Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa
File:                     3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa (raw, json)
Hash identifier:          YjnJOi7r31IACAzvE8lna2SoiIEour6XGGlOzdIxNic=
Subject key identifier:   1A:32:BD:76:67:11:49:A3:D5:F6:79:6E:8E:A9:3C:50:7B:2E:95:A7
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       5DB1336808F261500B9D16DED7E3E1ADDD221D5B
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa
Signing time:             Thu 20 Feb 2025 16:10:24 +0000
ROA not before:           Thu 20 Feb 2025 16:05:24 +0000
ROA not after:            Thu 19 Feb 2026 16:10:24 +0000
asID:                     264774
IP address blocks:        168.197.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b1:33:68:08:f2:61:50:0b:9d:16:de:d7:e3:e1:ad:dd:22:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Feb 20 16:05:24 2025 GMT
            Not After : Feb 19 16:10:24 2026 GMT
        Subject: CN=1A32BD76671149A3D5F6796E8EA93C507B2E95A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:a7:ee:d8:f4:26:ee:76:5e:4c:b7:e5:0b:
                    2b:53:6c:22:40:99:cb:d3:2f:31:d2:c5:2d:c0:c9:
                    f5:3d:8c:e8:57:fe:15:66:b7:c9:eb:17:63:41:da:
                    fc:20:59:c1:7d:86:cb:69:3b:1b:92:81:ee:80:49:
                    77:7f:ee:20:fd:da:53:0e:6a:54:53:28:d8:b0:d5:
                    dd:f3:c7:6b:f2:e8:24:a6:02:a6:6b:ff:0b:fb:d2:
                    a5:95:45:bc:40:cd:69:37:26:e1:ab:41:b7:ae:67:
                    c6:31:97:3d:9a:d5:f8:65:97:a9:0a:c7:5d:2c:cc:
                    ec:45:f1:7b:09:3a:46:24:4f:35:74:67:fc:56:23:
                    21:dc:50:b7:d0:08:98:14:7f:71:48:37:c0:37:85:
                    4b:0b:b0:ff:70:f0:cc:57:31:ed:a4:0d:c2:66:24:
                    3e:68:60:45:0a:68:b9:c4:24:07:87:8a:19:bf:bc:
                    ae:fb:fc:3e:88:35:4f:f8:ed:e5:3c:91:a7:ac:2b:
                    0f:f8:b3:ae:dc:a9:3c:a7:8c:f5:dc:92:f5:7b:c4:
                    a0:a9:dc:b8:73:ea:4c:96:a0:fb:db:c5:48:55:c9:
                    0d:f9:57:b7:2e:56:95:4d:24:f4:42:c3:00:00:80:
                    40:8a:d1:a8:45:d3:c5:3a:65:eb:d7:90:38:c8:d1:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:BD:76:67:11:49:A3:D5:F6:79:6E:8E:A9:3C:50:7B:2E:95:A7
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:88:c3:b9:ca:ed:1d:d6:eb:c8:dc:b4:52:78:d5:66:7f:
         dd:75:f5:ba:69:96:1a:cf:52:59:17:55:c5:e4:b7:43:da:f6:
         fe:ea:ca:21:41:02:66:09:17:96:e1:da:3d:ca:be:e0:ac:18:
         47:3f:65:c3:68:8f:be:12:5a:fd:92:31:ee:eb:1b:97:91:a9:
