Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa
File:                     3133382e302e34302e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          sO8n6DMC30UZ3ko/vSEXEJyVh+ncMswhtI2NaCujh1g=
Subject key identifier:   AC:3F:09:54:6B:3F:B4:73:8D:4C:85:C0:71:4C:E2:2E:30:4A:0C:6D
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       542DDA9487664FF3ADC0744F2688F07D7D05AED1
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa
Signing time:             Tue 04 Feb 2025 18:39:10 +0000
ROA not before:           Tue 04 Feb 2025 18:34:10 +0000
ROA not after:            Tue 03 Feb 2026 18:39:10 +0000
asID:                     52320
IP address blocks:        138.0.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:da:94:87:66:4f:f3:ad:c0:74:4f:26:88:f0:7d:7d:05:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Feb  4 18:34:10 2025 GMT
            Not After : Feb  3 18:39:10 2026 GMT
        Subject: CN=AC3F09546B3FB4738D4C85C0714CE22E304A0C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:d5:cf:60:6e:ac:58:cf:51:9d:c2:e6:d8:
                    d7:cd:42:f7:a5:73:58:b4:21:41:19:9e:72:a5:fd:
                    8a:7f:80:bd:c9:25:f8:5a:9d:67:bf:4c:f6:47:26:
                    74:5f:7e:5c:0a:ce:1b:f8:3f:9d:de:20:a0:0d:7b:
                    af:b3:10:10:6b:78:93:62:46:a8:62:74:a3:0f:6d:
                    5a:ac:0b:c3:9b:bc:31:17:7d:7f:12:83:a0:7a:29:
                    da:ed:fa:c9:df:54:6a:56:44:9b:59:25:cc:ce:9d:
                    3b:11:2c:48:75:cc:c4:d6:56:c2:fd:8a:8e:6f:37:
                    86:26:d4:b4:30:1d:cf:e2:29:a3:2e:b0:f0:7b:30:
                    78:74:cc:63:51:40:e2:4d:a9:3e:2b:8d:30:c3:d4:
                    7a:5d:3c:02:a6:78:3a:a7:ec:3f:c5:d4:4a:81:f3:
                    02:34:99:d0:f4:cc:cd:c8:19:02:d7:51:1b:73:42:
                    38:23:8d:63:9e:36:e6:87:cd:ce:97:6b:fb:9c:88:
                    d7:a6:ba:2a:b6:6a:1e:56:6a:c6:a3:aa:93:e8:d5:
                    e2:a5:33:7b:fb:6a:2d:d5:6d:ca:d8:62:cf:3d:93:
                    7b:cd:d7:b5:51:82:60:51:f4:d9:51:09:5c:6d:b9:
                    16:44:1c:51:e5:c2:7c:e1:32:bf:c7:63:99:78:f0:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:09:54:6B:3F:B4:73:8D:4C:85:C0:71:4C:E2:2E:30:4A:0C:6D
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:43:e5:fb:39:5b:40:ea:35:77:c9:0b:d1:c7:a7:e8:90:17:
         bc:ae:36:ab:2e:a6:65:54:ac:ef:ac:9b:c7:fb:4a:8c:30:e6:
         1e:15:59:18:09:e5:22:99:4d:6a:48:d1:b2:b6:41:2b:2b:89:
         a5:d4:89:6f:e2:1f:cf:c6:52:42:a9:78:1a:b9:97:3b:f6:7e:
         eb:63:b2:e4:85:b8:3b:7e:ca:29:c9:41:a2:76:00:40:d7:d6:
         be:e1:3a:a0:a9:2e:65:e4:43:39:e8:30:9c:ac:ba:b9:1f:c8:
         7e:f0:26:91:20:42:f0:10:d9:ce:ee:27:3c:4f:0e:34:e1:da:
         28:a7:b9:6d:06:e7:91:1b:4d:4c:b1:7c:a1:99:68:1c:98:b3:
         e5:e2:18:55:2e:af:56:c1:50:ec:dc:1e:42:e4:39:cf:65:8d:
         67:3b:db:7c:62:aa:d1:50:aa:2b:2b:1b:65:c2:3e:2b:d6:d1:
         17:b2:8e:c6:64:62:bd:10:e2:dc:d6:bc:8b:81:8f:37:58:08:
         19:05:b9:4d:4a:54:ea:48:af:f0:cc:61:61:d2:c3:e6:2a:c5:
         de:4a:38:32:a8:69:92:33:98:53:24:02:13:d4:d8:a7:29:ba:
         7a:6b:78:3d:40:8d:88:a6:bb:0e:88:08:33:ef:47:aa:77:2e:
         bb:81:37:7a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUVC3alIdmT/OtwHRPJojwfX0FrtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBBNDU1NkJBRDU1NDZENjg4RUQwRkY3QjQ5MkIzODgx
RUJDODUyNjAeFw0yNTAyMDQxODM0MTBaFw0yNjAyMDMxODM5MTBaMDMxMTAvBgNV
BAMTKEFDM0YwOTU0NkIzRkI0NzM4RDRDODVDMDcxNENFMjJFMzA0QTBDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghNXPYG6sWM9RncLm2NfNQvel
c1i0IUEZnnKl/Yp/gL3JJfhanWe/TPZHJnRfflwKzhv4P53eIKANe6+zEBBreJNi
RqhidKMPbVqsC8ObvDEXfX8Sg6B6Kdrt+snfVGpWRJtZJczOnTsRLEh1zMTWVsL9
io5vN4Ym1LQwHc/iKaMusPB7MHh0zGNRQOJNqT4rjTDD1HpdPAKmeDqn7D/F1EqB
8wI0mdD0zM3IGQLXURtzQjgjjWOeNuaHzc6Xa/uciNemuiq2ah5WasajqpPo1eKl
M3v7ai3VbcrYYs89k3vN17VRgmBR9NlRCVxtuRZEHFHlwnzhMr/HY5l48G31AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUrD8JVGs/tHONTIXAcUziLjBKDG0wHwYDVR0j
BBgwFoAUsKRVa61VRtaI7Q/3tJKziB68hSYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkIyNThCNkIzN0Q1QTk5NjFDQUMyQ0I5MkFFOUZGNjQx
RUU1OEM0MkNGQzUwNkM4NjFBRDc0RTkzMzE3RDU5LzAvQjBBNDU1NkJBRDU1NDZE
Njg4RUQwRkY3QjQ5MkIzODgxRUJDODUyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMEE0NTU2QkFENTU0NkQ2ODhF
RDBGRjdCNDkyQjM4ODFFQkM4NTI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJCMjU4QjZCMzdENUE5OTYxQ0FDMkNCOTJBRTlGRjY0MUVFNThDNDJD
RkM1MDZDODYxQUQ3NEU5MzMxN0Q1OS8wLzMxMzMzODJlMzAyZTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigAoMA0GCSqG
SIb3DQEBCwUAA4IBAQBSQ+X7OVtA6jV3yQvRx6fokBe8rjarLqZlVKzvrJvH+0qM
MOYeFVkYCeUimU1qSNGytkErK4ml1Ilv4h/PxlJCqXgauZc79n7rY7Lkhbg7fsop
yUGidgBA19a+4TqgqS5l5EM56DCcrLq5H8h+8CaRIELwENnO7ic8Tw404doop7lt
BueRG01MsXyhmWgcmLPl4hhVLq9WwVDs3B5C5DnPZY1nO9t8YqrRUKorKxtlwj4r
1tEXso7GZGK9EOLc1ryLgY83WAgZBblNSlTqSK/wzGFh0sPmKsXeSjgyqGmSM5hT
JAIT1NinKbp6a3g9QI2IprsOiAgz70eqdy67gTd6
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:08 2025 by rpki-client