Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/3133312e3139362e3138382e302f32322d3234203d3e20323731393730.roa
File:                     3133312e3139362e3138382e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          za6CmfQy/6uGTuujylSIv1xvV+krXsMvBNB1XU6ZDWE=
Subject key identifier:   65:F1:43:C9:27:90:CA:37:01:53:26:7F:C7:46:EB:6B:1B:0E:3B:09
Certificate issuer:       /CN=D27A531CC81AF816305690F95709B8D48EE9B713
Certificate serial:       74625BCECF29CCCBB0CAC953FBC8E909E02CE151
Authority key identifier: D2:7A:53:1C:C8:1A:F8:16:30:56:90:F9:57:09:B8:D4:8E:E9:B7:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D27A531CC81AF816305690F95709B8D48EE9B713.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/3133312e3139362e3138382e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 04 Feb 2025 18:19:56 +0000
ROA not before:           Tue 04 Feb 2025 18:14:56 +0000
ROA not after:            Tue 03 Feb 2026 18:19:56 +0000
asID:                     271970
IP address blocks:        131.196.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:5b:ce:cf:29:cc:cb:b0:ca:c9:53:fb:c8:e9:09:e0:2c:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27A531CC81AF816305690F95709B8D48EE9B713
        Validity
            Not Before: Feb  4 18:14:56 2025 GMT
            Not After : Feb  3 18:19:56 2026 GMT
        Subject: CN=65F143C92790CA370153267FC746EB6B1B0E3B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:cc:51:a3:be:b5:7e:d8:ff:8a:20:d9:56:
                    d7:05:a5:3f:38:c8:e8:ac:d6:8a:3f:86:9e:57:1e:
                    2c:82:56:e0:1b:f7:bf:54:ec:7d:a1:3e:cc:34:37:
                    68:18:f7:6d:5f:a3:af:97:d3:14:5d:be:e7:e3:5f:
                    2b:fb:f2:ed:95:2c:74:bf:29:80:04:50:ae:93:c3:
                    25:4f:67:c4:75:ea:5c:e8:6f:f7:13:95:7f:08:11:
                    45:d0:1f:47:1c:c4:27:23:88:f6:66:f0:b3:5a:d5:
                    47:c0:67:89:c1:20:85:11:62:4d:f2:36:d1:0d:07:
                    6a:e7:dd:bb:a8:b9:bc:b9:f5:5a:b2:5f:e6:c5:cb:
                    76:c7:a2:fd:3d:9c:66:9d:39:43:c1:82:05:82:f5:
                    7c:84:cc:d8:0f:e5:fe:d0:f5:30:50:9a:b6:35:80:
                    da:6d:e4:d1:d3:7c:ad:93:6a:8a:72:35:9a:dc:5a:
                    63:ff:36:65:ae:d8:38:8c:4e:9a:25:79:d7:78:00:
                    6e:1c:aa:af:88:e5:ea:b4:ea:b5:14:ac:5a:69:aa:
                    bc:6e:18:52:3a:96:d3:4f:4b:27:ee:51:e9:ba:ea:
                    f0:c2:21:6b:e3:1e:1d:3e:2b:c6:15:c1:71:fa:e5:
                    55:6b:48:6e:c9:d8:4e:b1:e2:ec:c4:a0:b6:8a:cf:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:43:C9:27:90:CA:37:01:53:26:7F:C7:46:EB:6B:1B:0E:3B:09
            X509v3 Authority Key Identifier:
                keyid:D2:7A:53:1C:C8:1A:F8:16:30:56:90:F9:57:09:B8:D4:8E:E9:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/D27A531CC81AF816305690F95709B8D48EE9B713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D27A531CC81AF816305690F95709B8D48EE9B713.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A45A99CB839860F25E00B819CE7257773AAD4D4215D1C28EC8D35FD1F04D58D/0/3133312e3139362e3138382e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:69:8f:31:54:dd:e0:7e:d2:f5:72:ad:c6:0b:27:7d:2e:5e:
         82:61:38:09:62:4a:1d:7d:8c:d4:5c:70:ae:ba:81:08:5c:3d:
         85:84:41:ab:17:a2:1f:4f:ed:c4:54:af:e2:95:b0:57:ff:83:
         ff:77:35:a5:93:1c:a1:b6:4f:03:a5:25:2c:aa:a2:6c:f0:a4:
         67:09:be:e9:a1:a8:52:7a:5b:82:9f:d0:de:2f:2a:15:91:08:
         bb:79:51:2e:bb:5c:ea:99:37:8a:b1:7c:f9:d5:5c:99:95:b1:
         85:b7:c7:01:2d:06:f6:ad:67:4e:fe:cc:69:77:bf:29:2d:32:
         3f:28:1a:8d:f6:e1:79:ac:d0:e5:24:1b:e2:a6:35:d7:4c:40:
         45:bb:f6:f2:47:1e:47:ed:5c:a2:ef:9f:de:e5:d4:96:9f:a4:
         70:7c:6a:bf:94:fe:1f:fa:df:36:4e:5e:28:56:c4:66:96:8c:
         9b:ad:78:29:ef:d7:8d:b0:fa:02:d8:37:ea:a6:b9:25:2c:31:
         0a:94:b7:79:27:5b:d8:66:82:4c:36:c4:2c:67:07:3c:fe:d2:
         45:8f:59:06:4e:39:22:2c:64:35:44:64:98:c5:a7:70:04:df:
         51:08:4a:14:90:7b:f7:85:f3:a6:b6:e5:e0:d7:2f:b0:a7:78:
         04:c2:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:24 2025 by rpki-client