Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          J3yxeLPQPZ2k9ZMFTZcXHJuxGVoK/I/gReswwYpkoVU=
Subject key identifier:   E6:E4:B0:2A:6B:81:C7:EE:1F:DD:ED:06:2F:B7:40:D9:C2:36:39:E4
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       1EBD15D23A6CCB8B114BC58034EB971358F0993C
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:53:03 +0000
ROA not before:           Tue 04 Feb 2025 18:48:03 +0000
ROA not after:            Tue 03 Feb 2026 18:53:03 +0000
asID:                     269862
IP address blocks:        201.218.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:15:d2:3a:6c:cb:8b:11:4b:c5:80:34:eb:97:13:58:f0:99:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:03 2025 GMT
            Not After : Feb  3 18:53:03 2026 GMT
        Subject: CN=E6E4B02A6B81C7EE1FDDED062FB740D9C23639E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:39:09:39:1c:5d:2d:ae:d4:a9:3b:69:2d:
                    25:b6:b6:e8:6b:9e:db:c6:bb:5e:c2:50:0d:2b:ec:
                    e4:5e:f7:a7:62:4c:d0:25:e3:12:08:bb:28:c8:af:
                    94:f4:78:a4:b0:31:a9:6a:aa:ae:2a:6b:ea:aa:1a:
                    f8:86:4a:63:1e:d7:d9:8b:17:32:e1:73:75:d3:94:
                    ed:0c:c0:ee:28:ab:23:70:dd:e7:8d:6f:90:ed:de:
                    41:f0:a4:c0:3c:53:40:74:b2:15:2b:45:4a:35:a8:
                    e8:40:0a:56:7d:27:49:ca:de:ac:79:5f:4a:bb:ed:
                    fb:e2:81:d6:40:43:c6:e2:59:be:87:e0:ee:ad:f1:
                    35:3b:7e:81:47:27:49:56:fa:e5:17:e9:2a:1c:08:
                    66:85:2d:b8:5e:80:a6:72:32:12:71:d8:2c:57:b8:
                    c4:26:1e:ba:23:71:45:fd:f1:61:18:77:5d:55:39:
                    e4:62:17:76:7e:7a:2e:81:6f:de:c3:ec:f4:55:be:
                    dd:78:44:48:10:30:20:0e:51:f8:07:72:aa:bf:ab:
                    44:18:b9:ec:8f:ac:e7:5c:17:9a:27:41:d4:b0:d7:
                    13:45:c5:ba:25:01:68:f9:be:94:96:51:23:68:44:
                    e6:26:15:3b:51:44:18:c9:28:24:e6:49:cb:c1:56:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:B0:2A:6B:81:C7:EE:1F:DD:ED:06:2F:B7:40:D9:C2:36:39:E4
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:06:02:18:8e:cc:9a:47:36:a3:c2:64:ef:20:5f:5e:52:8d:
         5b:9e:cd:f3:00:b7:58:71:17:be:af:8b:04:ac:cc:c3:1d:07:
         c2:24:68:93:be:63:53:f1:cb:4d:5b:7c:cd:af:62:32:4c:c9:
         e1:9b:20:e3:d0:7a:b3:7c:58:60:15:2b:79:22:1b:98:3f:81:
         7a:d1:e0:66:2b:3e:66:31:c5:88:24:df:ed:41:19:ce:44:e7:
         fe:47:9a:25:5b:c9:63:fd:7c:d2:d1:38:fb:b0:f4:99:cb:c8:
         d3:f2:ce:9d:de:84:64:4c:d6:f7:f3:9f:cb:e2:f5:30:b7:77:
         e6:32:3b:41:9d:47:dc:46:cd:47:ec:55:22:26:09:80:0b:ec:
         78:65:3e:9f:89:e5:7d:f7:07:b0:24:8b:76:02:31:4b:2b:6e:
         0b:92:6c:59:94:22:61:e1:dd:75:af:ef:43:f5:fe:bf:e0:4c:
         88:cc:fe:00:f8:ad:49:8c:0c:ad:4f:a2:96:f8:99:f0:b1:89:
         d0:c6:5b:49:1e:48:76:d1:82:5e:3f:d7:17:64:30:93:7e:09:
         7e:c6:7e:3a:8d:66:ec:52:a1:d2:60:fe:b6:43:e9:99:e9:c7:
         eb:ee:f1:80:f5:9e:e7:bf:25:a0:d5:06:be:ea:de:39:54:84:
         3a:48:d8:3e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHr0V0jpsy4sRS8WANOuXE1jwmTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ4MDNaFw0yNjAyMDMxODUzMDNaMDMxMTAvBgNV
BAMTKEU2RTRCMDJBNkI4MUM3RUUxRkRERUQwNjJGQjc0MEQ5QzIzNjM5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/TkJORxdLa7UqTtpLSW2tuhr
ntvGu17CUA0r7ORe96diTNAl4xIIuyjIr5T0eKSwMalqqq4qa+qqGviGSmMe19mL
FzLhc3XTlO0MwO4oqyNw3eeNb5Dt3kHwpMA8U0B0shUrRUo1qOhAClZ9J0nK3qx5
X0q77fvigdZAQ8biWb6H4O6t8TU7foFHJ0lW+uUX6SocCGaFLbhegKZyMhJx2CxX
uMQmHrojcUX98WEYd11VOeRiF3Z+ei6Bb97D7PRVvt14REgQMCAOUfgHcqq/q0QY
ueyPrOdcF5onQdSw1xNFxbolAWj5vpSWUSNoROYmFTtRRBjJKCTmScvBVuY/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU5uSwKmuBx+4f3e0GL7dA2cI2OeQwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzODM2MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
2oIwDQYJKoZIhvcNAQELBQADggEBAGYGAhiOzJpHNqPCZO8gX15SjVuezfMAt1hx
F76viwSszMMdB8IkaJO+Y1Pxy01bfM2vYjJMyeGbIOPQerN8WGAVK3kiG5g/gXrR
4GYrPmYxxYgk3+1BGc5E5/5HmiVbyWP9fNLROPuw9JnLyNPyzp3ehGRM1vfzn8vi
9TC3d+YyO0GdR9xGzUfsVSImCYAL7HhlPp+J5X33B7Aki3YCMUsrbguSbFmUImHh
3XWv70P1/r/gTIjM/gD4rUmMDK1Popb4mfCxidDGW0keSHbRgl4/1xdkMJN+CX7G
fjqNZuxSodJg/rZD6Znpx+vu8YD1nue/JaDVBr7q3jlUhDpI2D4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:06 2025 by rpki-client