         ba:e3:47:5e:a9:e3:c3:36:6c:5f:ae:5e:7f:2d:dd:ac:54:db:
         43:dc:2a:2a:31:23:ef:5d:c2:37:27:48:8a:fe:6a:74:41:e5:
         02:bd:b3:d5:0c:6d:54:a8:2d:4e:e5:b5:82:ed:47:e8:b4:91:
         c3:9b:b1:6e:84:25:3d:88:f0:6e:ed:40:c7:30:41:ef:a5:74:
         03:f6:b7:74:4e:68:7b:71:57:0d:e4:88:ec:9e:e3:13:4e:50:
         90:e0:1f:09:31:75:d9:16:09:cd:ca:64:e7:1e:5e:91:04:49:
         eb:05:e8:57:5f:48:3a:79:aa:a2:79:6d:6c:47:1d:06:3c:f0:
         89:77:0b:1c:9c:d4:ed:35:d3:cb:e8:e4:ef:d2:03:1d:bb:8a:
         9d:55:37:75:c7:86:a2:72:b6:25:67:ff:e5:dd:84:51:aa:e6:
         6b:37:07:34:5a:32:00:7d:df:ce:31:df:d2:38:e8:d1:a2:cc:
         85:35:7c:e7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXbEzaAjyYVALnRbe1+Phrd0iHVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUxNEE3RDYwOEM0Q0ZBMzQxODVCMUY5Q0VDRENENUQy
MzREMTE5RDAeFw0yNTAyMjAxNjA1MjRaFw0yNjAyMTkxNjEwMjRaMDMxMTAvBgNV
BAMTKDFBMzJCRDc2NjcxMTQ5QTNENUY2Nzk2RThFQTkzQzUwN0IyRTk1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18qfu2PQm7nZeTLflCytTbCJA
mcvTLzHSxS3AyfU9jOhX/hVmt8nrF2NB2vwgWcF9hstpOxuSge6ASXd/7iD92lMO
alRTKNiw1d3zx2vy6CSmAqZr/wv70qWVRbxAzWk3JuGrQbeuZ8Yxlz2a1fhll6kK
x10szOxF8XsJOkYkTzV0Z/xWIyHcULfQCJgUf3FIN8A3hUsLsP9w8MxXMe2kDcJm
JD5oYEUKaLnEJAeHihm/vK77/D6INU/47eU8kaesKw/4s67cqTynjPXckvV7xKCp
3Lhz6kyWoPvbxUhVyQ35V7cuVpVNJPRCwwAAgECK0ahF08U6ZevXkDjI0c07AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUGjK9dmcRSaPV9nlujqk8UHsulacwHwYDVR0j
BBgwFoAUlRSn1gjEz6NBhbH5zs3NXSNNEZ0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTA0RTZCN0I4RDJFMDA4NTBGODhFMzJFMjQyM0I0Mzc5
MDVEOEZBQjE2NkExNzkzREJDNzA3NzcyOTU5RDUyLzAvOTUxNEE3RDYwOEM0Q0ZB
MzQxODVCMUY5Q0VDRENENUQyMzREMTE5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTE0QTdENjA4QzRDRkEzNDE4
NUIxRjlDRUNEQ0Q1RDIzNEQxMTlELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkwNEU2QjdCOEQyRTAwODUwRjg4RTMyRTI0MjNCNDM3OTA1RDhGQUIx
NjZBMTc5M0RCQzcwNzc3Mjk1OUQ1Mi8wLzMxMzYzODJlMzEzOTM3MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQzNzM3MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
xcgwDQYJKoZIhvcNAQELBQADggEBAIHQiMO5yu0d1uvI3LRSeNVmf9119bpplhrP
UlkXVcXkt0Pa9v7qyiFBAmYJF5bh2j3KvuCsGEc/ZcNoj74SWv2SMe7rG5eRqbrj
R16p48M2bF+uXn8t3axU20PcKioxI+9dwjcnSIr+anRB5QK9s9UMbVSoLU7ltYLt
R+i0kcObsW6EJT2I8G7tQMcwQe+ldAP2t3ROaHtxVw3kiOye4xNOUJDgHwkxddkW
Cc3KZOceXpEESesF6FdfSDp5qqJ5bWxHHQY88Il3Cxyc1O0108vo5O/SAx27ip1V
N3XHhqJytiVn/+XdhFGq5ms3BzRaMgB9384x39I46NGizIU1fOc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:01 2025 by rpki-client