Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          q1lZmw/hGHmPXAxO+1MUDxVWvwi5EY/yXbQ9LQWOPjc=
Subject key identifier:   97:D0:96:E1:AA:96:8B:64:10:1C:63:CD:8C:F0:B1:E3:90:6A:48:AE
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       4E027B3AF6D701A544DA8DA70773946F150C1799
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa
Signing time:             Fri 14 Mar 2025 05:11:48 +0000
ROA not before:           Fri 14 Mar 2025 05:06:48 +0000
ROA not after:            Fri 13 Mar 2026 05:11:48 +0000
asID:                     264731
IP address blocks:        186.167.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:02:7b:3a:f6:d7:01:a5:44:da:8d:a7:07:73:94:6f:15:0c:17:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Mar 14 05:06:48 2025 GMT
            Not After : Mar 13 05:11:48 2026 GMT
        Subject: CN=97D096E1AA968B64101C63CD8CF0B1E3906A48AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:74:c7:20:fb:9a:32:0c:d1:4f:26:ea:7d:
                    00:c6:0f:14:06:46:06:a7:df:c3:69:25:5c:70:2a:
                    23:e2:e5:6e:25:df:8f:7e:4d:2a:b1:74:ea:98:b9:
                    2c:7b:d2:6b:a9:11:95:da:40:6c:d5:d3:15:1b:05:
                    e5:41:e6:3a:7d:7d:f4:ef:b2:7f:5c:8a:39:a0:f2:
                    94:5f:b4:a4:7b:60:72:d4:95:55:a9:47:90:3f:95:
                    79:0f:ad:8c:89:15:c9:8f:ab:7e:3e:e5:30:99:dc:
                    50:79:14:d4:14:52:b0:df:7b:57:ef:8b:2f:de:ba:
                    e2:0b:29:63:a9:25:bf:77:a7:3c:77:66:b7:75:47:
                    45:80:28:dd:88:3b:f2:7c:d7:0a:8b:45:84:e8:24:
                    f1:78:27:e4:e9:41:3e:5f:b3:81:59:35:d4:e7:71:
                    f2:b7:8b:3a:41:89:f8:1c:20:f5:68:cc:ff:ce:eb:
                    ad:3c:48:9b:62:0a:00:26:54:bf:0c:c5:24:1c:ef:
                    8e:f3:97:8a:60:b4:6c:ca:bf:28:24:c7:0b:9b:53:
                    44:b1:df:07:6e:c7:b4:7a:3d:d4:99:db:e5:2b:dc:
                    b1:68:21:b2:e4:55:72:30:3c:db:62:c6:0b:29:0c:
                    b9:a5:8f:d2:be:5a:55:90:a9:6b:97:4d:2a:3d:b6:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:96:E1:AA:96:8B:64:10:1C:63:CD:8C:F0:B1:E3:90:6A:48:AE
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:8f:d3:7a:57:7c:fb:49:e5:1e:23:bf:99:77:58:82:b3:
         a0:d3:f0:22:e2:ab:c2:1e:4d:cc:71:75:21:0c:03:2d:f7:f4:
         f8:7f:c7:c2:86:96:f6:d0:df:79:ac:24:c4:db:3a:29:52:5b:
         de:ef:98:aa:f5:82:7a:83:7b:4b:9c:ad:e2:a0:36:28:ca:f0:
