Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130302e302f32342d3234203d3e20323632313832.roa
File:                     3133312e3136312e3130302e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          RCCCbyPX/RtSm+Bd6zxKaGU7wKwoYGP5mG2bF7OPJFU=
Subject key identifier:   EE:0F:02:30:A8:86:DF:D3:1D:46:89:F0:D0:6F:FD:33:B5:FF:EF:27
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       61620A2127E8068D1591832A657C370D8C502E47
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130302e302f32342d3234203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 19:09:27 +0000
ROA not before:           Mon 10 Feb 2025 19:04:27 +0000
ROA not after:            Mon 09 Feb 2026 19:09:27 +0000
asID:                     262182
IP address blocks:        131.161.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:0a:21:27:e8:06:8d:15:91:83:2a:65:7c:37:0d:8c:50:2e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 19:04:27 2025 GMT
            Not After : Feb  9 19:09:27 2026 GMT
        Subject: CN=EE0F0230A886DFD31D4689F0D06FFD33B5FFEF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:f4:ea:82:7d:9b:5d:80:e3:9d:98:43:94:
                    aa:ba:2f:50:b6:ef:cb:31:63:99:00:f0:f2:e8:7f:
                    70:a3:f7:9d:99:e8:33:9d:1f:98:15:03:8b:ad:9d:
                    53:ec:f1:01:fa:42:e7:40:a3:70:fd:8a:c8:53:0c:
                    86:04:df:1a:9c:9d:01:b6:fb:15:5b:46:bb:06:40:
                    ce:93:8e:7b:3e:4f:fd:5f:b4:9a:9a:39:aa:09:60:
                    e1:b3:f3:1c:52:dd:bb:48:4a:cd:f4:73:92:93:b7:
                    bc:7a:33:2f:48:71:8b:95:c7:68:d7:59:e7:bf:a1:
                    54:ed:83:68:96:e1:64:b5:89:53:77:1d:08:d3:cc:
                    1b:25:52:20:20:07:2d:96:f2:34:4f:cb:15:26:15:
                    dc:94:b5:91:f1:01:96:4f:aa:dd:a0:3f:14:4f:ab:
                    be:c9:c3:63:24:7d:53:d7:a8:bb:b6:f6:12:2d:de:
                    57:0a:b9:22:66:b5:72:cf:b8:e7:9a:83:98:2d:ae:
                    92:00:b0:f7:3c:a1:5a:77:9b:aa:2f:44:b9:bf:08:
                    c2:6c:1e:09:38:ba:17:5f:ce:23:2c:ec:92:c2:7e:
                    30:94:a9:a6:bf:86:de:3c:ad:10:18:0c:6c:c2:cc:
                    20:30:84:39:83:81:da:eb:48:9a:e3:ba:e5:3b:cd:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0F:02:30:A8:86:DF:D3:1D:46:89:F0:D0:6F:FD:33:B5:FF:EF:27
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130302e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:c4:52:b5:53:21:50:fe:ce:09:e8:0b:0a:13:8d:cb:34:
         37:32:07:08:4e:66:a6:65:c2:94:2a:fe:85:8f:63:08:43:ff:
         a3:f7:9a:fe:36:c5:43:01:19:dc:54:1c:26:0e:19:00:e5:18:
         ed:e1:7f:bf:0d:b0:fb:85:ba:73:f9:20:47:6c:b6:d4:54:9c:
         08:66:33:53:aa:bc:10:70:e4:16:34:77:cf:51:73:ae:2f:be:
         1c:80:2c:67:02:83:a4:dc:8d:09:90:05:cf:06:28:20:a9:10:
         c0:74:3f:72:76:1d:2e:f2:46:28:fc:9a:e8:fe:a0:f9:cd:f0:
         59:8d:db:c3:b1:eb:f5:2a:4c:27:f2:3c:6f:2d:d2:77:a7:af:
         e7:46:7d:68:23:7e:fa:20:9c:94:e6:69:1b:f9:01:81:c2:19:
         f4:59:18:a6:67:50:56:7c:11:15:39:85:64:fc:7c:1e:64:24:
         98:76:56:cc:6b:f9:64:e8:de:9c:7e:2f:27:0e:07:62:15:78:
         4a:f5:5e:8b:29:5d:54:51:cb:07:c2:69:b7:8a:79:ab:97:bc:
         3e:6a:c6:5c:93:b1:4a:84:59:44:fb:9f:d6:92:9f:0e:73:e5:
         a9:e5:95:c1:cf:2e:09:e3:31:0a:ee:2e:02:03:48:25:9b:a1:
         f4:9a:a9:d7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUYWIKISfoBo0VkYMqZXw3DYxQLkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNTAyMTAxOTA0MjdaFw0yNjAyMDkxOTA5MjdaMDMxMTAvBgNV
BAMTKEVFMEYwMjMwQTg4NkRGRDMxRDQ2ODlGMEQwNkZGRDMzQjVGRkVGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYfTqgn2bXYDjnZhDlKq6L1C2
78sxY5kA8PLof3Cj952Z6DOdH5gVA4utnVPs8QH6QudAo3D9ishTDIYE3xqcnQG2
+xVbRrsGQM6Tjns+T/1ftJqaOaoJYOGz8xxS3btISs30c5KTt7x6My9IcYuVx2jX
Wee/oVTtg2iW4WS1iVN3HQjTzBslUiAgBy2W8jRPyxUmFdyUtZHxAZZPqt2gPxRP
q77Jw2MkfVPXqLu29hIt3lcKuSJmtXLPuOeag5gtrpIAsPc8oVp3m6ovRLm/CMJs
Hgk4uhdfziMs7JLCfjCUqaa/ht48rRAYDGzCzCAwhDmDgdrrSJrjuuU7zUT3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7g8CMKiG39MdRonw0G/9M7X/7ycwHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzMzMTJlMzEzNjMxMmUzMTMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACD
oWQwDQYJKoZIhvcNAQELBQADggEBADUaxFK1UyFQ/s4J6AsKE43LNDcyBwhOZqZl
wpQq/oWPYwhD/6P3mv42xUMBGdxUHCYOGQDlGO3hf78NsPuFunP5IEdsttRUnAhm
M1OqvBBw5BY0d89Rc64vvhyALGcCg6TcjQmQBc8GKCCpEMB0P3J2HS7yRij8muj+
oPnN8FmN28Ox6/UqTCfyPG8t0nenr+dGfWgjfvognJTmaRv5AYHCGfRZGKZnUFZ8
ERU5hWT8fB5kJJh2Vsxr+WTo3px+LycOB2IVeEr1XospXVRRywfCabeKeauXvD5q
xlyTsUqEWUT7n9aSnw5z5anllcHPLgnjMQruLgIDSCWbofSaqdc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:08 2025 by rpki-client