Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa
File:                     3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          ZEbhKBr5MnzuzM31PkkDBOApFjDGvIVVB7XoXrpt32M=
Subject key identifier:   04:FA:ED:58:AD:DE:37:F1:6D:26:F8:09:D5:C1:4B:01:65:B4:2E:74
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       75AAE9BDBD8D99B2E1F658CCA80C7FB474A20088
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa
Signing time:             Fri 06 Dec 2024 18:45:00 +0000
ROA not before:           Fri 06 Dec 2024 18:40:00 +0000
ROA not after:            Fri 05 Dec 2025 18:45:00 +0000
asID:                     27768
IP address blocks:        177.251.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:aa:e9:bd:bd:8d:99:b2:e1:f6:58:cc:a8:0c:7f:b4:74:a2:00:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  6 18:40:00 2024 GMT
            Not After : Dec  5 18:45:00 2025 GMT
        Subject: CN=04FAED58ADDE37F16D26F809D5C14B0165B42E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:18:97:2b:05:75:1c:f2:8d:1e:18:bc:34:
                    64:20:bb:f4:24:c7:4a:53:77:33:87:cf:03:d0:cf:
                    56:e5:3b:e2:c4:95:d2:60:ba:69:de:87:c5:e6:7f:
                    b9:c2:3d:c6:10:9b:fe:60:fd:62:44:1d:56:4b:22:
                    34:0c:7c:51:a5:b1:20:0e:f2:8f:ef:f3:2d:e2:ce:
                    b9:ea:dc:6a:b1:49:44:89:68:de:94:1e:fb:11:24:
                    9f:71:79:97:0f:83:f2:f5:e7:cd:b5:2e:77:5f:22:
                    ad:fd:4e:46:30:c2:cf:ce:95:85:d2:45:6e:fb:05:
                    04:8d:3d:45:74:76:a0:5d:2a:36:28:44:39:16:58:
                    7e:09:cb:aa:95:ba:e8:ce:a8:04:47:df:34:a6:86:
                    d2:e9:8a:bf:36:0c:94:33:47:fc:73:b6:0b:fd:39:
                    e6:b8:0c:77:22:db:e1:dc:a0:7a:fc:08:9d:64:34:
                    13:f5:06:fa:59:c3:f0:5f:bd:62:99:5d:e2:4d:28:
                    f8:5a:c3:0a:20:1c:a4:67:1b:1d:f0:4a:f1:05:97:
                    37:3a:a6:e6:29:29:5a:0c:54:19:d7:29:2f:be:c7:
                    28:3a:1f:bc:00:6a:2f:44:c6:bd:44:bd:ef:80:47:
                    33:43:41:c3:78:f9:e7:67:29:1e:e4:d8:69:d0:c6:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FA:ED:58:AD:DE:37:F1:6D:26:F8:09:D5:C1:4B:01:65:B4:2E:74
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:31:cd:86:9a:de:43:5c:fe:89:8f:53:b7:2f:53:dd:87:
         59:0f:28:bc:8a:56:52:c2:77:fa:13:64:05:a2:e7:b2:ae:f3:
         f3:b2:ad:3b:b3:c9:bf:5d:07:90:af:46:f0:e1:1f:80:6e:41:
         64:fe:fa:48:71:13:ca:0a:ca:75:b7:f0:a6:7c:1b:8b:b7:7e:
         72:ea:c0:5d:70:89:4e:96:e9:75:03:aa:84:91:a9:8e:af:dd:
         fb:13:a7:5b:92:96:82:8a:37:a9:e7:18:98:7b:88:be:47:41:
         b2:f2:88:de:6e:14:88:4c:f3:5d:f7:5c:b9:80:4e:14:6d:f4:
         9f:4e:47:33:a8:e0:fc:5f:0a:fd:7d:6f:a0:cb:8d:50:25:54:
         c4:1b:2a:9a:fa:ce:9f:f7:39:fc:ec:d7:6d:f3:b3:f4:46:ac:
         e0:c2:a4:c9:5b:55:7e:1b:eb:ba:0c:f3:8f:46:e5:a4:5f:cd:
         ff:9a:9d:bf:c6:9a:78:d3:36:4f:de:78:b9:8c:3c:f6:ec:99:
         1d:a5:a8:c3:60:24:ed:9e:6e:96:01:ea:70:28:d3:4d:c1:f3:
         0d:e1:1c:90:6b:c9:c0:13:ff:d8:3d:f2:3e:34:6a:17:ae:9d:
         89:01:84:f3:90:26:c6:b1:8d:59:1d:b1:8f:2f:3a:26:70:38:
         50:7a:b3:eb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdarpvb2NmbLh9ljMqAx/tHSiAIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNDEyMDYxODQwMDBaFw0yNTEyMDUxODQ1MDBaMDMxMTAvBgNV
BAMTKDA0RkFFRDU4QURERTM3RjE2RDI2RjgwOUQ1QzE0QjAxNjVCNDJFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgRiXKwV1HPKNHhi8NGQgu/Qk
x0pTdzOHzwPQz1blO+LEldJgumneh8Xmf7nCPcYQm/5g/WJEHVZLIjQMfFGlsSAO
8o/v8y3izrnq3GqxSUSJaN6UHvsRJJ9xeZcPg/L15821LndfIq39TkYwws/OlYXS
RW77BQSNPUV0dqBdKjYoRDkWWH4Jy6qVuujOqARH3zSmhtLpir82DJQzR/xztgv9
Oea4DHci2+HcoHr8CJ1kNBP1BvpZw/BfvWKZXeJNKPhawwogHKRnGx3wSvEFlzc6
puYpKVoMVBnXKS++xyg6H7wAai9Exr1Eve+ARzNDQcN4+ednKR7k2GnQxpCBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBPrtWK3eN/FtJvgJ1cFLAWW0LnQwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMxMzczNzJlMzIzNTMxMmUzMjM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsfv+
MA0GCSqGSIb3DQEBCwUAA4IBAQCWzjHNhpreQ1z+iY9Tty9T3YdZDyi8ilZSwnf6
E2QFoueyrvPzsq07s8m/XQeQr0bw4R+AbkFk/vpIcRPKCsp1t/CmfBuLt35y6sBd
cIlOlul1A6qEkamOr937E6dbkpaCijep5xiYe4i+R0Gy8ojebhSITPNd91y5gE4U
bfSfTkczqOD8Xwr9fW+gy41QJVTEGyqa+s6f9zn87Ndt87P0RqzgwqTJW1V+G+u6
DPOPRuWkX83/mp2/xpp40zZP3ni5jDz27JkdpajDYCTtnm6WAepwKNNNwfMN4RyQ
a8nAE//YPfI+NGoXrp2JAYTzkCbGsY1ZHbGPLzomcDhQerPr
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:51 2025 by rpki-client