Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e31322e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          59Ou6WV8G7B8lZIBTjUTtjUvqSNyzMThcliF8GdbeFo=
Subject key identifier:   DB:75:A3:0B:39:A7:40:4F:1A:A8:0E:AE:9B:01:BE:16:B4:52:FA:C3
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       77F68646517E25A8FFB0768C980CCBE37FBBE54F
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:04 +0000
ROA not before:           Tue 04 Feb 2025 18:21:04 +0000
ROA not after:            Tue 03 Feb 2026 18:26:04 +0000
asID:                     17147
IP address blocks:        163.247.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f6:86:46:51:7e:25:a8:ff:b0:76:8c:98:0c:cb:e3:7f:bb:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:04 2025 GMT
            Not After : Feb  3 18:26:04 2026 GMT
        Subject: CN=DB75A30B39A7404F1AA80EAE9B01BE16B452FAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:78:7c:ac:d2:45:cf:d3:26:d0:66:fb:74:
                    21:6c:1f:3f:d5:0e:69:f9:9a:af:37:8d:37:c8:d0:
                    c2:63:58:b3:08:9f:37:59:c9:67:79:8c:0d:9b:f7:
                    a3:17:e4:db:1b:72:e3:94:dd:fa:74:db:f3:da:68:
                    52:49:0d:06:5f:6e:57:25:6d:a0:b5:dc:09:40:5a:
                    ad:05:41:81:d8:09:f5:d1:58:d3:a8:09:19:89:4d:
                    42:8c:76:e9:25:4f:a4:50:2c:b6:85:fe:7c:dd:d6:
                    c2:4f:c6:42:bf:54:8a:23:49:70:c8:c6:99:db:63:
                    6c:6f:4f:59:11:c2:43:80:50:0f:b4:31:8c:e2:74:
                    9d:e3:76:a0:bd:16:2e:06:1c:a0:bf:d5:3a:61:cd:
                    09:f5:cf:03:16:ad:70:94:c2:58:76:f2:5b:e1:a6:
                    8e:ce:b5:91:27:37:60:49:e4:a2:2f:7d:fc:a8:72:
                    f3:04:7f:32:ab:60:a3:39:c0:d0:23:4a:42:40:1c:
                    1b:9f:44:ee:73:42:c9:25:25:cc:8e:a1:6c:22:38:
                    ca:e4:93:c2:13:da:52:a5:18:a5:1f:2d:05:5e:77:
                    e5:40:5a:a2:cc:f3:81:1e:c6:68:cd:b2:a9:d9:22:
                    09:82:dd:67:d3:c4:ee:b7:64:56:06:b9:72:2b:2f:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:75:A3:0B:39:A7:40:4F:1A:A8:0E:AE:9B:01:BE:16:B4:52:FA:C3
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:6c:32:05:bd:f9:fe:53:c6:eb:6a:60:ee:3f:07:b6:1b:
         31:29:a2:fd:0e:d2:80:14:6b:2a:93:5e:73:f9:38:53:fc:06:
         ef:fd:a5:fd:07:39:5a:ee:d0:1a:49:15:38:18:80:84:83:75:
         e0:86:10:39:24:17:e1:ee:e1:a8:cf:28:76:b3:02:6e:e6:a9:
         70:90:bc:29:70:80:0d:fd:84:d8:9f:4e:ff:37:39:cb:74:f5:
         63:c1:2e:47:55:ce:49:47:f1:f6:9a:71:ee:c0:95:fa:a7:a9:
         ae:08:1a:84:91:f7:ac:cb:d9:cd:f0:b1:2b:e9:19:58:99:6a:
         9e:2c:67:a6:cc:13:6c:05:6e:48:96:59:2e:70:33:14:39:a3:
         ac:2d:66:fa:8e:63:23:fe:4f:6b:c8:ae:02:22:3f:09:96:98:
         df:9e:e3:c8:61:45:6d:6d:72:55:2e:56:2e:a4:86:15:10:48:
         29:22:65:a6:d8:59:5e:21:24:73:c7:1f:dc:da:d1:a8:ef:1a:
         6a:19:56:cd:2c:ef:e0:9c:92:97:9e:f0:5e:d5:6d:5e:36:58:
         81:ae:e7:30:d3:30:ae:7b:7e:c1:c7:ac:d4:54:b3:be:da:6c:
         93:d9:c7:87:ea:41:34:3c:97:fe:ac:d1:d5:26:f9:4d:6c:92:
         32:0a:9d:63
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd/aGRlF+Jaj/sHaMmAzL43+75U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNTAyMDQxODIxMDRaFw0yNjAyMDMxODI2MDRaMDMxMTAvBgNV
BAMTKERCNzVBMzBCMzlBNzQwNEYxQUE4MEVBRTlCMDFCRTE2QjQ1MkZBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpHh8rNJFz9Mm0Gb7dCFsHz/V
Dmn5mq83jTfI0MJjWLMInzdZyWd5jA2b96MX5NsbcuOU3fp02/PaaFJJDQZfblcl
baC13AlAWq0FQYHYCfXRWNOoCRmJTUKMduklT6RQLLaF/nzd1sJPxkK/VIojSXDI
xpnbY2xvT1kRwkOAUA+0MYzidJ3jdqC9Fi4GHKC/1TphzQn1zwMWrXCUwlh28lvh
po7OtZEnN2BJ5KIvffyocvMEfzKrYKM5wNAjSkJAHBufRO5zQsklJcyOoWwiOMrk
k8IT2lKlGKUfLQVed+VAWqLM84EexmjNsqnZIgmC3WfTxO63ZFYGuXIrL/HdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU23WjCzmnQE8aqA6umwG+FrRS+sMwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3DDAN
BgkqhkiG9w0BAQsFAAOCAQEAog1sMgW9+f5TxutqYO4/B7YbMSmi/Q7SgBRrKpNe
c/k4U/wG7/2l/Qc5Wu7QGkkVOBiAhIN14IYQOSQX4e7hqM8odrMCbuapcJC8KXCA
Df2E2J9O/zc5y3T1Y8EuR1XOSUfx9ppx7sCV+qeprggahJH3rMvZzfCxK+kZWJlq
nixnpswTbAVuSJZZLnAzFDmjrC1m+o5jI/5Pa8iuAiI/CZaY357jyGFFbW1yVS5W
LqSGFRBIKSJlpthZXiEkc8cf3NrRqO8aahlWzSzv4JySl57wXtVtXjZYga7nMNMw
rnt+wces1FSzvtpsk9nHh+pBNDyX/qzR1Sb5TWySMgqdYw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:00 2025 by rpki-client