Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
File:                     3133312e302e3133322e302f32322d3234203d3e20323730303732.roa (raw, json)
Hash identifier:          e9gcsbjO7Ar7WfvVLR66RNkHd/aoLqjlc66h3RjNPsw=
Subject key identifier:   93:0A:B4:C5:41:87:07:F3:4D:A9:41:04:37:44:3F:CE:B2:FC:62:AB
Certificate issuer:       /CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
Certificate serial:       4EFC0F6DD5997E6C8172EBFCF75A97FB39B265E6
Authority key identifier: A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
Signing time:             Tue 04 Feb 2025 18:22:03 +0000
ROA not before:           Tue 04 Feb 2025 18:17:03 +0000
ROA not after:            Tue 03 Feb 2026 18:22:03 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:0f:6d:d5:99:7e:6c:81:72:eb:fc:f7:5a:97:fb:39:b2:65:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
        Validity
            Not Before: Feb  4 18:17:03 2025 GMT
            Not After : Feb  3 18:22:03 2026 GMT
        Subject: CN=930AB4C5418707F34DA9410437443FCEB2FC62AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:2e:a2:d7:c5:67:34:cd:d5:3d:0d:f9:4b:
                    53:ab:9e:c0:53:26:2f:ba:96:fb:70:31:4a:f7:6a:
                    c1:0f:d6:18:e6:b7:97:d1:22:fb:6d:af:3e:5d:86:
                    28:be:9f:73:f3:30:23:e4:30:80:44:f4:37:e6:d4:
                    a8:2a:da:9e:68:98:7d:90:12:06:ec:4d:b0:2e:a5:
                    39:4b:9b:91:c3:19:54:45:14:a4:af:87:3d:05:b1:
                    e2:04:2c:f3:e6:f7:92:1a:d0:cc:b7:76:37:65:7a:
                    b4:3e:a3:e3:15:c0:3a:83:05:a3:53:a2:82:7f:8d:
                    74:1b:38:59:04:43:30:41:c2:4a:fd:b2:a0:d4:b6:
                    38:f6:8c:e1:48:83:80:04:29:c9:1c:a3:8f:24:71:
                    a1:55:16:e0:89:31:7c:b4:71:f4:ca:69:96:1f:92:
                    9d:0d:3b:eb:0d:93:f5:78:05:54:51:9e:68:36:04:
                    66:13:6a:6d:25:e2:f3:6f:ca:a5:65:19:e2:b0:03:
                    29:8f:de:41:3d:6b:66:52:fa:ea:69:89:e0:10:c1:
                    a9:6f:11:d4:18:91:c2:62:0f:7a:76:69:45:e6:98:
                    dd:99:a9:24:5b:0d:89:f3:1c:ac:f8:72:d5:a7:48:
                    29:7c:33:41:bb:ca:60:06:41:14:a4:b1:ba:78:9a:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:B4:C5:41:87:07:F3:4D:A9:41:04:37:44:3F:CE:B2:FC:62:AB
            X509v3 Authority Key Identifier:
                keyid:A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:ba:44:c1:db:a9:b9:28:cc:4e:72:e2:8f:f8:1a:df:da:
         7a:68:bd:38:ae:5f:a5:20:55:73:46:17:28:89:db:b2:cd:24:
