Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa
File:                     3133312e3235352e31362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          zJ66OvqaH08oYrUtrEtKSsj1RsoqHZqQeOM1Rq8PRWY=
Subject key identifier:   F2:BF:39:D0:20:58:4C:BA:FA:F6:87:46:8C:7A:27:D5:FC:76:29:18
Certificate issuer:       /CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
Certificate serial:       308A930278B4BB504D9AA9110474EAC46FD30114
Authority key identifier: 7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:23:02 +0000
ROA not before:           Tue 04 Feb 2025 18:18:02 +0000
ROA not after:            Tue 03 Feb 2026 18:23:02 +0000
asID:                     52468
IP address blocks:        131.255.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8a:93:02:78:b4:bb:50:4d:9a:a9:11:04:74:ea:c4:6f:d3:01:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
        Validity
            Not Before: Feb  4 18:18:02 2025 GMT
            Not After : Feb  3 18:23:02 2026 GMT
        Subject: CN=F2BF39D020584CBAFAF687468C7A27D5FC762918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:37:38:61:2f:c1:21:01:a7:a6:37:50:dd:
                    43:44:81:8f:eb:0f:df:97:24:43:f8:a2:1a:66:62:
                    26:c5:ad:c7:11:c3:16:51:a3:76:df:09:cb:9e:59:
                    fa:08:ee:c5:eb:4a:7b:16:87:28:17:93:93:92:d6:
                    18:dc:d2:23:79:f1:c6:7f:ae:62:20:ba:55:c1:1e:
                    64:05:3b:50:56:3d:18:73:37:40:d8:86:09:de:63:
                    a5:ef:b3:c2:d7:ca:8e:3b:47:57:bc:da:7b:cd:d0:
                    f8:57:57:61:3a:41:d3:85:72:48:8c:90:e3:1c:82:
                    89:6a:89:6b:1c:e3:82:1d:28:8c:07:a7:2c:89:69:
                    aa:9c:c4:28:b4:f6:5e:5f:4d:ca:11:22:fe:7f:98:
                    7d:76:81:2a:c8:a2:68:c4:31:a7:d3:e6:aa:61:1b:
                    af:72:7d:77:e4:27:8a:d5:6f:b9:79:74:0d:f1:f9:
                    3f:c5:72:6e:13:bb:1d:39:21:15:37:bf:8d:43:de:
                    07:5a:ba:fd:1d:91:fb:f7:b7:d9:4c:25:1a:8f:93:
                    f8:8f:47:58:42:9e:7d:0a:17:63:8c:26:de:46:6b:
                    18:22:c1:a0:79:fc:2d:8b:20:75:92:5a:01:5e:a0:
                    0f:87:91:4a:ad:fa:4c:3c:48:70:63:59:c4:07:8b:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:39:D0:20:58:4C:BA:FA:F6:87:46:8C:7A:27:D5:FC:76:29:18
            X509v3 Authority Key Identifier:
                keyid:7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:73:9a:a8:6b:89:ab:03:9a:f7:9e:9b:ef:37:a6:c2:35:
         4e:ed:32:c2:b7:12:e1:47:1a:5e:91:17:25:20:94:0e:e9:3f:
