Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133322e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3133322e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          YRVA8ovTJsxLtHthMkeU5nlUTvz7mY1KdO8Fa0hQer4=
Subject key identifier:   40:5C:A0:18:85:4B:DC:27:C3:C3:43:1B:9B:19:A7:14:55:F5:A4:D5
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       426A5D1D20A860A3ABBE7F6165DCC92E77110A13
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133322e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:53:05 +0000
ROA not before:           Tue 04 Feb 2025 18:48:05 +0000
ROA not after:            Tue 03 Feb 2026 18:53:05 +0000
asID:                     272848
IP address blocks:        201.218.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6a:5d:1d:20:a8:60:a3:ab:be:7f:61:65:dc:c9:2e:77:11:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:05 2025 GMT
            Not After : Feb  3 18:53:05 2026 GMT
        Subject: CN=405CA018854BDC27C3C3431B9B19A71455F5A4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:3d:ac:16:a9:83:61:70:60:01:a8:79:0f:
                    72:54:bc:37:99:ce:7b:1b:b0:ce:a2:31:f2:af:2d:
                    11:73:44:6a:be:18:e8:ef:e5:9a:2c:e5:3a:e4:f2:
                    aa:b0:01:8d:45:c9:58:af:bd:73:44:40:03:9f:ea:
                    3b:56:c7:65:b3:6e:93:af:dc:f8:ee:a2:6d:f6:9d:
                    d2:90:51:6a:5d:71:ea:48:2f:35:79:df:c4:77:7a:
                    2a:76:71:6e:36:c6:fa:7a:28:1e:18:e3:95:02:35:
                    45:93:4a:f3:60:99:03:0d:55:f0:bb:90:19:20:8e:
                    0d:23:da:95:03:55:6c:ae:d3:41:bf:c5:15:d2:78:
                    e8:3a:f4:91:52:42:ef:f0:27:29:f5:7d:a7:60:04:
                    f4:5d:98:83:c4:49:9a:8b:f5:6c:cb:a7:36:36:f2:
                    71:27:60:72:cd:76:52:f8:94:67:1b:9c:ae:42:15:
                    d6:13:50:a9:7c:ab:94:71:8a:6c:fd:a9:18:27:e3:
                    67:4c:aa:a1:38:7f:83:34:17:0e:23:9c:6b:93:1c:
                    fc:25:d3:64:44:b7:66:e8:4c:b6:c4:83:a6:45:36:
                    3c:73:bd:a9:ff:cf:aa:72:ed:39:f8:59:76:1e:88:
                    f2:64:c0:e9:40:d9:3b:fe:f6:74:2f:aa:f0:24:74:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:A0:18:85:4B:DC:27:C3:C3:43:1B:9B:19:A7:14:55:F5:A4:D5
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133322e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:96:bd:b1:92:5b:b8:d3:be:79:1e:51:0d:fe:53:50:85:44:
         68:6a:f8:21:a8:45:79:ac:4c:b3:24:17:42:95:66:51:75:36:
         50:ca:41:5d:cc:65:82:0c:95:a8:ec:77:d9:f1:9c:b2:3c:85:
         6c:e9:13:3f:b3:eb:08:89:17:84:29:bf:ec:a5:0e:f7:a5:7f:
         53:cf:0d:59:d9:72:02:a1:21:f0:d9:0d:d2:00:bd:d1:96:af:
         b8:c0:0c:dc:4d:ca:ac:61:e7:99:48:1c:fe:65:86:32:2e:1d:
         10:c7:47:e4:a3:be:b3:0d:2d:2f:f6:d0:44:7a:45:02:84:1c:
         5b:28:b0:5a:75:c7:4a:0b:d3:21:8a:cb:a9:f3:af:fe:95:1d:
         6f:ed:d8:ee:5c:d7:e9:00:f4:4a:dd:32:50:52:f4:09:41:e1:
         f8:a0:0e:c5:65:4e:69:27:86:05:a3:4a:70:6a:3e:7a:86:78:
         b4:92:1e:58:7a:8e:16:0f:ec:46:77:5a:79:c6:e3:cf:16:fb:
         10:e0:25:27:72:8e:d7:3b:07:f0:02:c8:a6:8c:8f:dc:28:f8:
         28:c0:ff:b4:eb:62:8f:b7:bb:78:62:d9:98:3c:39:30:1a:61:
         66:79:91:68:10:50:94:01:19:2e:37:73:35:54:3e:23:13:a9:
         54:5e:17:db
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQmpdHSCoYKOrvn9hZdzJLncRChMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ4MDVaFw0yNjAyMDMxODUzMDVaMDMxMTAvBgNV
BAMTKDQwNUNBMDE4ODU0QkRDMjdDM0MzNDMxQjlCMTlBNzE0NTVGNUE0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagT2sFqmDYXBgAah5D3JUvDeZ
znsbsM6iMfKvLRFzRGq+GOjv5Zos5Trk8qqwAY1FyVivvXNEQAOf6jtWx2WzbpOv
3Pjuom32ndKQUWpdcepILzV538R3eip2cW42xvp6KB4Y45UCNUWTSvNgmQMNVfC7
kBkgjg0j2pUDVWyu00G/xRXSeOg69JFSQu/wJyn1fadgBPRdmIPESZqL9WzLpzY2
8nEnYHLNdlL4lGcbnK5CFdYTUKl8q5Rximz9qRgn42dMqqE4f4M0Fw4jnGuTHPwl
02REt2boTLbEg6ZFNjxzvan/z6py7Tn4WXYeiPJkwOlA2Tv+9nQvqvAkdMtnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUQFygGIVL3CfDw0MbmxmnFFX1pNUwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
2oQwDQYJKoZIhvcNAQELBQADggEBAHmWvbGSW7jTvnkeUQ3+U1CFRGhq+CGoRXms
TLMkF0KVZlF1NlDKQV3MZYIMlajsd9nxnLI8hWzpEz+z6wiJF4Qpv+ylDvelf1PP
DVnZcgKhIfDZDdIAvdGWr7jADNxNyqxh55lIHP5lhjIuHRDHR+SjvrMNLS/20ER6
RQKEHFsosFp1x0oL0yGKy6nzr/6VHW/t2O5c1+kA9ErdMlBS9AlB4figDsVlTmkn
hgWjSnBqPnqGeLSSHlh6jhYP7EZ3WnnG488W+xDgJSdyjtc7B/ACyKaMj9wo+CjA
/7TrYo+3u3hi2Zg8OTAaYWZ5kWgQUJQBGS43czVUPiMTqVReF9s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:01 2025 by rpki-client