Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa
File:                     3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa (raw, json)
Hash identifier:          nF8lEYc89smacmzOUjveUdUXxDYjNtOV9at5fKYutYE=
Subject key identifier:   7D:D4:83:EF:EA:A4:5B:30:E0:A0:D0:B6:B3:B8:A4:43:9D:7F:25:0C
Certificate issuer:       /CN=8494B3BB1D3F55ED9ABF93969BA0B295194553C0
Certificate serial:       778E3668DFCF21F613A4C011660C10F93897A6AE
Authority key identifier: 84:94:B3:BB:1D:3F:55:ED:9A:BF:93:96:9B:A0:B2:95:19:45:53:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa
Signing time:             Tue 04 Feb 2025 18:38:42 +0000
ROA not before:           Tue 04 Feb 2025 18:33:42 +0000
ROA not after:            Tue 03 Feb 2026 18:38:42 +0000
asID:                     272963
IP address blocks:        206.15.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:36:68:df:cf:21:f6:13:a4:c0:11:66:0c:10:f9:38:97:a6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8494B3BB1D3F55ED9ABF93969BA0B295194553C0
        Validity
            Not Before: Feb  4 18:33:42 2025 GMT
            Not After : Feb  3 18:38:42 2026 GMT
        Subject: CN=7DD483EFEAA45B30E0A0D0B6B3B8A4439D7F250C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:4b:41:da:4c:64:ee:7c:98:6e:3f:54:59:
                    91:b5:b5:ff:ce:c7:bd:f7:c3:45:4b:21:87:d9:f6:
                    8f:3b:fb:1e:e0:bc:f1:66:82:dd:d7:68:98:18:dc:
                    9b:7b:f6:25:ab:a2:6b:69:25:c8:a0:98:46:89:4d:
                    3d:b9:d7:3b:75:7f:4d:7c:b6:68:65:73:df:f3:8f:
                    65:76:d3:84:20:5d:7d:13:f7:bd:ef:a9:81:0a:1b:
                    5f:66:21:40:bf:c6:0c:8f:5a:ab:10:8f:14:c1:64:
                    a2:c5:05:96:13:77:93:eb:9b:3d:37:4d:13:db:40:
                    79:53:51:d9:ef:a1:3a:ec:51:b0:3e:9e:a4:a0:17:
                    af:aa:ce:3c:60:60:7d:ec:c1:bb:41:2d:53:b7:ab:
                    56:20:d1:f6:3c:83:06:30:11:28:0d:11:fd:67:2b:
                    7a:d2:73:75:6c:fb:96:6b:c0:c7:d5:73:9e:34:65:
                    e2:6a:8f:2c:9d:1f:46:f3:68:a0:41:4d:d7:16:70:
                    2e:1d:00:ca:8b:be:9f:5d:3e:3b:75:8b:e3:6e:20:
                    70:a5:45:e1:73:2e:39:5e:1b:fa:37:fd:5d:c5:85:
                    78:1a:c5:b5:f6:82:ca:71:fb:d8:d3:1c:97:e9:79:
                    0f:5d:a3:6d:87:82:66:8b:95:b7:a8:fc:85:38:39:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:83:EF:EA:A4:5B:30:E0:A0:D0:B6:B3:B8:A4:43:9D:7F:25:0C
            X509v3 Authority Key Identifier:
                keyid:84:94:B3:BB:1D:3F:55:ED:9A:BF:93:96:9B:A0:B2:95:19:45:53:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:2e:d0:b5:5c:fc:13:af:99:31:c1:da:da:22:dc:d1:03:eb:
