Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e342e302f32322d3232203d3e203233313430.roa
File:                     3134362e38332e342e302f32322d3232203d3e203233313430.roa (raw, json)
Hash identifier:          bMJfW3NtpJC+ClI1jL3A1jQg1QbzoAHcO6r+vPkzd1Q=
Subject key identifier:   F7:8F:83:A4:1A:DB:72:02:D7:1B:17:45:E4:0C:AE:06:55:37:11:E1
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       6F150822BDEF1C77CA6F71BF115DDE9B04C07AF3
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e342e302f32322d3232203d3e203233313430.roa
Signing time:             Tue 04 Feb 2025 18:09:52 +0000
ROA not before:           Tue 04 Feb 2025 18:04:52 +0000
ROA not after:            Tue 03 Feb 2026 18:09:52 +0000
asID:                     23140
IP address blocks:        146.83.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:08:22:bd:ef:1c:77:ca:6f:71:bf:11:5d:de:9b:04:c0:7a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:52 2025 GMT
            Not After : Feb  3 18:09:52 2026 GMT
        Subject: CN=F78F83A41ADB7202D71B1745E40CAE06553711E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:90:95:b6:f0:6a:47:be:42:ab:b7:97:18:
                    bb:6b:51:a0:9b:f7:dd:0b:f2:49:99:e9:e0:c0:e0:
                    32:68:1f:54:df:f4:d6:2f:9a:43:8d:9c:74:60:7f:
                    95:49:96:8e:65:4f:91:f9:6d:6a:e0:22:80:5f:c2:
                    b5:4e:d0:1f:92:8b:c0:eb:e8:66:21:75:47:54:e4:
                    e2:69:e1:2a:3d:2d:80:ca:64:36:2a:66:73:e3:d3:
                    34:35:ad:56:1e:39:39:90:e0:4f:99:92:53:f6:c0:
                    fc:13:e0:2b:26:45:3c:bb:d6:80:56:c0:dc:98:ec:
                    ec:27:96:ee:13:21:ab:c6:97:41:f7:90:17:db:54:
                    f6:65:5c:f8:b5:d3:4c:63:33:79:e2:36:dd:e1:8e:
                    9a:7a:1e:12:d7:f2:21:4b:f5:2a:cb:ae:b7:67:2c:
                    b9:7a:ef:66:2d:47:46:3a:54:b6:84:73:7a:7e:77:
                    14:56:3d:cd:8f:b8:36:67:87:79:53:31:37:aa:4b:
                    e8:7a:d2:49:f2:c0:32:e9:cf:2e:ec:cf:e5:b6:ec:
                    88:9c:bc:ea:e5:6a:90:2c:d4:39:c3:4f:a4:71:9d:
                    3c:fc:36:e1:c2:61:63:33:7c:4a:b2:57:a2:56:93:
                    57:df:8c:11:b0:6d:4f:75:07:7e:c1:41:9b:e0:d6:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:83:A4:1A:DB:72:02:D7:1B:17:45:E4:0C:AE:06:55:37:11:E1
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e342e302f32322d3232203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:b8:c4:70:ad:09:e1:7d:44:19:3a:b4:c7:df:0b:94:06:
         34:ee:37:5a:55:d8:0a:e0:52:24:a2:57:e7:ac:ac:c1:a6:b3:
         a4:7d:63:68:46:1c:d1:95:70:b7:48:2a:7c:6e:96:cf:76:3c:
