Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34342e302f32342d3234203d3e203238303735.roa
File:                     3139382e31322e34342e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier:          nBiAGYt0s+Et3YQ3sx9b7UB/jWneqRxJuAZTzK4M7To=
Subject key identifier:   A0:01:F7:A0:11:21:A6:84:5F:16:7D:B2:D8:AD:EB:11:A1:E1:BA:C0
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       683541B6DE7B51B8174B0DBD041926763C6D5965
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34342e302f32342d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:03 +0000
ROA not before:           Tue 04 Feb 2025 19:54:03 +0000
ROA not after:            Tue 03 Feb 2026 19:59:03 +0000
asID:                     28075
IP address blocks:        198.12.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:35:41:b6:de:7b:51:b8:17:4b:0d:bd:04:19:26:76:3c:6d:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:03 2025 GMT
            Not After : Feb  3 19:59:03 2026 GMT
        Subject: CN=A001F7A01121A6845F167DB2D8ADEB11A1E1BAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:d0:84:94:45:eb:88:8b:38:e9:88:b7:93:
                    33:34:e0:40:d3:53:72:bb:ae:ef:00:4e:94:bb:65:
                    c0:e5:6f:72:c0:3e:9e:44:4c:eb:f2:fd:39:79:29:
                    13:1b:3b:2b:39:1a:4c:c9:b7:aa:d3:2a:5b:df:68:
                    1d:c3:15:5e:3f:65:81:1b:5a:7b:90:d9:3e:d1:7c:
                    c2:43:36:67:ba:cc:c2:f6:bf:12:f8:a4:45:15:f6:
                    83:0f:16:22:ce:2b:b5:63:eb:85:0b:55:b7:2d:c9:
                    8c:73:dc:0c:ae:e2:e8:ba:72:3e:52:fd:91:52:aa:
                    54:dd:e7:90:34:c0:bf:4e:f8:ad:2a:9b:c9:a3:19:
                    2b:30:59:94:c2:48:ba:3c:42:fb:a2:b3:9b:9c:b1:
                    3d:07:a9:18:7c:f2:2d:18:dd:be:d3:a0:d2:ad:ed:
                    c4:4b:0d:d8:c4:f4:5f:ad:1d:39:50:c9:4e:28:d5:
                    d3:5b:9f:f4:35:ff:b8:c2:80:1a:2a:88:d1:17:97:
                    5e:43:d0:5f:bb:43:3d:1b:af:03:97:98:13:f3:37:
                    2c:d1:12:f4:c0:33:18:6f:62:74:83:fb:0f:59:5f:
                    a1:6b:1b:80:22:2e:18:ba:0d:3e:ce:c0:18:8e:68:
                    32:25:76:30:90:84:14:f8:7c:ea:a4:69:fc:1a:14:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:F7:A0:11:21:A6:84:5F:16:7D:B2:D8:AD:EB:11:A1:E1:BA:C0
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34342e302f32342d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:cc:8f:fd:82:e9:40:bd:a9:b7:54:d2:bf:ba:e8:b0:04:6d:
         fb:cc:61:bb:2b:6d:b7:8e:31:c7:6e:93:54:dd:1f:66:a9:04:
         09:68:09:d0:02:ea:d7:ae:44:76:c5:f0:d4:0c:21:f8:7d:4a:
         45:fc:55:42:c0:c4:df:fe:ec:28:2f:a9:81:35:34:8d:72:f0:
         d3:b4:6b:79:0c:02:91:a2:00:75:a0:e6:86:78:50:40:b7:c7:
         86:c5:f5:7f:b8:e5:51:50:70:e5:ab:9c:6e:0b:92:bd:c9:e3:
         64:7b:dc:77:3b:5f:7a:90:cf:c1:1f:22:fe:f1:1d:4e:ce:0e:
         60:0c:b0:5e:8e:59:1f:7a:27:f4:59:bd:a7:f7:a4:81:c8:6b:
         ef:b4:e1:01:8a:58:3f:06:42:64:b7:63:a2:d2:89:10:8e:47:
         d4:bc:72:6f:91:3b:70:fb:1e:15:1e:97:9d:16:6c:b8:87:25:
         ff:c5:fc:ca:4c:a1:5f:12:18:d9:99:e8:df:57:5c:62:b4:57:
         ee:db:69:b6:0b:88:92:7c:ae:20:d6:53:53:a6:44:4f:da:88:
         8e:96:08:19:62:8e:47:f7:bb:91:8c:bc:28:62:f1:48:2c:bf:
         ef:02:ea:9c:62:e4:ae:43:db:55:3f:78:d5:fe:99:bf:7b:7d:
         ff:b0:f5:d4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaDVBtt57UbgXSw29BBkmdjxtWWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNTAyMDQxOTU0MDNaFw0yNjAyMDMxOTU5MDNaMDMxMTAvBgNV
BAMTKEEwMDFGN0EwMTEyMUE2ODQ1RjE2N0RCMkQ4QURFQjExQTFFMUJBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQtCElEXriIs46Yi3kzM04EDT
U3K7ru8ATpS7ZcDlb3LAPp5ETOvy/Tl5KRMbOys5GkzJt6rTKlvfaB3DFV4/ZYEb
WnuQ2T7RfMJDNme6zML2vxL4pEUV9oMPFiLOK7Vj64ULVbctyYxz3Ayu4ui6cj5S
/ZFSqlTd55A0wL9O+K0qm8mjGSswWZTCSLo8Qvuis5ucsT0HqRh88i0Y3b7ToNKt
7cRLDdjE9F+tHTlQyU4o1dNbn/Q1/7jCgBoqiNEXl15D0F+7Qz0brwOXmBPzNyzR
EvTAMxhvYnSD+w9ZX6FrG4AiLhi6DT7OwBiOaDIldjCQhBT4fOqkafwaFEOdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUoAH3oBEhpoRfFn2y2K3rEaHhusAwHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzkzODJlMzEzMjJlMzQzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGDCwwDQYJ
KoZIhvcNAQELBQADggEBAMTMj/2C6UC9qbdU0r+66LAEbfvMYbsrbbeOMcduk1Td
H2apBAloCdAC6teuRHbF8NQMIfh9SkX8VULAxN/+7CgvqYE1NI1y8NO0a3kMApGi
AHWg5oZ4UEC3x4bF9X+45VFQcOWrnG4Lkr3J42R73Hc7X3qQz8EfIv7xHU7ODmAM
sF6OWR96J/RZvaf3pIHIa++04QGKWD8GQmS3Y6LSiRCOR9S8cm+RO3D7HhUel50W
bLiHJf/F/MpMoV8SGNmZ6N9XXGK0V+7babYLiJJ8riDWU1OmRE/aiI6WCBlijkf3
u5GMvChi8Ugsv+8C6pxi5K5D21U/eNX+mb97ff+w9dQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:31 2025 by rpki-client