Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa
File:                     3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          bYrg3Gc7fpja5AqvxM03kVlV8qHJ4IjjdX0WM2+QzO8=
Subject key identifier:   4F:34:22:9F:CE:E4:04:1D:A6:B6:E8:4D:52:BA:08:E7:2F:EC:B2:D8
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       4C4162B1175541235FDBC6AC5220DDB4054494CE
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa
Signing time:             Tue 04 Feb 2025 18:39:11 +0000
ROA not before:           Tue 04 Feb 2025 18:34:11 +0000
ROA not after:            Tue 03 Feb 2026 18:39:11 +0000
asID:                     52320
IP address blocks:        138.204.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:41:62:b1:17:55:41:23:5f:db:c6:ac:52:20:dd:b4:05:44:94:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Feb  4 18:34:11 2025 GMT
            Not After : Feb  3 18:39:11 2026 GMT
        Subject: CN=4F34229FCEE4041DA6B6E84D52BA08E72FECB2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:3f:86:22:41:11:a1:14:c9:41:4f:90:97:
                    54:43:52:43:9d:46:39:26:a8:e3:db:1f:9f:92:cf:
                    24:9d:46:72:4e:bc:ce:13:c8:b9:57:2a:16:01:ff:
                    29:dd:39:90:ef:ae:5d:92:b0:0a:52:89:b2:34:07:
                    ba:3e:42:c0:9a:50:a7:8e:a8:b5:ff:2f:13:4a:ee:
                    c7:3a:a4:97:c6:6d:18:d4:36:cd:ef:36:ca:6e:51:
                    a5:3d:22:e2:66:7d:e2:7c:b9:1d:24:38:5c:da:a5:
                    e3:00:f9:44:3e:1c:f5:95:c4:42:a8:b4:cf:a1:28:
                    76:63:9a:72:c6:6e:98:09:8b:b9:fb:e1:18:4a:7d:
                    70:ca:ab:6e:a5:cf:5e:bb:07:aa:8f:ad:ee:f1:09:
                    13:57:9c:2a:5b:7d:0c:2f:71:6d:fc:c7:02:99:06:
                    d4:f2:74:bc:de:2e:49:28:46:24:85:75:8d:8e:90:
                    2b:34:67:63:d9:52:51:9b:84:70:c5:66:97:fc:a7:
                    c7:68:18:6b:c7:fe:7e:67:e1:1c:7b:57:8b:6c:77:
                    17:55:8f:94:fd:29:b1:31:c1:a1:f9:61:15:e6:cd:
                    f8:82:57:bb:d9:cf:92:c4:3c:cf:d4:28:9f:f8:df:
                    fc:94:40:32:9c:d9:23:9c:53:4e:07:02:e8:17:0e:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:22:9F:CE:E4:04:1D:A6:B6:E8:4D:52:BA:08:E7:2F:EC:B2:D8
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:90:f1:4c:d0:a0:63:cf:f9:2f:16:6a:51:83:a9:18:2e:fa:
         bf:2b:74:5a:cb:48:c0:0e:c1:3f:d1:fa:57:65:16:0d:8e:f0:
         3c:78:20:16:1f:d9:cc:f2:0c:f6:05:23:c3:c9:a1:d9:81:91:
         95:a1:20:25:90:d6:19:14:9d:f7:2b:ab:75:98:11:98:3d:8f:
         76:0f:0d:5b:1a:80:75:2e:3d:4b:5e:9c:19:8f:41:89:11:ac:
         02:6a:71:06:c7:7a:f4:a0:62:22:05:ff:5c:60:b5:57:7d:4f:
         0e:c1:ad:51:55:87:ee:26:53:4b:c0:d9:f0:fb:1c:e2:c1:48:
         d6:93:ab:e8:40:f7:92:cc:75:5b:43:e3:cb:59:42:59:94:65:
         9d:91:41:95:fb:30:44:5a:7b:6c:4f:cb:47:13:ae:4b:fe:a9:
         9c:d0:e7:58:48:9c:c5:54:72:05:0e:16:f5:e0:b8:3a:9f:e7:
         e0:3b:aa:21:ac:16:ed:73:0b:87:8d:5b:79:3f:d9:4a:01:b1:
         92:61:06:29:cb:e9:41:90:e9:c8:0b:c2:ae:2a:2d:8f:f6:fd:
         32:62:77:59:12:1e:55:53:2b:7e:f1:ef:a3:d5:f3:51:1d:05:
         8f:25:32:4b:48:cc:e7:9d:a5:a2:ee:50:9d:db:d4:70:c0:fc:
         e9:22:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:02 2025 by rpki-client