Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
File:                     3134332e302e37362e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          LgzsDgMouzLaDdoscijbuSWdgnM1XtKeA8radrphrHw=
Subject key identifier:   C3:0C:BA:F7:C5:02:CD:A5:33:79:B9:A4:7C:97:B6:72:07:6B:35:66
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       3C0C2168ED786EEF67E44C5F9460677422418E7D
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:25:01 +0000
ROA not before:           Tue 04 Feb 2025 18:20:01 +0000
ROA not after:            Tue 03 Feb 2026 18:25:01 +0000
asID:                     11014
IP address blocks:        143.0.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0c:21:68:ed:78:6e:ef:67:e4:4c:5f:94:60:67:74:22:41:8e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:20:01 2025 GMT
            Not After : Feb  3 18:25:01 2026 GMT
        Subject: CN=C30CBAF7C502CDA53379B9A47C97B672076B3566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:a3:e4:31:8c:44:03:40:31:9b:03:68:c0:
                    86:53:75:41:3d:81:43:f1:38:23:03:95:ea:e2:b3:
                    9b:73:35:87:20:bc:ea:85:0e:27:aa:d6:a0:76:18:
                    af:24:93:32:8a:f2:fe:f9:f6:72:56:52:85:8f:0c:
                    12:b2:1a:9f:9d:30:cd:a2:62:82:b5:6c:6e:a1:46:
                    e9:78:4f:49:38:62:a0:d4:94:44:65:d3:d1:d4:ad:
                    97:74:55:a6:93:60:7d:e8:f3:9c:21:cb:b2:73:db:
                    de:e2:74:c1:29:49:6a:a7:50:5b:9f:60:b3:29:88:
                    87:f2:17:2b:8d:2c:d7:8e:7d:63:9b:e5:05:54:42:
                    0a:90:73:85:84:16:0a:49:b7:b4:eb:88:22:dc:73:
                    36:6c:97:b9:90:1a:e5:19:e8:76:c4:1d:f8:68:97:
                    2a:21:da:84:15:5c:2f:54:dc:6f:fc:a3:4c:34:16:
                    9b:2a:e2:c5:1e:94:f8:c8:7f:d5:ab:55:27:3d:9f:
                    9a:b7:95:79:48:af:ed:28:dc:cb:bd:b5:94:b2:fe:
                    3c:ab:3b:c1:1a:dc:23:a7:50:ee:31:a8:c3:20:d9:
                    a3:b8:7d:02:bd:6b:0e:17:e9:c5:99:29:9f:2c:39:
                    09:ed:cd:bb:f2:6b:79:c2:0a:de:59:ee:d0:db:61:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0C:BA:F7:C5:02:CD:A5:33:79:B9:A4:7C:97:B6:72:07:6B:35:66
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:49:7a:3a:ba:ec:e2:ca:19:08:65:41:04:2b:fe:4d:cb:f6:
         f1:13:99:3d:b1:71:bd:67:d5:a7:c1:cf:9d:05:ce:23:59:82:
         55:de:87:25:62:ab:df:17:c9:7f:95:1e:72:83:bd:4b:9d:f1:
         f8:eb:b1:f1:da:83:3b:2e:61:44:27:47:75:e5:c5:0c:dc:01:
         83:28:06:ce:59:be:8d:b2:00:47:46:80:1f:cc:a8:52:ba:a7:
         d4:45:09:b0:a2:f7:f0:2f:7e:3e:40:91:73:30:d9:91:36:e6:
         60:6e:19:d4:e4:7c:f0:33:29:44:62:04:3d:47:f0:33:e9:a0:
         b7:fc:ab:1b:40:1f:d9:ba:2d:8e:ec:7b:95:b0:5d:9b:c5:9a:
         30:8d:13:81:e5:0a:62:5d:e5:fd:d9:aa:7a:7f:8a:dc:12:5e:
         ea:df:68:55:fc:8f:ba:a2:b1:33:ba:c5:08:6b:df:6a:0f:22:
         10:b9:b0:3b:a0:9c:ab:51:8d:3e:83:53:e2:59:35:d0:3a:1e:
         46:e4:63:04:1e:db:18:7c:35:27:15:af:ff:10:50:c8:94:94:
         8f:d2:95:f8:94:0a:7a:3e:fd:59:4b:8a:b2:b8:94:70:07:69:
         22:ef:a0:1d:dc:dc:0d:89:82:1b:ce:f0:c1:a9:45:bc:27:6c:
         f3:e0:eb:65
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUPAwhaO14bu9n5ExflGBndCJBjn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OTEwRjNDMzk5NUQ3Q0NDMDZBREMyRjE1MkZGRDRB
MTY4RjI0QzAeFw0yNTAyMDQxODIwMDFaFw0yNjAyMDMxODI1MDFaMDMxMTAvBgNV
BAMTKEMzMENCQUY3QzUwMkNEQTUzMzc5QjlBNDdDOTdCNjcyMDc2QjM1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSqPkMYxEA0AxmwNowIZTdUE9
gUPxOCMDleris5tzNYcgvOqFDieq1qB2GK8kkzKK8v759nJWUoWPDBKyGp+dMM2i
YoK1bG6hRul4T0k4YqDUlERl09HUrZd0VaaTYH3o85why7Jz297idMEpSWqnUFuf
YLMpiIfyFyuNLNeOfWOb5QVUQgqQc4WEFgpJt7TriCLcczZsl7mQGuUZ6HbEHfho
lyoh2oQVXC9U3G/8o0w0Fpsq4sUelPjIf9WrVSc9n5q3lXlIr+0o3Mu9tZSy/jyr
O8Ea3COnUO4xqMMg2aO4fQK9aw4X6cWZKZ8sOQntzbvya3nCCt5Z7tDbYWLxAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUwwy698UCzaUzebmkfJe2cgdrNWYwHwYDVR0j
BBgwFoAUo2kQ88OZXXzMBq3C8VL/1KFo8kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzM5OUM1MTNCNjNBODczNzI3NUMxMjk3QjM3MDkwNEUw
NDcyMDk5N0ZFN0Y4RDEyNEQ5QjU0N0NDM0VERTdBLzAvQTM2OTEwRjNDMzk5NUQ3
Q0NDMDZBREMyRjE1MkZGRDRBMTY4RjI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5MTBGM0MzOTk1RDdDQ0Mw
NkFEQzJGMTUyRkZENEExNjhGMjRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczOTlDNTEzQjYzQTg3MzcyNzVDMTI5N0IzNzA5MDRFMDQ3MjA5OTdG
RTdGOEQxMjREOUI1NDdDQzNFREU3QS8wLzMxMzQzMzJlMzAyZTM3MzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMxMzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjwBMMA0GCSqG
SIb3DQEBCwUAA4IBAQBTSXo6uuziyhkIZUEEK/5Ny/bxE5k9sXG9Z9Wnwc+dBc4j
WYJV3oclYqvfF8l/lR5yg71LnfH467Hx2oM7LmFEJ0d15cUM3AGDKAbOWb6NsgBH
RoAfzKhSuqfURQmwovfwL34+QJFzMNmRNuZgbhnU5HzwMylEYgQ9R/Az6aC3/Ksb
QB/Zui2O7HuVsF2bxZowjROB5QpiXeX92ap6f4rcEl7q32hV/I+6orEzusUIa99q
DyIQubA7oJyrUY0+g1PiWTXQOh5G5GMEHtsYfDUnFa//EFDIlJSP0pX4lAp6Pv1Z
S4qyuJRwB2ki76Ad3NwNiYIbzvDBqUW8J2zz4Otl
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:22 2025 by rpki-client