     3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier:          hjh3xzFzEPZTwOnwHAwaWTrKNgGMuEytukrciQmqNkk=
Subject key identifier:   5D:BE:41:CF:C3:00:40:05:CD:74:55:5D:F0:D9:ED:28:32:C6:98:95
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       0A17960937AE42B8589FDF4445A1D2A02C1DAB30
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
Signing time:             Tue 04 Feb 2025 18:13:52 +0000
ROA not before:           Tue 04 Feb 2025 18:08:52 +0000
ROA not after:            Tue 03 Feb 2026 18:13:52 +0000
asID:                     263744
IP address blocks:        143.137.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:17:96:09:37:ae:42:b8:58:9f:df:44:45:a1:d2:a0:2c:1d:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Feb  4 18:08:52 2025 GMT
            Not After : Feb  3 18:13:52 2026 GMT
        Subject: CN=5DBE41CFC3004005CD74555DF0D9ED2832C69895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:f2:fb:aa:82:da:b5:5c:57:bc:0f:81:9c:
                    3c:d8:36:12:73:2a:1a:ea:21:bc:a3:4b:cf:e0:b4:
                    64:7f:24:4d:51:47:a5:92:f8:4a:d7:dd:fb:12:2e:
                    d0:df:65:de:52:c0:bf:7f:9b:3b:79:fd:f9:87:74:
                    b6:7d:91:ce:a2:78:61:10:09:91:ad:27:3a:0f:be:
                    56:44:cb:cb:0c:d2:e8:9b:25:05:49:a1:03:17:1c:
                    f1:89:f6:d5:3a:57:3b:b4:c9:40:81:2c:e0:9b:2c:
                    d6:b5:18:29:a7:a1:57:14:2c:1e:48:ec:1d:54:63:
                    57:51:fd:dd:47:85:a1:d0:cc:b9:03:5e:f5:a4:ba:
                    a2:d2:10:56:c5:e3:60:0d:09:3c:f8:f9:84:c4:6d:
                    1b:87:99:48:0e:18:2c:f2:0a:b4:6a:9f:ac:4e:9f:
                    ae:63:f5:ed:5b:e7:d1:0b:59:eb:29:c4:36:a9:31:
                    9f:3d:98:0c:6f:1e:3b:1f:55:d0:4b:7e:9e:a8:67:
                    c8:b3:b2:9e:42:fd:34:d9:60:90:02:4d:14:07:f1:
                    48:fe:b1:80:36:b9:97:aa:ed:95:ef:40:5f:fe:e8:
                    c5:5d:ed:f7:9c:1e:af:86:6c:a9:02:90:1b:73:47:
                    95:b7:1b:db:52:58:c4:08:0b:06:13:8a:a6:8a:f4:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:41:CF:C3:00:40:05:CD:74:55:5D:F0:D9:ED:28:32:C6:98:95
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:8d:d5:1d:22:f0:ab:96:57:28:bb:d8:12:9d:f1:cd:40:
         58:ed:ca:6b:d7:73:02:3a:db:25:c6:76:e1:48:71:ca:f1:d8:
         af:2f:10:be:cd:de:f1:2d:88:49:5a:49:cb:a7:4f:74:1c:69:
         ad:54:8d:3d:26:2b:c0:3e:b4:e2:36:7d:af:c5:70:a6:a9:1d:
         87:51:a2:60:a4:c4:bd:58:94:d4:92:56:51:a7:0b:c3:cb:7a:
         de:f3:6a:63:b5:0a:4a:64:f0:6e:7d:de:3c:63:4f:e6:16:94:
         f2:c4:d8:99:ac:84:07:21:d2:99:23:16:a6:18:34:ff:ef:68:
         df:68:75:54:33:16:fe:2e:85:6e:80:8a:96:f5:6a:3a:b2:0e:
         47:54:af:cc:6d:aa:6a:d5:56:47:13:46:ff:2e:c1:3d:ab:65:
         6e:65:c1:de:b8:40:63:78:ae:96:d9:4c:9b:02:d9:38:40:ae:
         d3:2b:5a:ca:d8:47:07:43:8a:96:e6:85:ae:7f:f6:ea:2e:a7:
         3a:b6:17:f3:cd:5c:41:2d:8d:6c:23:29:d1:e1:c4:19:d1:44:
         d6:8b:73:71:0a:93:53:3e:f2:67:66:58:2f:8e:5e:11:6f:c7:
         ca:46:c4:22:e0:88:69:64:08:fa:42:c9:62:6d:dd:37:99:72:
         88:3c:73:72
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCheWCTeuQrhYn99ERaHSoCwdqzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMwQUI2OTEyNzgy
NkY3NTZBMjAeFw0yNTAyMDQxODA4NTJaFw0yNjAyMDMxODEzNTJaMDMxMTAvBgNV
BAMTKDVEQkU0MUNGQzMwMDQwMDVDRDc0NTU1REYwRDlFRDI4MzJDNjk4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwfL7qoLatVxXvA+BnDzYNhJz
KhrqIbyjS8/gtGR/JE1RR6WS+ErX3fsSLtDfZd5SwL9/mzt5/fmHdLZ9kc6ieGEQ
CZGtJzoPvlZEy8sM0uibJQVJoQMXHPGJ9tU6Vzu0yUCBLOCbLNa1GCmnoVcULB5I
7B1UY1dR/d1HhaHQzLkDXvWkuqLSEFbF42ANCTz4+YTEbRuHmUgOGCzyCrRqn6xO
n65j9e1b59ELWespxDapMZ89mAxvHjsfVdBLfp6oZ8izsp5C/TTZYJACTRQH8Uj+
sYA2uZeq7ZXvQF/+6MVd7fecHq+GbKkCkBtzR5W3G9tSWMQICwYTiqaK9MWtAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUXb5Bz8MAQAXNdFVd8NntKDLGmJUwHwYDVR0j
BBgwFoAUYy1xBidRdztfpRrAq2kSeCb3VqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZG
RTdGMDI4MDQyM0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzcz
QjVGQTUxQUMwQUI2OTEyNzgyNkY3NTZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzJENzEwNjI3NTE3NzNCNUZB
NTFBQzBBQjY5MTI3ODI2Rjc1NkEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMwNzQyNzUzQUM2RkU3RjAyODA0
MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzMxMzQzMzJlMzEzMzM3MmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzNzM0MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
iagwDQYJKoZIhvcNAQELBQADggEBAFGPjdUdIvCrllcou9gSnfHNQFjtymvXcwI6
2yXGduFIccrx2K8vEL7N3vEtiElaScunT3Qcaa1UjT0mK8A+tOI2fa/FcKapHYdR
omCkxL1YlNSSVlGnC8PLet7zamO1Ckpk8G593jxjT+YWlPLE2JmshAch0pkjFqYY
NP/vaN9odVQzFv4uhW6Aipb1ajqyDkdUr8xtqmrVVkcTRv8uwT2rZW5lwd64QGN4
rpbZTJsC2ThArtMrWsrYRwdDipbmha5/9uoupzq2F/PNXEEtjWwjKdHhxBnRRNaL
c3EKk1M+8mdmWC+OXhFvx8pGxCLgiGlkCPpCyWJt3TeZcog8c3I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:53 2025 by rpki-client