Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3231362e302f32322d3234203d3e20323633383232.roa
File:                     3137392e36322e3231362e302f32322d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          EWhbg0m14kFhpqA15Ysml9VLsRKuzN9DWH21sWwFDAM=
Subject key identifier:   C3:3F:9C:38:8F:4D:90:D7:49:AB:52:CD:F9:EE:00:53:1B:F1:BD:26
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       3DDD5722B9B25041235AC7382C59B635C3275655
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3231362e302f32322d3234203d3e20323633383232.roa
Signing time:             Tue 04 Feb 2025 18:30:39 +0000
ROA not before:           Tue 04 Feb 2025 18:25:39 +0000
ROA not after:            Tue 03 Feb 2026 18:30:39 +0000
asID:                     263822
IP address blocks:        179.62.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dd:57:22:b9:b2:50:41:23:5a:c7:38:2c:59:b6:35:c3:27:56:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:39 2025 GMT
            Not After : Feb  3 18:30:39 2026 GMT
        Subject: CN=C33F9C388F4D90D749AB52CDF9EE00531BF1BD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:f7:fc:f5:a8:0b:e6:19:ad:90:2a:b7:a2:
                    1e:89:ef:17:80:28:2d:b4:ae:4b:32:5c:1c:5c:b3:
                    44:d9:a0:67:f6:5f:60:54:26:87:02:a0:74:51:f0:
                    39:a8:46:80:de:32:03:f4:76:49:86:42:8c:e7:0a:
                    07:9d:75:be:cd:13:6f:e8:25:79:f6:26:92:21:1c:
                    0b:5b:15:01:2d:7f:24:82:4c:56:30:85:24:a9:fd:
                    ea:04:a6:61:ce:10:77:39:18:f7:e6:9a:96:90:a8:
                    74:10:ec:e6:e6:af:a8:83:dd:3c:83:83:e8:f1:c7:
                    68:01:f8:74:0a:7e:29:47:a3:68:84:bd:3c:33:17:
                    7a:02:b0:0f:69:54:12:24:18:33:1c:fe:b5:16:8d:
                    79:21:2b:9b:83:af:21:0a:c9:6d:19:08:c0:97:54:
                    01:e3:19:74:f2:67:6b:71:8c:50:f0:38:fc:40:8b:
                    33:97:cc:74:3b:3c:ab:ce:7f:d8:36:98:37:ef:53:
                    cd:87:4a:db:43:6d:5d:d1:ee:c1:6c:a9:14:35:14:
                    2f:36:47:75:60:b4:d5:58:17:0f:ad:fa:01:b1:76:
                    71:3f:2a:a1:f4:b3:9a:c9:a8:6c:ad:e5:d4:c9:1f:
                    66:df:3a:42:0b:1e:f4:ad:af:43:8c:6f:68:5e:f5:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:9C:38:8F:4D:90:D7:49:AB:52:CD:F9:EE:00:53:1B:F1:BD:26
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3231362e302f32322d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:67:49:bd:92:6a:4b:f6:3e:00:f8:75:5b:18:9d:06:eb:49:
         3d:cd:48:7b:73:60:e0:c9:78:e2:af:a4:91:9f:ea:92:c3:92:
         da:a6:54:e8:13:f5:f8:54:b5:cf:7a:c6:75:78:e1:f2:fa:96:
         08:bc:3a:2e:0d:5d:91:d4:af:5c:30:76:f4:82:8d:ce:9e:2b:
         7a:1a:4a:b2:46:14:fd:2d:b4:e1:02:8a:fc:51:5c:ec:b9:9f:
         3c:43:05:85:b6:3d:e4:40:d4:67:4f:62:8a:8d:aa:d9:10:87:
         f7:65:1d:d3:af:ea:a1:5d:60:3c:c1:67:2c:ed:68:d9:a7:3c:
         95:bd:95:fe:6a:f8:4f:2d:86:d5:2f:e3:c4:5e:7d:25:c9:b7:
         b4:a4:d3:8e:d3:4a:00:17:70:b9:ee:7e:b8:cf:b9:b8:75:6a:
         10:ce:7f:84:d3:12:7e:28:3f:13:d0:d8:87:19:6a:ce:a5:67:
         3c:36:7f:a5:f1:1d:ae:ec:40:02:d8:9f:50:8e:64:d9:d8:77:
         b0:b1:93:c8:db:ff:05:c6:f2:01:ea:90:10:a8:cd:3d:c0:df:
         01:d4:e5:8a:8d:b0:b8:b6:d1:41:83:46:67:85:c9:82:3c:5f:
         20:be:4c:11:83:5f:f0:9b:df:6c:44:f4:80:7c:67:08:fd:fb:
         f4:e2:7e:bd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPd1XIrmyUEEjWsc4LFm2NcMnVlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1MzlaFw0yNjAyMDMxODMwMzlaMDMxMTAvBgNV
BAMTKEMzM0Y5QzM4OEY0RDkwRDc0OUFCNTJDREY5RUUwMDUzMUJGMUJEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChvf89agL5hmtkCq3oh6J7xeA
KC20rksyXBxcs0TZoGf2X2BUJocCoHRR8DmoRoDeMgP0dkmGQoznCgeddb7NE2/o
JXn2JpIhHAtbFQEtfySCTFYwhSSp/eoEpmHOEHc5GPfmmpaQqHQQ7Obmr6iD3TyD
g+jxx2gB+HQKfilHo2iEvTwzF3oCsA9pVBIkGDMc/rUWjXkhK5uDryEKyW0ZCMCX
VAHjGXTyZ2txjFDwOPxAizOXzHQ7PKvOf9g2mDfvU82HSttDbV3R7sFsqRQ1FC82
R3VgtNVYFw+t+gGxdnE/KqH0s5rJqGyt5dTJH2bfOkILHvStr0OMb2he9b8hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwz+cOI9NkNdJq1LN+e4AUxvxvSYwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzczOTJlMzYzMjJlMzIzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsz7Y
MA0GCSqGSIb3DQEBCwUAA4IBAQBRZ0m9kmpL9j4A+HVbGJ0G60k9zUh7c2DgyXji
r6SRn+qSw5LaplToE/X4VLXPesZ1eOHy+pYIvDouDV2R1K9cMHb0go3Onit6Gkqy
RhT9LbThAor8UVzsuZ88QwWFtj3kQNRnT2KKjarZEIf3ZR3Tr+qhXWA8wWcs7WjZ
pzyVvZX+avhPLYbVL+PEXn0lybe0pNOO00oAF3C57n64z7m4dWoQzn+E0xJ+KD8T
0NiHGWrOpWc8Nn+l8R2u7EAC2J9QjmTZ2HewsZPI2/8FxvIB6pAQqM09wN8B1OWK
jbC4ttFBg0ZnhcmCPF8gvkwRg1/wm99sRPSAfGcI/fv04n69
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:12 2025 by rpki-client