Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa
File:                     3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa (raw, json)
Hash identifier:          PHWUYvqpjKmwJ0zhwLoWqocbBAA6haqk23HIyU8G45E=
Subject key identifier:   21:83:FE:98:CC:25:1A:22:24:3B:40:85:DD:5C:B3:78:C8:6F:60:8C
Certificate issuer:       /CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
Certificate serial:       570F7035A5674DE3FB2077E7F5AF8D20AF71C6A3
Authority key identifier: 63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa
Signing time:             Tue 04 Feb 2025 18:30:18 +0000
ROA not before:           Tue 04 Feb 2025 18:25:18 +0000
ROA not after:            Tue 03 Feb 2026 18:30:18 +0000
asID:                     270004
IP address blocks:        187.102.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0f:70:35:a5:67:4d:e3:fb:20:77:e7:f5:af:8d:20:af:71:c6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
        Validity
            Not Before: Feb  4 18:25:18 2025 GMT
            Not After : Feb  3 18:30:18 2026 GMT
        Subject: CN=2183FE98CC251A22243B4085DD5CB378C86F608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:e5:22:a8:61:86:3c:ee:7f:48:2e:51:75:
                    04:20:22:14:39:70:0e:02:87:45:66:54:4b:1b:38:
                    81:35:23:eb:90:22:fe:65:13:8d:53:b9:09:62:46:
                    ca:7d:98:f8:24:cb:ec:38:57:9e:93:d4:b8:e4:6e:
                    b8:21:22:2b:87:e4:a4:1a:b5:04:2b:f5:ad:27:45:
                    13:b9:59:53:e9:b6:05:47:cf:32:07:44:4b:3e:da:
                    e8:45:9a:d7:64:3b:68:f4:1b:71:3c:29:8d:62:d7:
                    d8:97:52:07:27:5c:09:5f:da:d9:0a:4a:d2:b8:60:
                    6c:0d:49:a7:7b:0e:69:b0:82:af:26:af:41:d5:52:
                    62:b9:b0:06:4d:f7:31:bb:1b:d3:b1:be:36:ea:81:
                    4f:0d:1e:72:0d:06:61:1c:a2:2d:9b:a1:c4:ec:6b:
                    fd:6a:38:25:43:ce:f1:90:6c:5b:16:70:d7:c3:eb:
                    b5:22:4c:a5:bc:b0:f4:31:a8:d5:c1:3d:83:27:41:
                    27:d3:db:dc:74:00:71:25:74:8e:7d:26:f5:de:75:
                    05:3d:3b:07:a0:3d:5d:6d:61:c7:3c:6c:2c:76:21:
                    dd:0b:d1:67:f3:e7:bb:2c:cc:35:df:51:23:e3:53:
                    8a:2e:27:6d:81:fd:e5:a3:e1:28:b0:c4:ed:38:d1:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:FE:98:CC:25:1A:22:24:3B:40:85:DD:5C:B3:78:C8:6F:60:8C
            X509v3 Authority Key Identifier:
                keyid:63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:20:81:fb:86:7c:de:49:53:ad:5c:61:fb:85:e9:2b:7a:
         ad:17:8c:54:9f:28:d0:df:d6:c0:9c:69:ba:85:be:d2:83:9e:
         e2:b4:4c:63:65:ca:07:34:02:3c:0b:14:c2:4c:97:3e:9b:ff:
         cc:2d:47:9f:1a:26:05:2a:8d:cb:9d:ac:9f:59:70:a6:0c:c3:
         47:c2:7b:b1:06:eb:5a:64:80:79:8a:a3:96:32:f6:26:db:3e:
         69:2c:ba:e7:7d:64:f2:5f:7f:18:1c:1f:e8:e1:2e:00:6a:a5:
         5e:fb:1e:e1:78:b1:cb:3d:30:cd:79:98:bc:5c:41:6b:2d:f4:
         73:55:62:9a:d2:dc:3a:f6:c4:49:99:47:0e:bc:fb:27:a0:63:
         c4:16:0f:c1:14:fb:fa:8a:e5:77:6c:33:8b:d1:15:7c:f3:69:
         aa:86:4b:97:05:c3:23:df:df:51:93:dd:b2:66:ae:64:d1:c2:
         50:2f:b9:96:ac:6b:4b:d2:dd:19:e7:97:84:00:1b:c2:57:75:
         6d:65:fa:48:65:ec:87:5a:fe:92:65:d2:c6:2c:8b:31:b1:f4:
         a6:ef:56:69:6c:7c:c6:00:6d:05:fd:12:bf:21:bf:7d:ee:e1:
         1d:68:1b:42:5b:8e:49:8d:85:4f:d4:8b:12:ce:a5:ab:76:dc:
         91:6e:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:59 2025 by rpki-client