         cc:a2:a4:88:21:2e:f9:8d:e4:54:f1:67:14:34:30:a6:b3:b5:
         27:27:38:7d:6a:d8:e1:36:aa:a3:83:e1:21:95:a5:c7:9e:e6:
         38:98:a6:5d:04:3b:95:45:4f:db:2b:b1:0b:8b:02:91:71:0a:
         4a:a6:8d:22:b7:cc:90:56:14:ac:4f:17:d8:5e:a7:b1:e1:ab:
         36:32:56:e7:2d:57:c8:8e:ba:c9:1e:be:6c:02:f5:50:68:bc:
         30:b9:e1:a7:e6:df:53:9a:60:15:fc:d9:f8:2d:54:c4:3c:f6:
         54:11:30:90:3f:f8:e4:bf:db:31:3d:55:c1:7b:00:e6:75:c6:
         88:14:c5:cf:49:dd:1d:08:40:44:bb:20:fd:1f:1a:b4:1e:4a:
         e4:94:c8:a6:5c:40:a3:be:2f:66:39:07:ff:4f:c7:e5:a1:d6:
         c3:0f:67:00:f8:48:28:75:6c:d2:d6:f8:72:3e:5f:e6:be:27:
         92:8c:1d:ef:fb:82:7f:48:a1:c7:bf:f4:6b:fd:16:1e:c8:fe:
         a6:bd:ed:07:3c:7c:de:08:7d:09:14:8d:31:4b:7d:68:75:c8:
         f3:4a:c3:d9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMIqTAni0u1BNmqkRBHTqxG/TARQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCRTdCNkZERjJDOTJGOUY0QTQ5RUI0RUQ4REZBQzNC
NUEwRTRCRTAeFw0yNTAyMDQxODE4MDJaFw0yNjAyMDMxODIzMDJaMDMxMTAvBgNV
BAMTKEYyQkYzOUQwMjA1ODRDQkFGQUY2ODc0NjhDN0EyN0Q1RkM3NjI5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOMzc4YS/BIQGnpjdQ3UNEgY/r
D9+XJEP4ohpmYibFrccRwxZRo3bfCcueWfoI7sXrSnsWhygXk5OS1hjc0iN58cZ/
rmIgulXBHmQFO1BWPRhzN0DYhgneY6Xvs8LXyo47R1e82nvN0PhXV2E6QdOFckiM
kOMcgolqiWsc44IdKIwHpyyJaaqcxCi09l5fTcoRIv5/mH12gSrIomjEMafT5qph
G69yfXfkJ4rVb7l5dA3x+T/Fcm4Tux05IRU3v41D3gdauv0dkfv3t9lMJRqPk/iP
R1hCnn0KF2OMJt5GaxgiwaB5/C2LIHWSWgFeoA+HkUqt+kw8SHBjWcQHi0oHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8r850CBYTLr69odGjHon1fx2KRgwHwYDVR0j
BBgwFoAUfr57b98skvn0pJ607Y36w7Wg5L4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OEYzMDFDMjZEQUY1NzBFRjNDNzk3MUQ4N0MxQjNBMDM4
RUVENzQ4RTFGRjQ2ODhGMUYxMjRGRDA5NUU0RDQxLzAvN0VCRTdCNkZERjJDOTJG
OUY0QTQ5RUI0RUQ4REZBQzNCNUEwRTRCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RUJFN0I2RkRGMkM5MkY5RjRB
NDlFQjRFRDhERkFDM0I1QTBFNEJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOThGMzAxQzI2REFGNTcwRUYzQzc5NzFEODdDMUIzQTAzOEVFRDc0OEUx
RkY0Njg4RjFGMTI0RkQwOTVFNEQ0MS8wLzMxMzMzMTJlMzIzNTM1MmUzMTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/EDAN
BgkqhkiG9w0BAQsFAAOCAQEAdEpzmqhriasDmveem+83psI1Tu0ywrcS4UcaXpEX
JSCUDuk/zKKkiCEu+Y3kVPFnFDQwprO1Jyc4fWrY4Taqo4PhIZWlx57mOJimXQQ7
lUVP2yuxC4sCkXEKSqaNIrfMkFYUrE8X2F6nseGrNjJW5y1XyI66yR6+bAL1UGi8
MLnhp+bfU5pgFfzZ+C1UxDz2VBEwkD/45L/bMT1VwXsA5nXGiBTFz0ndHQhARLsg
/R8atB5K5JTIplxAo74vZjkH/0/H5aHWww9nAPhIKHVs0tb4cj5f5r4nkowd7/uC
f0ihx7/0a/0WHsj+pr3tBzx83gh9CRSNMUt9aHXI80rD2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:11 2025 by rpki-client