Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa
File:                     3133312e3136312e38342e302f32322d3232203d3e203237373831.roa (raw, json)
Hash identifier:          Wz87Lti1dbQVWJC7pQeb9Lkqr+q8Lt3LXuU4W3+OMxM=
Subject key identifier:   23:70:11:14:1B:66:EA:43:57:16:1E:7F:8B:60:E4:4F:1C:15:5D:13
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       07A3B203676A7EF88C6817D9A5A0BD00FBE2DE27
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa
Signing time:             Mon 17 Mar 2025 05:12:03 +0000
ROA not before:           Mon 17 Mar 2025 05:07:03 +0000
ROA not after:            Mon 16 Mar 2026 05:12:03 +0000
asID:                     27781
IP address blocks:        131.161.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a3:b2:03:67:6a:7e:f8:8c:68:17:d9:a5:a0:bd:00:fb:e2:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Mar 17 05:07:03 2025 GMT
            Not After : Mar 16 05:12:03 2026 GMT
        Subject: CN=237011141B66EA4357161E7F8B60E44F1C155D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:24:2f:f2:ad:39:f5:0b:9f:0e:76:8f:0c:
                    02:3d:76:33:ff:c1:6c:64:68:12:00:20:98:fa:f0:
                    fb:2d:ed:18:9a:72:76:68:c6:cb:f5:ed:59:48:a3:
                    cc:78:79:3b:d9:63:42:21:03:67:a5:a8:43:b8:b4:
                    33:b2:2a:0a:48:7c:0b:6e:d3:99:c5:4d:04:2c:44:
                    99:19:f8:ec:eb:a7:b2:2b:5c:68:50:d3:e5:c2:41:
                    cb:7d:ff:92:59:64:d1:7b:1b:13:cc:11:8e:7d:f4:
                    9b:d9:ab:c5:de:1f:ef:2d:7b:7a:a8:d2:be:5f:7f:
                    e0:8b:7d:a3:4f:c9:ab:c8:6b:db:e4:25:db:ab:53:
                    e9:44:82:f5:6f:c1:81:6a:82:3e:72:3b:30:0f:04:
                    d4:ab:72:13:ca:1e:c0:7d:29:c1:1a:f4:f1:3b:88:
                    46:cc:e0:82:bc:dc:3e:8d:83:6f:e4:f5:dd:4b:5e:
                    a4:16:c3:12:d9:fe:b7:a3:df:be:09:e7:07:83:a4:
                    73:0a:e1:59:e2:08:5b:38:9d:75:0f:19:34:a4:18:
                    0f:b4:1e:32:d3:26:bc:1e:d6:30:d8:5f:90:72:d7:
                    cd:35:b9:7e:e1:ca:00:49:47:d1:cf:e9:a3:66:a3:
                    a8:32:47:90:d7:a2:57:d3:5d:28:49:41:ef:c8:26:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:11:14:1B:66:EA:43:57:16:1E:7F:8B:60:E4:4F:1C:15:5D:13
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:5d:82:81:a3:94:48:de:37:c8:a3:56:55:5f:e4:b5:13:
         f7:3a:2e:8b:ff:10:ac:a1:bd:8e:75:c7:83:31:8d:bf:c2:8d:
         7a:2c:e8:70:3d:18:a9:ed:b7:7c:1f:e6:71:a9:3a:e1:1d:73:
