Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135302e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3135302e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          9qXbIMxcBAIG11lODf5CwaWEOoSBEGNgEypp3h73F+Q=
Subject key identifier:   5D:B4:1C:68:8B:20:4C:E7:02:ED:D4:1C:D5:DE:1E:C4:5C:64:35:25
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       73CA57AC1BC266E52B7E1A2CAD0B1BDFFB18E488
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135302e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:52:59 +0000
ROA not before:           Tue 04 Feb 2025 18:47:59 +0000
ROA not after:            Tue 03 Feb 2026 18:52:59 +0000
asID:                     269862
IP address blocks:        201.218.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:57:ac:1b:c2:66:e5:2b:7e:1a:2c:ad:0b:1b:df:fb:18:e4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:59 2025 GMT
            Not After : Feb  3 18:52:59 2026 GMT
        Subject: CN=5DB41C688B204CE702EDD41CD5DE1EC45C643525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:c3:ff:66:54:78:98:5f:a2:05:9b:94:d0:
                    01:02:ae:d5:c9:c1:6f:e9:cd:89:93:e1:5f:36:c7:
                    ae:37:4b:09:6e:22:eb:84:6e:a3:38:7f:b3:d4:d1:
                    8a:b1:6b:90:a6:70:e9:81:5c:88:0d:8b:d8:0c:9c:
                    ea:9d:bc:2a:43:d5:1f:f0:a3:ed:e8:82:8c:ab:05:
                    dc:2b:c4:b5:13:bd:60:d5:9f:c1:26:64:fe:43:e7:
                    21:4e:f9:d6:5d:35:d9:86:3a:56:84:ba:14:56:91:
                    b8:b1:de:fa:10:88:5a:47:f7:f4:ab:5e:47:49:27:
                    e4:9c:92:97:c8:d0:37:94:28:f4:f3:f3:bf:95:ba:
                    90:b0:e3:45:cb:e6:63:12:5d:53:d9:e7:e3:39:3d:
                    ec:1a:7c:1e:1d:16:4e:67:b9:1a:42:55:23:ea:19:
                    8d:5d:5d:bc:6b:eb:d7:e9:ac:d5:ef:f0:6e:17:10:
                    f3:0c:a9:6a:9c:f7:1a:0e:c4:18:9f:ef:a9:4c:57:
                    de:e7:51:e0:1d:02:51:76:28:8f:3c:e5:18:10:c3:
                    8f:44:ab:07:d9:89:71:86:92:b8:e9:9b:70:e6:53:
                    a6:1c:52:32:54:13:99:c2:61:49:f8:8c:d0:31:14:
                    46:fb:a4:8e:ff:73:e4:12:16:6f:ac:b8:20:86:af:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B4:1C:68:8B:20:4C:E7:02:ED:D4:1C:D5:DE:1E:C4:5C:64:35:25
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135302e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:9a:41:a0:de:b5:08:22:58:0f:0d:e9:e8:58:59:db:f5:
         52:2a:13:06:35:ce:d1:c6:57:be:0f:90:15:e1:7c:b6:13:82:
         28:99:89:30:b4:35:35:f7:3c:59:ae:5d:c5:f2:69:68:2a:00:
         27:62:d8:3d:7f:8f:18:56:75:cc:e0:10:73:38:c9:26:34:ae:
         8b:58:f2:fb:dc:de:ec:28:ef:ba:4b:71:e7:73:8c:aa:dc:95:
         1d:1b:f2:0d:d8:1b:db:91:27:65:3b:d8:bb:b2:09:37:1a:f7:
         ba:d1:03:df:8f:5e:b7:fd:8f:69:9b:2e:d4:63:1d:22:81:aa:
         84:28:41:f6:c6:b0:3a:c5:73:37:85:d4:b6:8a:77:52:d3:fd:
         b0:b2:4c:4f:0c:a4:c2:9e:01:f1:2f:2b:d9:a7:0e:74:ef:70:
         69:4a:ec:8c:09:db:cd:e2:9f:d3:6d:bd:f4:a9:b7:98:04:fd:
         81:f3:96:45:22:53:5b:81:1e:eb:c1:4d:0a:f8:83:19:36:40:
         9c:28:7f:c9:be:1d:ce:e2:31:ff:9c:4f:31:4f:7f:14:b8:16:
         7d:93:5f:ea:99:21:96:a3:10:d9:59:bb:79:2a:62:07:c5:3e:
         41:9e:21:93:94:51:da:d7:0d:c2:0b:ae:d8:47:f3:33:91:30:
         a8:5d:af:6c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUc8pXrBvCZuUrfhosrQsb3/sY5IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ3NTlaFw0yNjAyMDMxODUyNTlaMDMxMTAvBgNV
BAMTKDVEQjQxQzY4OEIyMDRDRTcwMkVERDQxQ0Q1REUxRUM0NUM2NDM1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfcP/ZlR4mF+iBZuU0AECrtXJ
wW/pzYmT4V82x643SwluIuuEbqM4f7PU0Yqxa5CmcOmBXIgNi9gMnOqdvCpD1R/w
o+3ogoyrBdwrxLUTvWDVn8EmZP5D5yFO+dZdNdmGOlaEuhRWkbix3voQiFpH9/Sr
XkdJJ+SckpfI0DeUKPTz87+VupCw40XL5mMSXVPZ5+M5PewafB4dFk5nuRpCVSPq
GY1dXbxr69fprNXv8G4XEPMMqWqc9xoOxBif76lMV97nUeAdAlF2KI885RgQw49E
qwfZiXGGkrjpm3DmU6YcUjJUE5nCYUn4jNAxFEb7pI7/c+QSFm+suCCGr7N/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUXbQcaIsgTOcC7dQc1d4exFxkNSUwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzODM2MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
2pYwDQYJKoZIhvcNAQELBQADggEBAD75mkGg3rUIIlgPDenoWFnb9VIqEwY1ztHG
V74PkBXhfLYTgiiZiTC0NTX3PFmuXcXyaWgqACdi2D1/jxhWdczgEHM4ySY0rotY
8vvc3uwo77pLcedzjKrclR0b8g3YG9uRJ2U72LuyCTca97rRA9+PXrf9j2mbLtRj
HSKBqoQoQfbGsDrFczeF1LaKd1LT/bCyTE8MpMKeAfEvK9mnDnTvcGlK7IwJ283i
n9NtvfSpt5gE/YHzlkUiU1uBHuvBTQr4gxk2QJwof8m+Hc7iMf+cTzFPfxS4Fn2T
X+qZIZajENlZu3kqYgfFPkGeIZOUUdrXDcILrthH8zORMKhdr2w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:05 2025 by rpki-client