Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133342e302f32342d3234203d3e203634313330.roa
File:                     3230312e3231382e3133342e302f32342d3234203d3e203634313330.roa (raw, json)
Hash identifier:          PTh2jGh3JylsXT7JucDmHKq/6C/4oNytK0zCiZcFe6E=
Subject key identifier:   89:73:E1:45:B9:7A:41:39:EF:17:90:25:0C:AD:DB:3C:44:4C:28:4D
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       6DBFCC0D275CB5432724C688605E16E0C6CF539F
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133342e302f32342d3234203d3e203634313330.roa
Signing time:             Tue 04 Feb 2025 18:52:58 +0000
ROA not before:           Tue 04 Feb 2025 18:47:58 +0000
ROA not after:            Tue 03 Feb 2026 18:52:58 +0000
asID:                     64130
IP address blocks:        201.218.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bf:cc:0d:27:5c:b5:43:27:24:c6:88:60:5e:16:e0:c6:cf:53:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:58 2025 GMT
            Not After : Feb  3 18:52:58 2026 GMT
        Subject: CN=8973E145B97A4139EF1790250CADDB3C444C284D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:77:14:8a:65:4a:79:76:4d:63:b1:2c:3f:
                    6c:bb:08:ff:27:06:7b:c2:b5:2c:30:5f:14:d3:03:
                    6b:f2:c7:c2:d2:11:ff:09:1e:6c:db:ea:1a:a0:0a:
                    41:43:3a:9a:28:a4:5d:d5:a7:d5:8f:c2:8a:7b:5e:
                    04:9f:1b:f2:28:cc:33:36:b6:0f:11:1c:c5:97:40:
                    72:7c:7a:cd:85:cc:22:bb:25:e1:db:be:44:e3:8e:
                    e0:d7:b0:b2:44:de:0c:95:a2:1e:87:f5:c2:a6:01:
                    54:03:7b:50:25:ec:76:7e:21:29:43:70:1e:71:9e:
                    75:ed:99:7b:05:5f:03:6c:ac:51:7f:a0:9e:4c:f6:
                    4b:46:d9:74:26:c7:ba:6a:22:9e:09:15:aa:10:f4:
                    0c:c7:27:2b:0e:81:c8:3c:0e:6a:a2:25:c5:81:2a:
                    6c:a6:8e:26:34:59:bc:e6:3a:4b:56:3b:76:bf:ff:
                    48:90:43:f8:c5:d2:6b:62:20:61:b1:d4:87:67:62:
                    2d:aa:17:7c:bb:23:9d:31:e1:42:56:51:32:7f:9d:
                    78:6a:4e:90:60:35:a7:90:bb:6f:b2:ec:ff:ff:08:
                    3c:c2:82:6b:3b:5a:18:88:9c:bf:57:c3:c0:ed:ce:
                    52:d7:d6:40:63:2e:0e:06:74:c8:e1:14:c1:e4:91:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:73:E1:45:B9:7A:41:39:EF:17:90:25:0C:AD:DB:3C:44:4C:28:4D
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133342e302f32342d3234203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:09:d2:93:ec:fb:92:9e:f2:0a:36:d1:b1:2a:1f:f1:ed:
         66:4f:c6:b5:60:12:69:30:a1:2d:5c:fc:95:e3:6d:8b:15:78:
         6e:6d:7a:39:cc:de:fb:28:20:eb:74:26:a0:8b:fc:1f:9f:b3:
         0a:f2:3e:ad:e7:a0:6a:9f:8b:06:ea:3f:66:b4:d7:f9:3f:cd:
         65:c8:7d:d0:3a:dc:4c:66:78:7e:8b:02:aa:39:66:07:41:b8:
         6b:3c:3b:75:69:da:80:40:3d:25:0c:be:35:54:29:ea:81:3e:
         82:aa:0e:a6:98:0e:2d:d0:56:b5:95:98:ba:1a:c4:9a:d8:14:
         6d:ad:02:47:32:75:66:7c:14:3f:79:8a:ea:55:72:cb:17:5c:
         f8:48:0d:73:97:09:95:13:b2:85:d2:79:ef:9c:5d:f1:6e:eb:
         f4:a9:9e:62:67:e2:aa:54:1e:75:c9:a3:19:8c:8b:e6:e8:05:
         3d:87:f5:d2:53:3d:39:94:bd:bc:de:b7:06:94:26:b4:52:f0:
         fb:40:40:ae:6b:d9:70:7a:88:55:a0:db:d6:8e:ee:80:81:9a:
         53:1c:90:40:e2:3e:2e:3c:e3:ba:8e:ae:4d:7c:47:5c:82:39:
         b5:98:18:b3:9f:94:e6:b4:d8:1e:af:a6:1d:39:bf:1c:07:43:
         b4:e2:d9:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbb/MDSdctUMnJMaIYF4W4MbPU58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ3NThaFw0yNjAyMDMxODUyNThaMDMxMTAvBgNV
BAMTKDg5NzNFMTQ1Qjk3QTQxMzlFRjE3OTAyNTBDQUREQjNDNDQ0QzI4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTu3cUimVKeXZNY7EsP2y7CP8n
BnvCtSwwXxTTA2vyx8LSEf8JHmzb6hqgCkFDOpoopF3Vp9WPwop7XgSfG/IozDM2
tg8RHMWXQHJ8es2FzCK7JeHbvkTjjuDXsLJE3gyVoh6H9cKmAVQDe1Al7HZ+ISlD
cB5xnnXtmXsFXwNsrFF/oJ5M9ktG2XQmx7pqIp4JFaoQ9AzHJysOgcg8DmqiJcWB
KmymjiY0WbzmOktWO3a//0iQQ/jF0mtiIGGx1IdnYi2qF3y7I50x4UJWUTJ/nXhq
TpBgNaeQu2+y7P//CDzCgms7WhiInL9Xw8DtzlLX1kBjLg4GdMjhFMHkkUjNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiXPhRbl6QTnvF5AlDK3bPERMKE0wHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTMzMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzEzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAydqG
MA0GCSqGSIb3DQEBCwUAA4IBAQCNXQnSk+z7kp7yCjbRsSof8e1mT8a1YBJpMKEt
XPyV422LFXhubXo5zN77KCDrdCagi/wfn7MK8j6t56Bqn4sG6j9mtNf5P81lyH3Q
OtxMZnh+iwKqOWYHQbhrPDt1adqAQD0lDL41VCnqgT6Cqg6mmA4t0Fa1lZi6GsSa
2BRtrQJHMnVmfBQ/eYrqVXLLF1z4SA1zlwmVE7KF0nnvnF3xbuv0qZ5iZ+KqVB51
yaMZjIvm6AU9h/XSUz05lL283rcGlCa0UvD7QECua9lweohVoNvWju6AgZpTHJBA
4j4uPOO6jq5NfEdcgjm1mBizn5TmtNger6YdOb8cB0O04tkd
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:24 2025 by rpki-client