Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203138373437.roa
File:                     3230312e3133302e31362e302f32322d3232203d3e203138373437.roa (raw, json)
Hash identifier:          aCEuWPwxzM5miQ6J66DZuLEoJ9AwlqmH6ztDrGFWzIE=
Subject key identifier:   1A:2E:66:F0:46:27:EF:8B:D9:77:E8:13:92:C1:3B:7E:77:64:C3:D4
Certificate issuer:       /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
Certificate serial:       08924E4CB4E6C99A8CDEE323537EBF55327E7DB0
Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203138373437.roa
Signing time:             Thu 13 Mar 2025 23:11:47 +0000
ROA not before:           Thu 13 Mar 2025 23:06:47 +0000
ROA not after:            Thu 12 Mar 2026 23:11:47 +0000
asID:                     18747
IP address blocks:        201.130.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:4e:4c:b4:e6:c9:9a:8c:de:e3:23:53:7e:bf:55:32:7e:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
        Validity
            Not Before: Mar 13 23:06:47 2025 GMT
            Not After : Mar 12 23:11:47 2026 GMT
        Subject: CN=1A2E66F04627EF8BD977E81392C13B7E7764C3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:b0:ba:1f:32:68:72:df:66:2b:60:6d:6d:
                    1a:51:92:0c:fd:4f:f1:2f:7f:0e:2d:c2:dd:cf:97:
                    de:98:a0:6c:6f:08:38:9e:49:a5:b2:9f:7c:32:cb:
                    0f:37:9c:c5:93:08:75:2b:6e:76:b4:4b:d5:21:4e:
                    1a:a0:9f:1f:b7:31:f8:e2:ed:4b:53:26:fe:bb:a5:
                    f5:92:15:71:bd:3c:b9:98:88:3b:43:95:cd:c0:b3:
                    6e:28:15:2f:5c:43:af:78:e5:fd:0a:42:6b:76:93:
                    d0:fd:d8:65:66:17:ac:63:9e:f1:9c:e3:87:13:3c:
                    99:fe:9c:7e:16:de:9b:8c:cf:17:d5:51:ab:a9:2c:
                    07:70:cc:5b:b2:3b:0c:3e:6d:a7:7c:1b:36:37:3d:
                    26:c7:1a:ce:f8:8d:7d:c9:4d:8c:23:b9:89:c4:98:
                    8d:04:23:1d:11:70:0a:c3:6b:d3:a2:a3:13:b8:b5:
                    6d:3d:11:05:00:1c:8b:e8:5f:0d:e2:db:81:a6:08:
                    7e:ea:de:71:eb:1d:a0:fe:d5:3f:d8:be:96:b4:47:
                    d6:15:f8:a6:7f:59:2a:a7:55:91:23:90:02:c2:c9:
                    06:17:8d:0a:9f:d5:b5:44:8d:7a:8c:53:b0:83:56:
                    dd:2b:ba:f8:db:63:22:e2:40:68:4c:13:00:e3:be:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:66:F0:46:27:EF:8B:D9:77:E8:13:92:C1:3B:7E:77:64:C3:D4
            X509v3 Authority Key Identifier:
                keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:60:31:db:29:7e:1e:e7:46:8d:ae:63:74:8c:46:94:35:c0:
         cc:af:72:a1:96:d5:b8:ba:da:41:73:c4:63:8c:44:91:bf:24:
         d8:0a:b2:35:4b:d9:9d:45:a1:55:fe:4d:1f:52:b9:2d:e5:b9:
         69:4d:29:bd:ad:e3:5a:1b:4c:25:06:f6:3d:70:f4:4d:ec:9f:
         ec:7b:c6:c2:3d:89:86:9f:41:12:c9:32:cd:88:1f:c1:9e:7e:
         f1:09:84:fa:d2:ad:ee:02:62:a1:6d:04:92:3c:6c:ac:54:eb:
         70:d3:68:98:c5:c8:2a:c9:68:f3:c6:30:b8:6d:ce:9e:8e:08:
         56:60:5a:99:e8:11:94:8f:37:08:14:cb:2c:ad:b2:50:e4:ea:
         d3:3e:7c:fe:de:c6:be:c5:34:23:96:37:3e:ea:d6:b6:1c:74:
         da:26:69:b7:7d:95:12:62:48:78:79:71:38:7f:3c:f1:a3:44:
         20:d4:75:80:66:df:5f:d3:79:d1:4e:bc:5a:36:9d:aa:9f:60:
         93:fc:5b:b7:6f:6a:22:c8:03:af:8f:bc:1a:7b:63:20:2f:93:
         a7:32:a0:53:92:2d:9c:e1:08:bb:f3:cb:d2:54:b8:4a:6e:08:
         88:e1:a8:50:65:74:69:39:f6:35:4c:8f:0b:50:04:ae:a1:52:
         6e:89:80:b5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCJJOTLTmyZqM3uMjU36/VTJ+fbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M5NEFDREM0Mzg2NTlGMjBEMkFDOENEMzk5MzRBMUND
MEVGRTNBMDAeFw0yNTAzMTMyMzA2NDdaFw0yNjAzMTIyMzExNDdaMDMxMTAvBgNV
BAMTKDFBMkU2NkYwNDYyN0VGOEJEOTc3RTgxMzkyQzEzQjdFNzc2NEMzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmO7C6HzJoct9mK2BtbRpRkgz9
T/Evfw4twt3Pl96YoGxvCDieSaWyn3wyyw83nMWTCHUrbna0S9UhThqgnx+3Mfji
7UtTJv67pfWSFXG9PLmYiDtDlc3As24oFS9cQ6945f0KQmt2k9D92GVmF6xjnvGc
44cTPJn+nH4W3puMzxfVUaupLAdwzFuyOww+bad8GzY3PSbHGs74jX3JTYwjuYnE
mI0EIx0RcArDa9OioxO4tW09EQUAHIvoXw3i24GmCH7q3nHrHaD+1T/Yvpa0R9YV
+KZ/WSqnVZEjkALCyQYXjQqf1bVEjXqMU7CDVt0ruvjbYyLiQGhMEwDjvtS9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGi5m8EYn74vZd+gTksE7fndkw9QwHwYDVR0j
BBgwFoAUPJSs3EOGWfINKsjNOZNKHMDv46AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BODIzMUE0N0EyRjA4MkJDNzZCQjlDRUU5RTNGNUVBQjg1
MkZDRTY1QzRGNzQ0N0MyNDgxOUJDMDQwOEU2Qjc2LzAvM0M5NEFDREM0Mzg2NTlG
MjBEMkFDOENEMzk5MzRBMUNDMEVGRTNBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzk0QUNEQzQzODY1OUYyMEQy
QUM4Q0QzOTkzNEExQ0MwRUZFM0EwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTgyMzFBNDdBMkYwODJCQzc2QkI5Q0VFOUUzRjVFQUI4NTJGQ0U2NUM0
Rjc0NDdDMjQ4MTlCQzA0MDhFNkI3Ni8wLzMyMzAzMTJlMzEzMzMwMmUzMTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmCEDAN
BgkqhkiG9w0BAQsFAAOCAQEASmAx2yl+HudGja5jdIxGlDXAzK9yoZbVuLraQXPE
Y4xEkb8k2AqyNUvZnUWhVf5NH1K5LeW5aU0pva3jWhtMJQb2PXD0Teyf7HvGwj2J
hp9BEskyzYgfwZ5+8QmE+tKt7gJioW0EkjxsrFTrcNNomMXIKslo88YwuG3Ono4I
VmBamegRlI83CBTLLK2yUOTq0z58/t7GvsU0I5Y3PurWthx02iZpt32VEmJIeHlx
OH888aNEINR1gGbfX9N50U68Wjadqp9gk/xbt29qIsgDr4+8GntjIC+TpzKgU5It
nOEIu/PL0lS4Sm4IiOGoUGV0aTn2NUyPC1AErqFSbomAtQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:12:15 2025 by rpki-client