Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          9epet67tC9bI8FGwhsvmuCPl34PfgxA7hX8+PK/8f3k=
Subject key identifier:   5A:A9:DD:A9:92:9B:71:63:5D:0C:A7:C9:10:4E:3F:A4:38:1E:58:D1
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       79063BCEA7794C8AB12B594386F7F5DF6D5FC1F3
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 07 Dec 2024 23:50:01 +0000
ROA not before:           Sat 07 Dec 2024 23:45:01 +0000
ROA not after:            Sat 06 Dec 2025 23:50:01 +0000
asID:                     27768
IP address blocks:        201.217.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:06:3b:ce:a7:79:4c:8a:b1:2b:59:43:86:f7:f5:df:6d:5f:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  7 23:45:01 2024 GMT
            Not After : Dec  6 23:50:01 2025 GMT
        Subject: CN=5AA9DDA9929B71635D0CA7C9104E3FA4381E58D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:92:c7:f4:61:27:0d:09:2c:c8:8f:41:56:
                    7e:3f:13:dc:1f:84:08:d5:bc:0b:ea:e2:4c:73:b9:
                    88:18:30:f4:dd:67:d4:2b:a1:15:06:79:75:33:1e:
                    4b:c4:23:dc:3f:0f:1d:4a:37:84:5c:47:bf:2b:e8:
                    87:c4:c8:d4:99:23:b3:63:62:04:7d:60:fb:3d:fd:
                    db:e8:29:dd:61:99:cb:55:74:a6:7f:05:f2:b5:e6:
                    7f:55:50:09:e3:8a:f4:ef:3c:7f:58:d1:0b:65:59:
                    66:d1:24:f5:f2:d3:0a:66:c9:9b:70:fe:f4:2d:87:
                    f5:1a:13:c7:ac:8c:72:86:60:6e:1f:57:80:57:ec:
                    b5:0c:f5:28:55:56:b7:0e:06:83:ff:d3:42:bc:ab:
                    9d:1e:c6:b8:66:63:07:b0:05:fe:59:c1:bf:e5:6c:
                    de:c7:71:de:13:01:77:10:1a:c8:80:eb:c1:f2:af:
                    3e:57:66:01:00:ec:bb:33:0f:d5:7a:f4:78:b6:e8:
                    72:ea:8a:88:82:4e:2c:3b:37:34:c0:88:11:a6:8b:
                    3c:f1:44:ef:4d:47:00:59:8b:16:4a:60:d4:da:4b:
                    90:84:1d:05:0b:c9:b1:29:da:4a:93:75:6a:1e:72:
                    37:12:1f:46:23:10:f8:fd:ac:97:8f:9d:65:29:4a:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:DD:A9:92:9B:71:63:5D:0C:A7:C9:10:4E:3F:A4:38:1E:58:D1
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:47:13:c7:bd:88:66:6d:17:4e:e4:50:58:24:72:37:55:2f:
         bb:ed:b9:f9:55:41:81:cd:de:65:8b:41:32:27:c8:48:6c:dc:
         29:4c:bb:cd:fc:67:df:f5:3e:fd:ac:72:bc:61:31:66:f4:84:
         b1:15:20:48:30:75:28:27:5f:e8:e0:07:67:63:19:1c:7b:a1:
         9c:e2:7f:43:c5:3f:1d:0d:fb:76:94:c6:2c:8e:e3:3c:86:16:
         d7:5d:99:91:f7:a4:2d:41:0d:9e:f0:94:67:a0:bd:39:27:5e:
         f3:9f:20:ba:4f:2f:68:f3:05:ef:01:d1:51:82:09:61:2c:6a:
         63:99:4a:f1:54:ad:b7:a4:bd:de:cd:47:22:ef:23:b7:2a:a8:
         97:b1:80:59:a2:cd:bd:5b:92:72:6c:c8:29:5b:d3:13:8f:28:
         eb:4e:42:95:02:3d:2d:44:98:2c:fa:be:02:8b:cd:be:75:b9:
         67:d7:de:45:da:ef:1b:1b:9a:e0:67:64:fe:cc:76:c4:d0:48:
         3f:cb:67:fe:a0:9f:d2:99:3b:8a:1b:2d:72:c8:38:17:a1:1d:
         5a:72:5d:8a:07:be:5e:1c:4d:4e:6b:72:76:26:b8:d7:c4:61:
         bd:bd:0f:79:95:cd:7c:e5:d6:0b:f9:69:cf:e7:dc:2a:c6:ed:
         c8:89:2d:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeQY7zqd5TIqxK1lDhvf1321fwfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNDEyMDcyMzQ1MDFaFw0yNTEyMDYyMzUwMDFaMDMxMTAvBgNV
BAMTKDVBQTlEREE5OTI5QjcxNjM1RDBDQTdDOTEwNEUzRkE0MzgxRTU4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvZLH9GEnDQksyI9BVn4/E9wf
hAjVvAvq4kxzuYgYMPTdZ9QroRUGeXUzHkvEI9w/Dx1KN4RcR78r6IfEyNSZI7Nj
YgR9YPs9/dvoKd1hmctVdKZ/BfK15n9VUAnjivTvPH9Y0QtlWWbRJPXy0wpmyZtw
/vQth/UaE8esjHKGYG4fV4BX7LUM9ShVVrcOBoP/00K8q50exrhmYwewBf5Zwb/l
bN7Hcd4TAXcQGsiA68Hyrz5XZgEA7LszD9V69Hi26HLqioiCTiw7NzTAiBGmizzx
RO9NRwBZixZKYNTaS5CEHQULybEp2kqTdWoecjcSH0YjEPj9rJePnWUpSn8bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWqndqZKbcWNdDKfJEE4/pDgeWNEwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzNDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZLDAN
BgkqhkiG9w0BAQsFAAOCAQEAQkcTx72IZm0XTuRQWCRyN1Uvu+25+VVBgc3eZYtB
MifISGzcKUy7zfxn3/U+/axyvGExZvSEsRUgSDB1KCdf6OAHZ2MZHHuhnOJ/Q8U/
HQ37dpTGLI7jPIYW112ZkfekLUENnvCUZ6C9OSde858guk8vaPMF7wHRUYIJYSxq
Y5lK8VStt6S93s1HIu8jtyqol7GAWaLNvVuScmzIKVvTE48o605ClQI9LUSYLPq+
AovNvnW5Z9feRdrvGxua4Gdk/sx2xNBIP8tn/qCf0pk7ihstcsg4F6EdWnJdige+
XhxNTmtydia418Rhvb0PeZXNfOXWC/lpz+fcKsbtyIktOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:25 2025 by rpki-client