Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa
File:                     3133382e39392e3137372e302f32342d3234203d3e203634313136.roa (raw, json)
Hash identifier:          zmIKllxHl1wKRcZkTJ88aqVZa7pAHXQ5wA6fP0JhcyM=
Subject key identifier:   46:0A:9C:95:01:11:70:04:23:95:57:CE:9F:34:02:6E:98:93:38:8E
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       5169A2F5D908C25AB6D0BF07AC26DC2B1D64CEDD
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa
Signing time:             Tue 04 Feb 2025 18:52:56 +0000
ROA not before:           Tue 04 Feb 2025 18:47:56 +0000
ROA not after:            Tue 03 Feb 2026 18:52:56 +0000
asID:                     64116
IP address blocks:        138.99.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:69:a2:f5:d9:08:c2:5a:b6:d0:bf:07:ac:26:dc:2b:1d:64:ce:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:56 2025 GMT
            Not After : Feb  3 18:52:56 2026 GMT
        Subject: CN=460A9C9501117004239557CE9F34026E9893388E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:c0:ba:05:d7:87:92:e9:6b:3e:db:04:ec:
                    06:85:f2:44:34:2c:cf:22:53:f9:db:33:a2:84:c2:
                    90:21:a9:4a:9a:b2:c4:90:22:24:2b:60:a3:4f:06:
                    c1:fb:21:15:3c:0c:2f:30:83:4e:52:1e:ca:33:ed:
                    ed:87:92:11:4b:68:0b:18:7e:01:13:5e:cb:2a:92:
                    9b:6c:a2:76:ff:17:40:4b:24:ec:89:ba:f1:4b:b9:
                    f6:38:04:bb:92:fd:68:ea:41:fa:69:e9:f6:da:34:
                    8a:c8:3f:35:10:56:36:58:a1:f5:17:4c:4b:0c:05:
                    6b:25:2d:84:dd:d7:c4:ad:b6:8f:60:0b:54:b9:d9:
                    b2:fd:48:f5:41:9e:da:fb:eb:47:e1:9e:b5:22:8d:
                    ba:fb:6a:0b:ee:42:d7:52:5d:24:65:03:1f:ee:2f:
                    3d:a1:e4:11:aa:f1:01:cb:3e:68:9c:6b:b8:dd:3b:
                    e0:10:72:7e:44:a7:de:c4:01:ee:23:f4:fc:f2:fe:
                    f6:fe:2a:6e:0d:66:3f:2e:6f:5a:16:70:b6:63:ac:
                    1c:e3:a5:14:af:15:cc:28:55:a8:99:3d:f0:84:61:
                    2d:27:1c:4b:27:f2:90:e9:ef:0f:8d:2a:74:60:29:
                    a9:0c:99:67:cb:9f:18:de:78:c8:32:ed:09:f9:b5:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:9C:95:01:11:70:04:23:95:57:CE:9F:34:02:6E:98:93:38:8E
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:21:09:42:25:1b:44:87:d9:1b:5c:3a:35:f2:b2:17:59:
         60:4f:7d:77:83:87:17:d3:5b:ef:4e:c3:3e:c0:45:13:90:0e:
         f6:3f:32:cf:3a:ba:10:6b:15:18:62:68:c9:0a:03:ba:47:97:
         a7:e1:ed:48:c5:c1:3d:ed:2a:6a:f2:3e:3c:64:0d:4b:28:30:
         b0:11:1f:4e:83:de:cb:7e:3f:03:32:d2:2a:9d:57:35:0c:4d:
         f2:56:f9:86:5e:95:30:cd:72:70:bf:19:87:39:e4:4b:df:27:
         4b:09:42:84:e5:84:75:af:8e:68:85:dd:b4:9f:28:11:a3:8f:
         e9:4d:43:b5:ff:9a:04:c4:7e:da:61:1b:05:72:6c:a1:58:31:
         cb:c4:18:bc:6a:fb:10:e2:66:85:6e:5a:95:b2:c9:97:e9:ee:
         23:c7:75:12:10:b9:a0:85:d5:28:18:18:96:18:ff:57:86:01:
         4e:37:1f:ce:36:36:98:71:85:2c:a3:ab:e8:3a:b2:bc:70:5d:
         6e:b2:b5:03:ed:58:b5:c2:71:19:57:9a:e8:48:51:ae:b6:70:
         09:bb:6a:ec:4c:5f:7e:3b:10:2a:27:15:b5:75:dd:2c:8a:6d:
         04:33:4e:28:d7:24:a1:06:75:34:82:3e:52:d0:bc:b8:f9:76:
         85:80:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:58 2025 by rpki-client