Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa
File:                     3230312e3139322e302e302f31322d3234203d3e203131383330.roa (raw, json)
Hash identifier:          fGsYmgHoZWEotyOAjsxOrtY6C1hW+757+h66/aSFdsk=
Subject key identifier:   16:18:6B:B1:61:51:1B:34:17:C8:3D:C0:6D:23:FB:4E:F7:3D:C4:CE
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       4EEEF2B0537A0BF63F78FEB6331AFAD5BCD6067C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:41 +0000
ROA not before:           Tue 04 Feb 2025 18:31:41 +0000
ROA not after:            Tue 03 Feb 2026 18:36:41 +0000
asID:                     11830
IP address blocks:        201.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:f2:b0:53:7a:0b:f6:3f:78:fe:b6:33:1a:fa:d5:bc:d6:06:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:41 2025 GMT
            Not After : Feb  3 18:36:41 2026 GMT
        Subject: CN=16186BB161511B3417C83DC06D23FB4EF73DC4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:26:ae:df:a8:c4:87:59:ca:09:26:ae:74:
                    46:a9:5d:94:65:2d:3d:dd:22:49:46:33:81:5e:4a:
                    62:3b:44:ff:34:91:32:45:5e:3a:37:c8:40:25:8c:
                    aa:1c:5a:8e:99:89:9e:49:ba:36:84:f1:55:81:c3:
                    56:42:d9:ea:cb:35:b1:7e:90:df:df:ba:3f:55:7d:
                    47:1b:2b:c3:e5:ee:cf:48:dd:90:02:36:b1:2b:ce:
                    18:1c:e2:69:56:56:6a:3e:02:3a:b8:25:a7:31:e5:
                    31:9e:8f:9c:5e:16:da:03:b2:71:a1:a8:ba:ea:09:
                    72:8a:3c:34:d4:1d:2f:3a:b8:06:ce:ed:f8:22:eb:
                    0e:1c:27:cf:c0:7f:0f:6a:0d:37:e5:d0:38:92:25:
                    d0:b1:88:e3:fc:0a:3b:78:f2:fb:49:95:75:b9:6a:
                    5f:f3:ec:50:85:45:61:a1:f4:e8:be:cc:49:83:2f:
                    3c:74:f6:cd:10:48:86:f5:c0:05:86:fe:59:e5:47:
                    c0:26:1a:b7:90:f5:e8:89:e0:f4:73:7b:d1:e3:3b:
                    4c:c8:22:e5:d9:9a:81:01:c9:42:1e:0b:01:53:85:
                    6a:74:e5:e0:dc:55:b3:2c:00:a3:98:9b:ad:9f:31:
                    04:e4:75:fd:9d:81:f4:91:b2:4b:81:e0:62:e4:0b:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:6B:B1:61:51:1B:34:17:C8:3D:C0:6D:23:FB:4E:F7:3D:C4:CE
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:ba:8a:9f:0c:d0:37:58:15:c3:1c:5b:c8:fc:65:cb:00:
         af:8d:d0:50:d2:66:9f:6e:a2:d7:ed:cd:4c:89:87:a1:34:8a:
         7e:90:6f:49:ab:f7:77:6c:ef:6a:df:9e:98:14:c8:63:c9:4c:
         ca:33:43:93:55:07:b6:e0:7f:71:35:26:f5:d6:07:d2:8b:05:
         93:9f:c6:57:5d:f4:8f:22:96:c4:12:2b:33:01:6b:ba:fc:40:
         15:6d:e1:49:ec:88:3d:34:32:ae:c4:af:74:bd:3d:c1:6b:40:
         56:1e:72:fc:8b:37:07:16:26:02:35:f7:64:d0:0e:1f:a0:98:
         21:ae:47:6f:cc:59:d2:0c:56:b4:06:cd:31:71:45:7d:63:8c:
         75:74:85:85:be:e2:43:96:81:8b:63:52:6a:6c:98:52:e7:bd:
         8a:99:be:5c:4a:bb:44:f8:af:14:62:ca:98:ef:cc:c1:e3:f4:
         01:38:0c:6d:44:78:82:5d:06:4a:11:0b:5d:da:66:df:a8:84:
         96:54:0d:3b:33:7a:2d:db:0e:dc:0f:72:bf:08:bb:22:b3:cb:
         78:e2:a7:72:26:06:a4:4d:d6:58:8c:4f:7b:4f:41:d9:b3:3f:
         97:97:1e:19:3d:ec:3c:6d:b9:a9:99:f9:10:e2:7a:05:13:84:
         04:07:a4:79
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUTu7ysFN6C/Y/eP62Mxr61bzWBnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxNDFaFw0yNjAyMDMxODM2NDFaMDMxMTAvBgNV
BAMTKDE2MTg2QkIxNjE1MTFCMzQxN0M4M0RDMDZEMjNGQjRFRjczREM0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8Sau36jEh1nKCSaudEapXZRl
LT3dIklGM4FeSmI7RP80kTJFXjo3yEAljKocWo6ZiZ5JujaE8VWBw1ZC2erLNbF+
kN/fuj9VfUcbK8Pl7s9I3ZACNrErzhgc4mlWVmo+Ajq4Jacx5TGej5xeFtoDsnGh
qLrqCXKKPDTUHS86uAbO7fgi6w4cJ8/Afw9qDTfl0DiSJdCxiOP8Cjt48vtJlXW5
al/z7FCFRWGh9Oi+zEmDLzx09s0QSIb1wAWG/lnlR8AmGreQ9eiJ4PRze9HjO0zI
IuXZmoEByUIeCwFThWp05eDcVbMsAKOYm62fMQTkdf2dgfSRskuB4GLkC3o/AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUFhhrsWFRGzQXyD3AbSP7Tvc9xM4wHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzEzOTMyMmUzMDJlMzAy
ZjMxMzIyZDMyMzQyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwTJwDANBgkq
hkiG9w0BAQsFAAOCAQEAmLu6ip8M0DdYFcMcW8j8ZcsAr43QUNJmn26i1+3NTImH
oTSKfpBvSav3d2zvat+emBTIY8lMyjNDk1UHtuB/cTUm9dYH0osFk5/GV130jyKW
xBIrMwFruvxAFW3hSeyIPTQyrsSvdL09wWtAVh5y/Is3BxYmAjX3ZNAOH6CYIa5H
b8xZ0gxWtAbNMXFFfWOMdXSFhb7iQ5aBi2NSamyYUue9ipm+XEq7RPivFGLKmO/M
weP0ATgMbUR4gl0GShELXdpm36iEllQNOzN6LdsO3A9yvwi7IrPLeOKnciYGpE3W
WIxPe09B2bM/l5ceGT3sPG25qZn5EOJ6BROEBAekeQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:07:41 2025 by rpki-client