Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3131382e302f32342d3234203d3e203139313134.roa
File:                     3135372e3130302e3131382e302f32342d3234203d3e203139313134.roa (raw, json)
Hash identifier:          20Q0o/fr2ZQ5qaTPlw2WNE2SNT9bc5d3aFldkx/XJ4w=
Subject key identifier:   AD:82:47:BE:33:34:C0:8C:50:CF:B2:2E:E1:CD:0A:16:BB:D9:69:90
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       16FA8D6CDD2312FDF21B19AA29450D33FA4BE41E
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3131382e302f32342d3234203d3e203139313134.roa
Signing time:             Tue 04 Feb 2025 20:08:27 +0000
ROA not before:           Tue 04 Feb 2025 20:03:27 +0000
ROA not after:            Tue 03 Feb 2026 20:08:27 +0000
asID:                     19114
IP address blocks:        157.100.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fa:8d:6c:dd:23:12:fd:f2:1b:19:aa:29:45:0d:33:fa:4b:e4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:27 2025 GMT
            Not After : Feb  3 20:08:27 2026 GMT
        Subject: CN=AD8247BE3334C08C50CFB22EE1CD0A16BBD96990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:c2:de:7e:ef:b4:d7:ac:bb:f3:04:cc:cb:
                    ab:39:53:3c:67:d3:a9:c0:d0:76:e5:a4:86:41:3b:
                    2e:55:d0:42:28:6b:b9:19:3f:29:fe:a2:86:79:41:
                    9f:fc:0a:da:06:27:9a:33:c0:0c:e8:92:76:96:db:
                    11:67:e4:af:4b:7a:d6:30:f5:c8:ef:7d:94:70:84:
                    cc:cd:e1:e8:24:a9:a1:6f:9d:c9:03:5f:ad:48:4b:
                    32:9e:b3:52:d5:be:a0:ac:fe:3a:4a:15:5d:91:62:
                    67:1c:93:91:a6:19:20:25:ed:7f:84:57:a0:0c:84:
                    fb:02:19:f5:8c:5c:7f:dd:a5:87:49:54:bb:e0:6f:
                    9e:a9:d8:3c:af:59:07:2c:27:37:bd:62:9f:0c:27:
                    dd:07:60:a8:9b:da:38:c1:0e:9a:be:af:71:5f:8f:
                    89:9e:47:06:52:a2:9d:31:e6:13:03:a7:bb:d0:25:
                    ae:39:85:35:0d:44:cb:de:1f:fd:46:18:ea:67:6a:
                    00:71:01:69:62:5b:3f:3c:a6:fc:ea:49:64:30:06:
                    03:97:ea:0e:ef:5a:06:93:c7:be:ef:3a:e4:e0:01:
                    fb:b4:21:74:39:95:be:92:88:b1:4e:8b:bd:59:34:
                    39:fd:51:96:0a:c8:3e:6b:d9:7a:84:2d:8a:f2:a9:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:47:BE:33:34:C0:8C:50:CF:B2:2E:E1:CD:0A:16:BB:D9:69:90
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3131382e302f32342d3234203d3e203139313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:ad:23:0a:9d:6a:b9:b7:ee:be:68:2c:cb:86:ca:66:8c:
         14:54:ca:1a:a7:f2:b5:fa:43:2f:ba:03:7e:20:6f:49:d3:90:
         f2:01:af:60:fa:fd:94:82:0c:04:ce:1d:b0:f3:58:5d:74:48:
         5c:87:5d:44:0d:32:5c:5f:84:b3:eb:60:5e:dd:c2:38:3d:e3:
         54:a6:ff:09:85:29:01:c7:56:1d:0b:fa:ef:19:1d:23:23:47:
         d1:1e:1b:70:71:36:37:c4:92:a6:1e:64:35:1d:4c:80:59:1d:
         6e:77:f6:aa:4b:d1:ec:25:2e:eb:bb:ef:e1:29:36:3c:ad:3a:
         d1:fe:df:22:f7:9f:5f:00:53:20:2b:a0:fa:69:f7:de:35:74:
         b4:c2:48:04:7a:d1:59:5e:a6:8b:aa:4b:34:c7:cd:85:40:26:
         a1:6e:3f:2e:d2:43:85:46:a5:fd:78:05:70:17:9e:8c:28:9f:
         60:46:e4:f3:ae:63:45:6c:e0:c0:dd:8c:94:a2:49:b9:ce:16:
         44:70:2e:00:e2:a8:b3:c3:40:11:09:3d:b9:a5:9f:7e:ed:a4:
         a8:fd:31:99:7f:fb:cc:07:19:d4:78:a2:46:51:78:58:13:c9:
         cf:3f:6f:c3:ba:b2:2a:77:d7:17:fb:dc:1a:6f:6c:24:a8:99:
         b7:34:d5:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFvqNbN0jEv3yGxmqKUUNM/pL5B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMjdaFw0yNjAyMDMyMDA4MjdaMDMxMTAvBgNV
BAMTKEFEODI0N0JFMzMzNEMwOEM1MENGQjIyRUUxQ0QwQTE2QkJEOTY5OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa98Lefu+016y78wTMy6s5Uzxn
06nA0HblpIZBOy5V0EIoa7kZPyn+ooZ5QZ/8CtoGJ5ozwAzoknaW2xFn5K9LetYw
9cjvfZRwhMzN4egkqaFvnckDX61ISzKes1LVvqCs/jpKFV2RYmcck5GmGSAl7X+E
V6AMhPsCGfWMXH/dpYdJVLvgb56p2DyvWQcsJze9Yp8MJ90HYKib2jjBDpq+r3Ff
j4meRwZSop0x5hMDp7vQJa45hTUNRMveH/1GGOpnagBxAWliWz88pvzqSWQwBgOX
6g7vWgaTx77vOuTgAfu0IXQ5lb6SiLFOi71ZNDn9UZYKyD5r2XqELYryqVFTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrYJHvjM0wIxQz7Iu4c0KFrvZaZAwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzMTMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWR2
MA0GCSqGSIb3DQEBCwUAA4IBAQCMDa0jCp1qubfuvmgsy4bKZowUVMoap/K1+kMv
ugN+IG9J05DyAa9g+v2UggwEzh2w81hddEhch11EDTJcX4Sz62Be3cI4PeNUpv8J
hSkBx1YdC/rvGR0jI0fRHhtwcTY3xJKmHmQ1HUyAWR1ud/aqS9HsJS7ru+/hKTY8
rTrR/t8i959fAFMgK6D6affeNXS0wkgEetFZXqaLqks0x82FQCahbj8u0kOFRqX9
eAVwF56MKJ9gRuTzrmNFbODA3YyUokm5zhZEcC4A4qizw0ARCT25pZ9+7aSo/TGZ
f/vMBxnUeKJGUXhYE8nPP2/DurIqd9cX+9wab2wkqJm3NNX4
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:25:27 2025 by rpki-client