         55:19:1a:49:31:4e:a6:31:a2:23:78:02:1b:b9:d2:6d:34:bc:
         fb:df:db:34:fd:90:2e:44:6d:a0:2b:c7:ae:f4:fc:61:31:37:
         11:59:5c:2c:77:3e:c6:35:a4:45:50:df:56:ad:89:19:88:44:
         ec:ef:f3:07:bd:f9:da:e9:78:2e:dd:ee:a0:a1:67:89:1c:5a:
         fa:1c:5d:3d:69:1f:68:1f:ed:4a:83:67:4e:82:40:4c:eb:59:
         16:f8:1d:0c:1d:2c:aa:b8:2c:66:bd:6e:73:ba:78:d7:93:b5:
         5a:53:a2:f2:58:73:df:b5:b1:ae:92:de:89:68:02:3f:1c:7a:
         a7:13:dc:d7:6c:a3:4a:29:aa:03:60:b2:a5:16:8c:fa:2c:c8:
         37:ed:28:d3:1b:6f:f4:14:85:a3:67:21:e2:f2:2d:ad:a5:ef:
         c3:49:6b:63:3e:1f:1e:8e:d5:1b:ac:79:41:c6:d3:96:d6:14:
         e1:46:33:61:b2:33:8c:de:2e:01:e8:ca:37:87:28:1c:fb:62:
         9a:25:1a:2b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUB6OyA2dqfviMaBfZpaC9APvi3icwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFMzIwMTVERjNCMzYyOEZDNDA0NkYzNkMxNTVGRkNC
QThCMzk4QTAeFw0yNTAzMTcwNTA3MDNaFw0yNjAzMTYwNTEyMDNaMDMxMTAvBgNV
BAMTKDIzNzAxMTE0MUI2NkVBNDM1NzE2MUU3RjhCNjBFNDRGMUMxNTVEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpCQv8q059QufDnaPDAI9djP/
wWxkaBIAIJj68Pst7RiacnZoxsv17VlIo8x4eTvZY0IhA2elqEO4tDOyKgpIfAtu
05nFTQQsRJkZ+Ozrp7IrXGhQ0+XCQct9/5JZZNF7GxPMEY599JvZq8XeH+8te3qo
0r5ff+CLfaNPyavIa9vkJdurU+lEgvVvwYFqgj5yOzAPBNSrchPKHsB9KcEa9PE7
iEbM4IK83D6Ng2/k9d1LXqQWwxLZ/rej374J5weDpHMK4VniCFs4nXUPGTSkGA+0
HjLTJrwe1jDYX5By1801uX7hygBJR9HP6aNmo6gyR5DXolfTXShJQe/IJnprAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUI3ARFBtm6kNXFh5/i2DkTxwVXRMwHwYDVR0j
BBgwFoAUyuMgFd87Nij8QEbzbBVf/LqLOYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjEyOUU5Mzk4RjM3RDIzOTc3MkMzQzc3NzIzQTQzMTFC
QjEyMzE2QTc2RUQ4OTNBMjNEQ0RFRjE4QjIwQTY5LzAvQ0FFMzIwMTVERjNCMzYy
OEZDNDA0NkYzNkMxNTVGRkNCQThCMzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUUzMjAxNURGM0IzNjI4RkM0
MDQ2RjM2QzE1NUZGQ0JBOEIzOThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIxMjlFOTM5OEYzN0QyMzk3NzJDM0M3NzcyM0E0MzExQkIxMjMxNkE3
NkVEODkzQTIzRENERUYxOEIyMEE2OS8wLzMxMzMzMTJlMzEzNjMxMmUzODM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhVDAN
BgkqhkiG9w0BAQsFAAOCAQEArkxdgoGjlEjeN8ijVlVf5LUT9zoui/8QrKG9jnXH
gzGNv8KNeizocD0Yqe23fB/mcak64R1zVRkaSTFOpjGiI3gCG7nSbTS8+9/bNP2Q
LkRtoCvHrvT8YTE3EVlcLHc+xjWkRVDfVq2JGYhE7O/zB7352ul4Lt3uoKFniRxa
+hxdPWkfaB/tSoNnToJATOtZFvgdDB0sqrgsZr1uc7p415O1WlOi8lhz37WxrpLe
iWgCPxx6pxPc12yjSimqA2CypRaM+izIN+0o0xtv9BSFo2ch4vItraXvw0lrYz4f
Ho7VG6x5QcbTltYU4UYzYbIzjN4uAejKN4coHPtimiUaKw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:00 2025 by rpki-client