Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e302f32322d3234203d3e20323633323338.roa
File:                     3137372e35332e3231322e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          o5lJ38c3nKs9Zc9TK2dAlL+FMeI537HNp09HsrF5eZE=
Subject key identifier:   D1:DF:05:EA:8F:88:C6:51:19:47:87:EA:ED:60:85:82:72:52:32:68
Certificate issuer:       /CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
Certificate serial:       51E4C8ECA68074D3AA3327BE5EC3CEE0A22DE7B0
Authority key identifier: 82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 18:04:54 +0000
ROA not before:           Tue 04 Feb 2025 17:59:54 +0000
ROA not after:            Tue 03 Feb 2026 18:04:54 +0000
asID:                     263238
IP address blocks:        177.53.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e4:c8:ec:a6:80:74:d3:aa:33:27:be:5e:c3:ce:e0:a2:2d:e7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
        Validity
            Not Before: Feb  4 17:59:54 2025 GMT
            Not After : Feb  3 18:04:54 2026 GMT
        Subject: CN=D1DF05EA8F88C651194787EAED60858272523268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:87:0b:5c:37:7b:d1:f0:2a:73:56:f5:ec:
                    aa:6d:ac:85:59:c7:be:bc:7b:3a:31:dc:6e:ea:31:
                    e2:6c:3a:e9:6c:17:53:5e:b9:10:cf:22:ba:c4:69:
                    3c:68:27:f7:f8:5f:5a:6f:44:44:73:69:94:85:25:
                    b2:56:c6:0d:86:77:af:61:95:a3:60:e5:b5:67:3e:
                    32:12:b9:b3:18:cd:0c:8e:e2:d1:65:74:9c:7f:dc:
                    37:3f:5d:d5:1f:e1:0f:97:ce:79:e2:8a:ed:0e:df:
                    d7:67:7a:b7:46:bc:62:b0:41:23:e3:99:c3:f0:14:
                    8b:58:b2:64:33:8a:3c:af:8d:ed:8c:86:90:8c:6c:
                    9a:41:31:92:f6:3e:fe:08:ca:66:71:4f:15:79:e1:
                    cd:1b:36:76:12:f3:71:c2:8c:15:ae:76:ef:7e:60:
                    17:bb:d2:f1:18:59:5b:b5:67:69:e4:0f:ee:ad:22:
                    18:77:e9:4e:4c:97:bc:54:67:8d:24:92:91:08:15:
                    8b:22:1c:f4:d7:20:63:3a:a1:8a:10:b5:da:b3:52:
                    2a:8c:e7:b2:67:c4:50:f6:1d:94:88:e0:28:b5:a9:
                    3e:d3:80:b4:11:50:e3:9c:f4:58:42:7d:7a:f3:36:
                    64:94:f4:43:5c:48:aa:af:30:55:31:32:52:77:eb:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:05:EA:8F:88:C6:51:19:47:87:EA:ED:60:85:82:72:52:32:68
            X509v3 Authority Key Identifier:
                keyid:82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:72:d0:f2:71:92:3f:da:b4:a8:82:93:72:e2:53:d4:c4:a6:
         9d:43:53:a0:06:e1:c7:80:e3:d2:a7:d7:99:04:36:11:00:04:
         82:a2:e2:df:dd:d0:5a:63:28:26:05:d3:f6:5f:ef:5b:35:ed:
         f8:d8:52:3a:a4:2e:3d:82:19:d0:3e:ca:82:e5:29:26:2c:95:
         fb:de:5b:cf:3a:3c:b7:2f:b3:07:f2:4d:a9:ee:2b:e6:79:99:
         ec:7c:5c:02:c9:aa:8e:ae:fe:98:20:ac:62:f4:8d:8a:c7:f5:
         55:02:27:b2:b0:bc:10:fa:83:4a:b4:0d:c1:7b:47:26:14:6c:
         4a:94:9a:d8:95:ab:44:8f:1f:9b:73:d8:2c:3a:20:d1:5d:de:
         58:4b:3b:66:f0:80:b0:1a:fa:b8:18:c4:1b:64:79:84:47:dc:
         b7:43:c5:ae:a7:1f:58:73:66:88:f9:17:cb:de:dc:e6:f5:52:
         b0:9e:9b:b1:b2:a6:ec:d7:c5:8a:79:d7:8d:7a:19:63:e6:36:
         2f:c5:79:1a:c6:f6:48:63:17:b3:33:2b:dd:49:be:8e:e9:cd:
         ea:ab:9c:75:08:c1:6b:42:41:21:f9:c2:9b:76:c8:22:7d:bf:
         24:50:0d:ac:b8:e5:f8:89:52:d8:6a:b5:90:7a:f6:66:be:da:
         8c:14:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:22 2025 by rpki-client