         40:9b:f6:d7:f7:32:8c:63:9b:a9:e9:01:27:eb:68:61:3c:43:
         ea:d2:3f:89:39:5c:8e:9d:8d:18:fb:8b:74:1d:98:23:d7:8b:
         62:5f:eb:ba:15:ab:85:37:98:f0:5a:37:77:ca:92:fb:3a:7f:
         9f:d4:45:21:76:ed:2e:7b:a9:e6:c0:71:58:fd:6f:1c:78:de:
         d4:ef:1e:86:d0:43:a2:f3:e1:09:7b:72:6b:f0:a4:ec:4a:ef:
         86:3b:6b:a4:2c:88:fa:50:84:4e:00:93:bd:9a:bd:9e:8d:50:
         a0:70:12:97:8b:04:ad:88:5c:86:05:e1:ff:be:21:53:44:f2:
         52:72:e1:1e:b0:fd:2c:f8:93:cd:a0:9a:6f:d3:2b:d4:da:80:
         45:bb:f9:59:1b:e1:16:55:5a:75:81:c1:a6:9b:cc:a7:cf:3a:
         48:fb:6b:96:39:3c:92:26:e6:07:8b:e5:01:85:84:a8:13:96:
         07:56:2c:7c:67:c3:98:3e:f9:1d:bb:ea:89:da:f4:c3:f6:42:
         f1:f8:15:63:13:34:8e:b9:dd:d3:af:99:fb:84:34:4c:c2:8c:
         ae:00:12:93
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTvwPbdWZfmyBcuv891qX+zmyZeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ2NjM0OTc2MTM1REM3OUJCOUMzNkUyOTRGRUY1MEY0
RUQ1MDdCRDAeFw0yNTAyMDQxODE3MDNaFw0yNjAyMDMxODIyMDNaMDMxMTAvBgNV
BAMTKDkzMEFCNEM1NDE4NzA3RjM0REE5NDEwNDM3NDQzRkNFQjJGQzYyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ji6i18VnNM3VPQ35S1OrnsBT
Ji+6lvtwMUr3asEP1hjmt5fRIvttrz5dhii+n3PzMCPkMIBE9Dfm1Kgq2p5omH2Q
EgbsTbAupTlLm5HDGVRFFKSvhz0FseIELPPm95Ia0My3djdlerQ+o+MVwDqDBaNT
ooJ/jXQbOFkEQzBBwkr9sqDUtjj2jOFIg4AEKckco48kcaFVFuCJMXy0cfTKaZYf
kp0NO+sNk/V4BVRRnmg2BGYTam0l4vNvyqVlGeKwAymP3kE9a2ZS+uppieAQwalv
EdQYkcJiD3p2aUXmmN2ZqSRbDYnzHKz4ctWnSCl8M0G7ymAGQRSksbp4mqwlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUkwq0xUGHB/NNqUEEN0Q/zrL8YqswHwYDVR0j
BBgwFoAUpGY0l2E13Hm7nDbilP71D07VB70wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTIyMjgxRUJEQ0M2MTA5QzE1RjNCMUVFNDgzMjA1MkEw
Qjc3MzczMzMwMDA2M0NGOUZDMEI5QkQ5MkNFQzAxLzAvQTQ2NjM0OTc2MTM1REM3
OUJCOUMzNkUyOTRGRUY1MEY0RUQ1MDdCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDY2MzQ5NzYxMzVEQzc5QkI5
QzM2RTI5NEZFRjUwRjRFRDUwN0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTUyMjI4MUVCRENDNjEwOUMxNUYzQjFFRTQ4MzIwNTJBMEI3NzM3MzMz
MDAwNjNDRjlGQzBCOUJEOTJDRUMwMS8wLzMxMzMzMTJlMzAyZTMxMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoMAhDAN
BgkqhkiG9w0BAQsFAAOCAQEAP2u6RMHbqbkozE5y4o/4Gt/aemi9OK5fpSBVc0YX
KInbss0kQJv21/cyjGObqekBJ+toYTxD6tI/iTlcjp2NGPuLdB2YI9eLYl/ruhWr
hTeY8Fo3d8qS+zp/n9RFIXbtLnup5sBxWP1vHHje1O8ehtBDovPhCXtya/Ck7Erv
hjtrpCyI+lCETgCTvZq9no1QoHASl4sErYhchgXh/74hU0TyUnLhHrD9LPiTzaCa
b9Mr1NqARbv5WRvhFlVadYHBppvMp886SPtrljk8kibmB4vlAYWEqBOWB1YsfGfD
mD75Hbvqidr0w/ZC8fgVYxM0jrnd06+Z+4Q0TMKMrgASkw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client