Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa
File:                     3230312e3232312e36392e302f32342d3234203d3e203237373839.roa (raw, json)
Hash identifier:          J7DVkI5JjtNzpOs9kDUrcx/QkCFTnN0v9GooeehkgW0=
Subject key identifier:   69:C9:CE:4C:51:5C:F4:00:A9:EF:E8:6C:C6:8F:5C:44:B7:92:97:8D
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       535B5F5606FA0D12B3B536886E1212B1AF4B309A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa
Signing time:             Tue 04 Feb 2025 20:08:36 +0000
ROA not before:           Tue 04 Feb 2025 20:03:36 +0000
ROA not after:            Tue 03 Feb 2026 20:08:36 +0000
asID:                     27789
IP address blocks:        201.221.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:5f:56:06:fa:0d:12:b3:b5:36:88:6e:12:12:b1:af:4b:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:36 2025 GMT
            Not After : Feb  3 20:08:36 2026 GMT
        Subject: CN=69C9CE4C515CF400A9EFE86CC68F5C44B792978D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:a7:6b:11:ed:75:c6:63:7e:35:06:fa:a9:
                    8b:42:70:ef:44:9d:29:dd:1a:89:d8:10:c5:1d:e3:
                    90:fe:07:3a:e1:d4:ea:11:27:a4:d2:fc:14:aa:1b:
                    dc:07:01:11:fc:b6:88:2e:2d:fe:ff:32:fc:8d:47:
                    a3:6b:4d:9d:6e:38:4a:18:42:3a:16:37:00:6d:90:
                    1e:94:de:19:8d:38:1e:91:7a:c0:3c:e5:08:b3:6e:
                    9a:c2:b7:37:39:fe:a7:45:c8:a1:99:46:c5:2e:e1:
                    5c:0d:0b:c9:9c:4e:19:63:f2:fb:a9:b0:18:83:2a:
                    07:fc:c3:1b:01:1f:7d:19:22:12:e5:99:32:1d:ef:
                    b5:e4:8b:4b:04:6e:93:b8:0e:47:e0:79:09:c3:76:
                    b3:a9:b7:41:c3:87:34:9a:eb:eb:95:ff:74:e4:2c:
                    0b:19:73:9a:bd:64:0c:04:fc:0e:6f:29:f2:62:2a:
                    6a:97:fa:66:73:d9:b7:06:d7:df:86:c9:f7:9a:4e:
                    15:14:51:d2:c0:b3:c6:a1:5c:91:6e:ec:ec:fd:70:
                    d9:95:85:0b:d9:c0:d3:48:09:1b:bb:2c:c0:c7:cf:
                    de:47:5b:08:e0:66:3d:6d:4f:76:c9:8e:ed:e8:7c:
                    a8:5c:23:84:7c:b7:93:a2:ca:73:bc:44:af:6d:e2:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:CE:4C:51:5C:F4:00:A9:EF:E8:6C:C6:8F:5C:44:B7:92:97:8D
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:0c:f6:d6:92:40:33:80:97:fe:f7:77:3d:9a:c2:e7:cc:00:
         d8:46:5e:21:62:7f:9f:b8:77:dd:c6:4c:76:9f:73:0f:35:0a:
         9f:ad:b4:8b:ef:24:e2:b6:e8:4f:87:9a:a2:30:c6:77:9b:17:
         5f:e1:23:48:7a:fe:ae:23:05:31:85:01:e3:b1:52:9b:fd:26:
         b7:4e:4f:22:08:0a:95:c6:38:f2:2c:37:84:e7:39:e4:78:69:
         3f:e1:f1:c4:84:ea:8d:2f:da:25:cc:f9:77:2c:ce:35:dc:91:
         79:e5:7c:df:e5:1c:f2:3c:49:76:e7:fe:98:dc:13:47:b1:86:
         4c:cd:05:96:59:0a:df:0a:c3:b3:da:86:dd:6f:f3:84:d5:a5:
         90:22:6f:60:de:fc:9c:f1:05:3c:ce:31:94:f9:3e:17:ad:e1:
         28:6e:50:b2:b1:39:72:74:cf:cb:7a:33:71:9a:f8:65:b5:83:
         71:c5:c3:8e:f3:0b:0c:34:04:41:e5:72:1a:2e:11:c9:f7:83:
         6f:7c:b7:13:a4:5c:7b:89:6c:31:df:58:14:ec:57:e3:08:1d:
         6e:af:2e:42:db:4d:ab:18:d1:f8:66:36:84:ae:2c:89:4a:31:
         cc:47:f7:1e:78:36:f4:0e:f7:c2:85:a5:e0:f9:d1:47:37:68:
         5b:d8:9a:62
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU1tfVgb6DRKztTaIbhISsa9LMJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAyMDQyMDAzMzZaFw0yNjAyMDMyMDA4MzZaMDMxMTAvBgNV
BAMTKDY5QzlDRTRDNTE1Q0Y0MDBBOUVGRTg2Q0M2OEY1QzQ0Qjc5Mjk3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV3qdrEe11xmN+NQb6qYtCcO9E
nSndGonYEMUd45D+Bzrh1OoRJ6TS/BSqG9wHARH8toguLf7/MvyNR6NrTZ1uOEoY
QjoWNwBtkB6U3hmNOB6ResA85QizbprCtzc5/qdFyKGZRsUu4VwNC8mcThlj8vup
sBiDKgf8wxsBH30ZIhLlmTId77Xki0sEbpO4DkfgeQnDdrOpt0HDhzSa6+uV/3Tk
LAsZc5q9ZAwE/A5vKfJiKmqX+mZz2bcG19+GyfeaThUUUdLAs8ahXJFu7Oz9cNmV
hQvZwNNICRu7LMDHz95HWwjgZj1tT3bJju3ofKhcI4R8t5OiynO8RK9t4uMpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUacnOTFFc9ACp7+hsxo9cRLeSl40wHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMyMzAzMTJlMzIzMjMxMmUzNjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMndRTAN
BgkqhkiG9w0BAQsFAAOCAQEASQz21pJAM4CX/vd3PZrC58wA2EZeIWJ/n7h33cZM
dp9zDzUKn620i+8k4rboT4eaojDGd5sXX+EjSHr+riMFMYUB47FSm/0mt05PIggK
lcY48iw3hOc55HhpP+HxxITqjS/aJcz5dyzONdyReeV83+Uc8jxJduf+mNwTR7GG
TM0FllkK3wrDs9qG3W/zhNWlkCJvYN78nPEFPM4xlPk+F63hKG5QsrE5cnTPy3oz
cZr4ZbWDccXDjvMLDDQEQeVyGi4RyfeDb3y3E6Rce4lsMd9YFOxX4wgdbq8uQttN
qxjR+GY2hK4siUoxzEf3Hng29A73woWl4PnRRzdoW9iaYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:20 2025 by rpki-client