Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa
File:                     3133382e3132322e362e302f32342d3234203d3e20323639393734.roa (raw, json)
Hash identifier:          NBUHE2Ry6gqtC8izHPZ6Zef7dugB9COhf36zNEdZmEg=
Subject key identifier:   3A:8B:9F:AE:BD:1B:EA:00:10:0F:E5:0E:96:B4:F7:27:A3:51:BA:F2
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       5B037896EA03F2069D38638CA14912F7CA79C3E9
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa
Signing time:             Tue 04 Feb 2025 18:31:49 +0000
ROA not before:           Tue 04 Feb 2025 18:26:49 +0000
ROA not after:            Tue 03 Feb 2026 18:31:49 +0000
asID:                     269974
IP address blocks:        138.122.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:03:78:96:ea:03:f2:06:9d:38:63:8c:a1:49:12:f7:ca:79:c3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Feb  4 18:26:49 2025 GMT
            Not After : Feb  3 18:31:49 2026 GMT
        Subject: CN=3A8B9FAEBD1BEA00100FE50E96B4F727A351BAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:76:ca:f4:d1:23:48:a4:24:e7:77:58:0d:
                    78:69:ca:08:3f:a5:ce:70:3e:e9:39:40:95:63:82:
                    17:db:80:94:10:68:91:30:b7:c9:25:a9:f6:0a:5a:
                    10:d1:73:c4:93:7b:4e:02:76:eb:8f:5a:59:27:71:
                    1d:a4:88:eb:2a:f3:b7:42:b0:96:40:7b:40:e1:a2:
                    e0:f2:38:79:2e:72:a4:c5:bc:6f:86:54:3e:f0:dc:
                    a1:44:96:24:6b:d0:91:45:ca:b6:96:51:88:3e:a5:
                    b9:db:e2:53:11:48:29:c0:98:96:7c:a3:52:e8:91:
                    7a:93:97:a7:75:8e:36:46:f9:5f:86:a6:cf:6a:91:
                    4a:fc:0e:b1:87:34:32:ac:11:f8:92:2b:ab:77:db:
                    46:13:8f:9d:a2:f9:1b:23:94:4b:16:f7:8f:05:fe:
                    29:3a:5c:e0:70:1c:5d:0d:2e:34:1b:9d:e3:dc:ff:
                    74:e4:5e:24:f6:f5:39:1d:84:68:f8:8e:64:3f:cd:
                    3a:8a:f8:48:fc:2f:2d:8b:ec:3e:d8:c9:ff:44:b7:
                    8e:f6:36:94:57:30:4f:be:99:d7:02:84:fa:da:e3:
                    cc:0c:25:a6:65:64:ba:1c:23:33:38:20:30:0f:2e:
                    23:f0:63:ee:1b:5b:0b:4c:8b:7d:ec:7d:6a:ec:cd:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8B:9F:AE:BD:1B:EA:00:10:0F:E5:0E:96:B4:F7:27:A3:51:BA:F2
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:d2:c8:c8:80:2f:04:f0:52:2c:a7:13:54:12:ad:28:92:
         ca:88:3b:b8:1c:7f:9b:93:35:23:c8:4b:5b:79:ed:2e:2c:d3:
         e4:5e:b1:12:25:be:55:67:ff:bc:d4:47:9e:18:32:82:3b:ed:
         cb:f8:71:b1:ea:a8:b2:80:ab:ba:13:56:20:6a:f2:a3:18:3a:
         94:11:de:16:8c:82:86:c6:a5:62:ef:3c:ce:1f:de:da:7f:0f:
         f3:13:58:a7:61:41:8f:51:bd:0d:01:44:63:64:2f:8c:0c:aa:
         68:bb:88:d3:df:9d:2b:ec:13:22:71:e5:a4:1b:23:9c:56:5b:
         3e:58:f7:10:a7:58:d4:e3:5e:55:53:4d:34:9b:ba:82:91:e6:
         6e:1d:b0:59:e0:c0:ce:44:51:f6:83:93:51:23:76:21:63:60:
         f1:52:9b:a3:7a:c0:81:02:47:b1:28:78:67:80:1e:fe:e7:7e:
         9b:d8:9a:c3:55:11:6c:e5:a2:b6:51:bf:a3:ad:e3:9a:98:1a:
         2a:10:02:55:a5:64:6e:a4:ea:f6:b0:f5:d5:5b:45:fa:33:2e:
         56:6b:ca:f0:a7:cb:4a:43:2c:f9:d7:cc:6d:44:5c:e4:da:ae:
         b4:8f:cd:b5:28:aa:5c:53:ff:92:9f:31:77:53:9b:47:5a:f1:
         cc:3f:29:49
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWwN4luoD8gadOGOMoUkS98p5w+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCMkMyMEI3RjNCODlBQ0Y4RUVGOTg0M0ZGNURFRDRE
MDU4MzcwRjAeFw0yNTAyMDQxODI2NDlaFw0yNjAyMDMxODMxNDlaMDMxMTAvBgNV
BAMTKDNBOEI5RkFFQkQxQkVBMDAxMDBGRTUwRTk2QjRGNzI3QTM1MUJBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sHbK9NEjSKQk53dYDXhpygg/
pc5wPuk5QJVjghfbgJQQaJEwt8klqfYKWhDRc8STe04CduuPWlkncR2kiOsq87dC
sJZAe0DhouDyOHkucqTFvG+GVD7w3KFEliRr0JFFyraWUYg+pbnb4lMRSCnAmJZ8
o1LokXqTl6d1jjZG+V+Gps9qkUr8DrGHNDKsEfiSK6t320YTj52i+RsjlEsW948F
/ik6XOBwHF0NLjQbnePc/3TkXiT29TkdhGj4jmQ/zTqK+Ej8Ly2L7D7Yyf9Et472
NpRXME++mdcChPra48wMJaZlZLocIzM4IDAPLiPwY+4bWwtMi33sfWrszT3nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOoufrr0b6gAQD+UOlrT3J6NRuvIwHwYDVR0j
BBgwFoAUJ7LCC387iaz47vmEP/Xe1NBYNw8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0MyMUVCMTA5REYwRkZGRTdCN0NGNTVENDA2M0VEOTY0
Q0ZFMUQ1QTE5Rjg2OUUzOUI2ODFFRjNDOEUyNDdDLzAvMjdCMkMyMEI3RjNCODlB
Q0Y4RUVGOTg0M0ZGNURFRDREMDU4MzcwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0IyQzIwQjdGM0I4OUFDRjhF
RUY5ODQzRkY1REVENEQwNTgzNzBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNDMjFFQjEwOURGMEZGRkU3QjdDRjU1RDQwNjNFRDk2NENGRTFENUEx
OUY4NjlFMzlCNjgxRUYzQzhFMjQ3Qy8wLzMxMzMzODJlMzEzMjMyMmUzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6BjAN
BgkqhkiG9w0BAQsFAAOCAQEAe0PSyMiALwTwUiynE1QSrSiSyog7uBx/m5M1I8hL
W3ntLizT5F6xEiW+VWf/vNRHnhgygjvty/hxseqosoCruhNWIGryoxg6lBHeFoyC
hsalYu88zh/e2n8P8xNYp2FBj1G9DQFEY2QvjAyqaLuI09+dK+wTInHlpBsjnFZb
Plj3EKdY1ONeVVNNNJu6gpHmbh2wWeDAzkRR9oOTUSN2IWNg8VKbo3rAgQJHsSh4
Z4Ae/ud+m9iaw1URbOWitlG/o63jmpgaKhACVaVkbqTq9rD11VtF+jMuVmvK8KfL
SkMs+dfMbURc5NqutI/NtSiqXFP/kp8xd1ObR1rxzD8pSQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:22 2025 by rpki-client