         dc:6a:1e:92:8b:88:62:43:45:b4:13:e7:2a:cf:69:e6:d8:f1:
         68:26:f5:80:e1:22:f5:6f:fc:83:12:5f:c6:38:0d:c7:de:dc:
         98:bd:2b:02:c6:93:27:ca:5b:78:ff:01:98:dd:f1:7d:ca:cd:
         1b:b4:c8:a3:d7:15:e0:50:da:fb:26:ee:50:88:46:5d:24:d3:
         0c:c1:f0:50:3c:3a:14:08:53:0d:99:4c:5e:9e:c9:b1:1c:18:
         0a:cb:f6:e1:ec:8c:04:b7:81:86:ea:14:25:fb:2c:82:a7:19:
         83:ca:df:55:6b:e8:1f:b1:cf:a7:20:f2:5c:e5:2c:a6:5d:0c:
         85:cc:17:ed:fa:ac:66:ed:5f:39:5d:48:e4:9f:25:c9:f8:51:
         8a:21:8c:22:f6:bb:d7:7b:6f:4c:7e:0b:a7:c8:76:92:28:05:
         09:3c:e1:61:db:b4:11:be:06:8a:f7:e0:e1:bf:31:6e:b6:7c:
         91:0b:ae:be
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTgJ7OvbXAaVE2o2nB3OUbxUMF5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1MkExNkQzQUM1OTcyNjhFNzgyRjQ5MzAxMDFFOTBE
NjY4QTAxMjAeFw0yNTAzMTQwNTA2NDhaFw0yNjAzMTMwNTExNDhaMDMxMTAvBgNV
BAMTKDk3RDA5NkUxQUE5NjhCNjQxMDFDNjNDRDhDRjBCMUUzOTA2QTQ4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPXTHIPuaMgzRTybqfQDGDxQG
Rgan38NpJVxwKiPi5W4l349+TSqxdOqYuSx70mupEZXaQGzV0xUbBeVB5jp9ffTv
sn9cijmg8pRftKR7YHLUlVWpR5A/lXkPrYyJFcmPq34+5TCZ3FB5FNQUUrDfe1fv
iy/euuILKWOpJb93pzx3Zrd1R0WAKN2IO/J81wqLRYToJPF4J+TpQT5fs4FZNdTn
cfK3izpBifgcIPVozP/O6608SJtiCgAmVL8MxSQc747zl4pgtGzKvygkxwubU0Sx
3wdux7R6PdSZ2+Ur3LFoIbLkVXIwPNtixgspDLmlj9K+WlWQqWuXTSo9tl//AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUl9CW4aqWi2QQHGPNjPCx45BqSK4wHwYDVR0j
BBgwFoAUSVKhbTrFlyaOeC9JMBAekNZooBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjYxNTExMEFBMDRFMzQzRjVDOEI1RTJFMjNERjE1MERE
MjlGRjUyNjY2MTAwNUJBM0E4NDkzNkIxOTVERjRBLzAvNDk1MkExNkQzQUM1OTcy
NjhFNzgyRjQ5MzAxMDFFOTBENjY4QTAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTUyQTE2RDNBQzU5NzI2OEU3
ODJGNDkzMDEwMUU5MEQ2NjhBMDEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI2MTUxMTBBQTA0RTM0M0Y1QzhCNUUyRTIzREYxNTBERDI5RkY1MjY2
NjEwMDVCQTNBODQ5MzZCMTk1REY0QS8wLzMxMzgzNjJlMzEzNjM3MmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6
p6AwDQYJKoZIhvcNAQELBQADggEBAAkcj9N6V3z7SeUeI7+Zd1iCs6DT8CLiq8Ie
TcxxdSEMAy339Ph/x8KGlvbQ33msJMTbOilSW97vmKr1gnqDe0ucreKgNijK8Nxq
HpKLiGJDRbQT5yrPaebY8Wgm9YDhIvVv/IMSX8Y4Dcfe3Ji9KwLGkyfKW3j/AZjd
8X3KzRu0yKPXFeBQ2vsm7lCIRl0k0wzB8FA8OhQIUw2ZTF6eybEcGArL9uHsjAS3
gYbqFCX7LIKnGYPK31Vr6B+xz6cg8lzlLKZdDIXMF+36rGbtXzldSOSfJcn4UYoh
jCL2u9d7b0x+C6fIdpIoBQk84WHbtBG+Bor34OG/MW62fJELrr4=
-----END CERTIFICATE-----