         32:7a:cf:82:23:7b:9d:c0:dc:57:8e:fb:37:aa:9b:bc:c9:ef:
         a0:b6:13:19:10:08:66:f8:35:13:ad:f0:4f:2d:79:b1:42:64:
         2e:3c:92:37:e5:e4:a4:d5:ed:14:02:17:8a:5d:d1:38:28:a0:
         d1:c0:0e:4e:6d:4e:8e:c6:38:56:b5:90:47:1a:43:f7:74:36:
         e4:60:b2:1b:3e:c7:89:5c:e2:bd:bd:13:5b:cb:02:dd:2f:1c:
         54:af:93:71:43:b7:44:6d:4a:43:db:2b:b4:6e:d6:79:f8:c0:
         a5:b4:ad:36:45:66:26:ac:72:bd:8d:37:c5:e6:96:20:a1:3c:
         4e:de:dc:06:d8:90:5b:87:27:44:56:33:75:56:f4:4d:96:a4:
         8d:09:ee:4d:6b:dc:66:6f:5c:ad:ed:8a:30:e9:33:1a:34:04:
         3d:b4:86:44:1f:fc:1e:05:30:7d:5a:c3:13:39:85:11:8b:99:
         38:61:c3:6d:6f:a5:18:95:82:84:87:54:b4:1b:8d:e6:95:af:
         b3:52:c5:d1:64:75:25:75:9a:4b:70:27:0d:46:be:6b:95:55:
         2c:e5:05:55:17:4a:6f:ee:6a:54:15:a2:95:2d:47:88:bd:b8:
         1d:29:a2:72
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd442aN/PIfYTpMARZgwQ+TiXpq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ5NEIzQkIxRDNGNTVFRDlBQkY5Mzk2OUJBMEIyOTUx
OTQ1NTNDMDAeFw0yNTAyMDQxODMzNDJaFw0yNjAyMDMxODM4NDJaMDMxMTAvBgNV
BAMTKDdERDQ4M0VGRUFBNDVCMzBFMEEwRDBCNkIzQjhBNDQzOUQ3RjI1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g0tB2kxk7nyYbj9UWZG1tf/O
x733w0VLIYfZ9o87+x7gvPFmgt3XaJgY3Jt79iWromtpJcigmEaJTT251zt1f018
tmhlc9/zj2V204QgXX0T973vqYEKG19mIUC/xgyPWqsQjxTBZKLFBZYTd5Prmz03
TRPbQHlTUdnvoTrsUbA+nqSgF6+qzjxgYH3swbtBLVO3q1Yg0fY8gwYwESgNEf1n
K3rSc3Vs+5ZrwMfVc540ZeJqjyydH0bzaKBBTdcWcC4dAMqLvp9dPjt1i+NuIHCl
ReFzLjleG/o3/V3FhXgaxbX2gspx+9jTHJfpeQ9do22HgmaLlbeo/IU4OeJ7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfdSD7+qkWzDgoNC2s7ikQ51/JQwwHwYDVR0j
BBgwFoAUhJSzux0/Ve2av5OWm6CylRlFU8AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QTEzRjI4MzlFNkZEOEUxRjU5QTI5NjZFRkVFNTEwQTU2
NDQ0ODAxRjNDNUE5RDVBMkVFMzFFM0M4ODk1QUUxLzAvODQ5NEIzQkIxRDNGNTVF
RDlBQkY5Mzk2OUJBMEIyOTUxOTQ1NTNDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDk0QjNCQjFEM0Y1NUVEOUFC
RjkzOTY5QkEwQjI5NTE5NDU1M0MwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUExM0YyODM5RTZGRDhFMUY1OUEyOTY2RUZFRTUxMEE1NjQ0NDgwMUYz
QzVBOUQ1QTJFRTMxRTNDODg5NUFFMS8wLzMyMzAzNjJlMzEzNTJlMzEzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzg+A
MA0GCSqGSIb3DQEBCwUAA4IBAQDpLtC1XPwTr5kxwdraItzRA+syes+CI3udwNxX
jvs3qpu8ye+gthMZEAhm+DUTrfBPLXmxQmQuPJI35eSk1e0UAheKXdE4KKDRwA5O
bU6OxjhWtZBHGkP3dDbkYLIbPseJXOK9vRNbywLdLxxUr5NxQ7dEbUpD2yu0btZ5
+MCltK02RWYmrHK9jTfF5pYgoTxO3twG2JBbhydEVjN1VvRNlqSNCe5Na9xmb1yt
7Yow6TMaNAQ9tIZEH/weBTB9WsMTOYURi5k4YcNtb6UYlYKEh1S0G43mla+zUsXR
ZHUldZpLcCcNRr5rlVUs5QVVF0pv7mpUFaKVLUeIvbgdKaJy
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:39 2025 by rpki-client