Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
File:                     3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa (raw, json)
Hash identifier:          aEtY7S05XAiF6swvBFAiKR5RE3ZG76grsD49MAeQMXU=
Subject key identifier:   39:63:BD:C4:28:3A:E3:B5:C6:C0:F3:9C:6B:8A:43:8C:15:1B:12:B0
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       5411D4FEF21F7B5D8275AD2402EE80A6F8A87D00
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
Signing time:             Tue 04 Feb 2025 18:27:08 +0000
ROA not before:           Tue 04 Feb 2025 18:22:08 +0000
ROA not after:            Tue 03 Feb 2026 18:27:08 +0000
asID:                     263235
IP address blocks:        170.210.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:d4:fe:f2:1f:7b:5d:82:75:ad:24:02:ee:80:a6:f8:a8:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:08 2025 GMT
            Not After : Feb  3 18:27:08 2026 GMT
        Subject: CN=3963BDC4283AE3B5C6C0F39C6B8A438C151B12B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:7c:dd:cf:1e:5c:05:d4:fc:5f:a0:ed:b8:
                    ce:25:24:3b:fe:46:44:6b:b5:2d:20:ef:f2:b5:d8:
                    fc:99:ac:fc:87:33:96:b7:ba:50:9a:c7:14:9f:4e:
                    fa:9f:3b:f5:fb:60:44:0d:76:10:b5:5e:89:9d:33:
                    1b:c6:ee:72:ae:4d:e1:80:91:37:d9:31:41:e9:ff:
                    19:df:69:0a:9e:78:86:0e:cc:29:78:95:d8:bb:f2:
                    48:1d:c8:4d:03:98:78:d0:69:c7:7e:25:45:cf:93:
                    fe:f0:2d:08:a6:a0:a8:1b:33:dc:24:6a:15:2b:d9:
                    50:b8:e1:95:1b:20:72:dc:78:3d:0a:98:83:3e:06:
                    e0:ed:54:32:7d:d0:e1:57:59:6f:19:fb:1d:c8:0c:
                    01:1d:f6:0d:48:5f:c4:a8:48:e1:80:63:ef:f1:cb:
                    61:16:24:f4:45:13:5f:7b:7d:5f:eb:c9:b1:73:82:
                    73:fc:14:8a:cd:74:f5:43:f9:88:6e:f3:f2:64:16:
                    ad:a1:6c:0f:17:39:55:e5:66:21:3a:51:ce:4c:c0:
                    c1:8d:41:42:20:a4:9c:72:2d:1e:88:df:11:d4:df:
                    c5:73:a2:5c:5b:5c:3f:f4:97:41:f9:ff:87:b0:c3:
                    94:2c:cd:f2:25:6d:97:25:c4:46:d4:2a:74:61:f1:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:63:BD:C4:28:3A:E3:B5:C6:C0:F3:9C:6B:8A:43:8C:15:1B:12:B0
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:18:e3:94:35:00:47:e8:00:05:b4:b0:0d:7d:cd:aa:53:13:
         29:2c:d5:97:e0:5d:6b:7c:1a:ae:2b:67:10:67:9d:01:c5:b4:
         4e:7f:2c:5a:27:32:70:b7:23:99:25:4a:ce:63:9d:ca:39:cb:
         4b:3a:34:7d:ef:f3:d6:b6:d2:5f:55:47:ec:bc:04:29:0a:1e:
         fc:89:3b:b6:f0:4e:44:20:86:52:58:93:4e:ee:6c:6d:ef:75:
         44:56:3c:6e:8a:5a:32:25:4c:5c:c4:10:36:aa:1c:73:bd:e9:
         41:a8:d9:03:fd:c7:8c:cd:37:d5:a7:41:0f:eb:85:8f:47:e8:
         a2:a8:40:d7:81:b3:1a:b4:0b:59:ae:71:83:a1:21:d1:a5:80:
         11:c1:53:cc:2b:07:81:13:92:17:fe:f9:19:44:cd:b1:ac:7b:
         f3:e8:ad:8a:71:3b:fa:7e:6f:41:67:76:47:36:62:ff:b6:c1:
         87:19:61:68:e2:07:db:ce:81:47:01:c8:78:ba:8b:3b:80:34:
         e0:ae:e5:60:25:3b:89:bf:9a:ce:a9:72:f0:bc:ad:9d:79:f0:
         b4:51:79:c4:9b:60:67:b5:99:07:ec:57:6e:55:12:dd:95:e2:
         a9:26:4b:0e:d4:93:d3:7c:e7:53:a6:4d:34:b2:1f:86:f3:9e:
         c2:60:c0:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVBHU/vIfe12Cda0kAu6ApviofQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNTAyMDQxODIyMDhaFw0yNjAyMDMxODI3MDhaMDMxMTAvBgNV
BAMTKDM5NjNCREM0MjgzQUUzQjVDNkMwRjM5QzZCOEE0MzhDMTUxQjEyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTnzdzx5cBdT8X6DtuM4lJDv+
RkRrtS0g7/K12PyZrPyHM5a3ulCaxxSfTvqfO/X7YEQNdhC1XomdMxvG7nKuTeGA
kTfZMUHp/xnfaQqeeIYOzCl4ldi78kgdyE0DmHjQacd+JUXPk/7wLQimoKgbM9wk
ahUr2VC44ZUbIHLceD0KmIM+BuDtVDJ90OFXWW8Z+x3IDAEd9g1IX8SoSOGAY+/x
y2EWJPRFE197fV/rybFzgnP8FIrNdPVD+Yhu8/JkFq2hbA8XOVXlZiE6Uc5MwMGN
QUIgpJxyLR6I3xHU38VzolxbXD/0l0H5/4eww5QszfIlbZclxEbUKnRh8cxxAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUOWO9xCg647XGwPOca4pDjBUbErAwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMTM5MzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOq
0sAwDQYJKoZIhvcNAQELBQADggEBALsY45Q1AEfoAAW0sA19zapTEyks1ZfgXWt8
Gq4rZxBnnQHFtE5/LFonMnC3I5klSs5jnco5y0s6NH3v89a20l9VR+y8BCkKHvyJ
O7bwTkQghlJYk07ubG3vdURWPG6KWjIlTFzEEDaqHHO96UGo2QP9x4zNN9WnQQ/r
hY9H6KKoQNeBsxq0C1mucYOhIdGlgBHBU8wrB4ETkhf++RlEzbGse/PorYpxO/p+
b0Fndkc2Yv+2wYcZYWjiB9vOgUcByHi6izuANOCu5WAlO4m/ms6pcvC8rZ158LRR
ecSbYGe1mQfsV25VEt2V4qkmSw7Uk9N851OmTTSyH4bznsJgwIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:25 2025 by rpki-client