         89:f6:20:22:bc:ac:2d:21:ef:18:c7:1a:06:d0:3b:25:10:47:
         5d:29:06:08:e1:70:49:0d:6a:d1:ea:9b:d3:d0:b3:e5:6a:e7:
         26:1c:fa:9c:85:20:8d:6c:8e:ff:04:26:64:30:7b:3e:36:7e:
         aa:f4:20:90:f2:11:7b:12:dd:a3:8a:25:b9:27:f3:1f:8f:d7:
         3a:f0:1a:6e:f6:d1:bb:26:de:8e:ca:9e:92:3f:fe:7d:6d:c7:
         7a:1e:f9:07:bf:3f:06:86:69:e4:e0:2e:20:39:42:03:ab:43:
         4b:70:91:b2:91:46:91:8e:bb:3a:c1:22:74:d7:d0:84:66:d9:
         db:3d:13:ba:65:c6:20:f0:c7:be:ab:ad:c1:8e:d8:36:0c:7e:
         62:e3:d2:d8:09:f0:15:8d:8d:80:9d:53:74:45:8d:0c:b9:9b:
         cd:5f:fd:7b:ad:1d:ac:77:f8:84:d1:7c:5b:02:4f:5b:68:37:
         c6:df:1c:1b:38:de:1a:29:be:e7:1e:85:1e:7e:e5:86:d3:bc:
         01:5e:c5:95
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbxUIIr3vHHfKb3G/EV3emwTAevMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFFNEVGQTk3NUIwNDI0OEU3MjE4QTNCQ0NGNEY3QzNE
QjlENjkxMDAeFw0yNTAyMDQxODA0NTJaFw0yNjAyMDMxODA5NTJaMDMxMTAvBgNV
BAMTKEY3OEY4M0E0MUFEQjcyMDJENzFCMTc0NUU0MENBRTA2NTUzNzExRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y5CVtvBqR75Cq7eXGLtrUaCb
990L8kmZ6eDA4DJoH1Tf9NYvmkONnHRgf5VJlo5lT5H5bWrgIoBfwrVO0B+Si8Dr
6GYhdUdU5OJp4So9LYDKZDYqZnPj0zQ1rVYeOTmQ4E+ZklP2wPwT4CsmRTy71oBW
wNyY7Ownlu4TIavGl0H3kBfbVPZlXPi100xjM3niNt3hjpp6HhLX8iFL9SrLrrdn
LLl672YtR0Y6VLaEc3p+dxRWPc2PuDZnh3lTMTeqS+h60knywDLpzy7sz+W27Iic
vOrlapAs1DnDT6RxnTz8NuHCYWMzfEqyV6JWk1ffjBGwbU91B37BQZvg1kzzAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU94+DpBrbcgLXGxdF5AyuBlU3EeEwHwYDVR0j
BBgwFoAUGuTvqXWwQkjnIYo7zPT3w9udaRAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzRGNTJEQTIyMEMwMkNEN0JFRjAxODJCRTBENEJEN0U0
QTE0MEZEODA1RjFDNzVBRURCNzhDNTFDNTA1NUE0LzAvMUFFNEVGQTk3NUIwNDI0
OEU3MjE4QTNCQ0NGNEY3QzNEQjlENjkxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQUU0RUZBOTc1QjA0MjQ4RTcy
MThBM0JDQ0Y0RjdDM0RCOUQ2OTEwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0RjUyREEyMjBDMDJDRDdCRUYwMTgyQkUwRDRCRDdFNEExNDBGRDgw
NUYxQzc1QUVEQjc4QzUxQzUwNTVBNC8wLzMxMzQzNjJlMzgzMzJlMzQyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMjMzMzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCklMEMA0GCSqG
SIb3DQEBCwUAA4IBAQA1/7jEcK0J4X1EGTq0x98LlAY07jdaVdgK4FIkolfnrKzB
prOkfWNoRhzRlXC3SCp8bpbPdjyJ9iAivKwtIe8YxxoG0DslEEddKQYI4XBJDWrR
6pvT0LPlaucmHPqchSCNbI7/BCZkMHs+Nn6q9CCQ8hF7Et2jiiW5J/Mfj9c68Bpu
9tG7Jt6Oyp6SP/59bcd6HvkHvz8Ghmnk4C4gOUIDq0NLcJGykUaRjrs6wSJ019CE
ZtnbPRO6ZcYg8Me+q63Bjtg2DH5i49LYCfAVjY2AnVN0RY0MuZvNX/17rR2sd/iE
0XxbAk9baDfG3xwbON4aKb7nHoUefuWG07wBXsWV
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:19 2025 by rpki-client