Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD95E455EB57F5B0632D1D46BA08D0B52E5743CA61F4ACFCD0EB5488E71611E7/0/3133382e3231392e3231322e302f32322d3234203d3e20323633383232.roa
File:                     3133382e3231392e3231322e302f32322d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          btwtmbhjAkcLydIatPnAWMJmDHmeZZVzN4XC2qLbLo0=
Subject key identifier:   BF:53:A9:33:45:91:38:13:48:2D:09:B5:3D:77:D7:77:8E:11:40:F2
Certificate issuer:       /CN=5116BBD3F6A456AED37C4E8AFA13F96BAEE65C9E
Certificate serial:       66889402831061D20844D69E1C82A79C1943E89D
Authority key identifier: 51:16:BB:D3:F6:A4:56:AE:D3:7C:4E:8A:FA:13:F9:6B:AE:E6:5C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5116BBD3F6A456AED37C4E8AFA13F96BAEE65C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD95E455EB57F5B0632D1D46BA08D0B52E5743CA61F4ACFCD0EB5488E71611E7/0/3133382e3231392e3231322e302f32322d3234203d3e20323633383232.roa
Signing time:             Tue 04 Feb 2025 18:32:17 +0000
ROA not before:           Tue 04 Feb 2025 18:27:17 +0000
ROA not after:            Tue 03 Feb 2026 18:32:17 +0000
asID:                     263822
IP address blocks:        138.219.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:88:94:02:83:10:61:d2:08:44:d6:9e:1c:82:a7:9c:19:43:e8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116BBD3F6A456AED37C4E8AFA13F96BAEE65C9E
        Validity
            Not Before: Feb  4 18:27:17 2025 GMT
            Not After : Feb  3 18:32:17 2026 GMT
        Subject: CN=BF53A93345913813482D09B53D77D7778E1140F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:99:b1:8a:e9:85:9b:4c:e3:18:03:7f:d1:
                    31:dc:8e:fa:60:9f:6e:eb:75:5a:41:ca:1c:be:85:
                    4f:ee:38:5b:7d:01:fd:55:2e:0e:6d:c8:80:bc:68:
                    da:14:9b:92:17:0a:f1:9a:bb:04:9a:84:53:68:49:
                    1a:48:99:3b:f2:20:92:ae:f6:00:a5:c1:38:66:ce:
                    60:c9:a3:b6:8d:11:5f:71:56:26:68:a1:7f:0a:23:
                    76:81:4f:6d:5a:3d:69:86:b8:43:ef:5f:8c:db:cf:
                    2a:cb:23:af:54:4c:1d:53:38:01:27:b7:74:e6:95:
                    5c:a3:9a:58:20:fd:26:73:b3:90:04:4b:b1:95:f1:
                    75:80:15:66:df:1d:20:ce:ed:18:1e:c7:44:1f:63:
                    11:f9:fd:0a:76:3e:f1:82:62:29:1b:12:a2:25:99:
                    d7:54:bc:e1:d2:b0:e8:98:75:44:a8:0b:5e:84:01:
                    6e:98:d5:5a:1b:06:57:2c:45:e3:aa:c0:0d:a2:ec:
                    e2:30:97:05:87:16:8b:50:29:af:24:29:b6:33:07:
                    c0:ca:dc:1e:11:ec:9d:48:e1:66:ad:5b:78:96:94:
                    46:0b:53:ec:9e:b4:b0:22:69:ca:1d:92:dd:7d:a9:
                    9f:78:97:9a:7b:fd:63:51:34:a6:77:15:36:c9:55:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:A9:33:45:91:38:13:48:2D:09:B5:3D:77:D7:77:8E:11:40:F2
            X509v3 Authority Key Identifier:
                keyid:51:16:BB:D3:F6:A4:56:AE:D3:7C:4E:8A:FA:13:F9:6B:AE:E6:5C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD95E455EB57F5B0632D1D46BA08D0B52E5743CA61F4ACFCD0EB5488E71611E7/0/5116BBD3F6A456AED37C4E8AFA13F96BAEE65C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5116BBD3F6A456AED37C4E8AFA13F96BAEE65C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD95E455EB57F5B0632D1D46BA08D0B52E5743CA61F4ACFCD0EB5488E71611E7/0/3133382e3231392e3231322e302f32322d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:42:3b:15:e1:10:05:54:cc:6a:35:00:94:e0:32:31:93:50:
         6f:eb:38:5a:91:a8:ff:87:b8:bb:db:48:af:51:0e:a2:e1:03:
         67:ef:72:27:a4:c8:a5:10:08:8c:ef:c4:f7:a7:a3:db:a2:7c:
         cc:55:70:49:d6:a7:36:42:ec:88:db:1a:54:1e:7e:e2:27:8c:
         ae:fe:a8:73:ae:57:da:3c:4d:ee:3e:e3:46:3a:7b:d9:8c:05:
         22:8f:d0:39:d0:60:be:22:20:f2:82:15:85:72:fb:02:ac:73:
         87:17:a1:d0:98:60:92:1c:c8:27:69:6f:a7:c3:aa:c3:6d:40:
         1e:fb:a2:6e:34:7d:17:fc:4e:c4:ba:7e:bc:2d:37:c4:43:42:
         5d:3a:a5:b0:d0:ac:59:6e:04:58:1a:92:b3:28:72:3b:b0:12:
         3b:a9:e9:3a:bf:61:7b:5c:ab:52:4c:59:1a:71:ee:ee:ce:59:
         fc:00:35:f4:31:4d:be:d5:20:32:9f:8f:7f:1e:0f:bd:89:c0:
         55:16:06:71:a6:fe:9e:03:b4:80:a0:6c:8c:35:7e:8e:04:d5:
         d8:5c:63:45:a0:5f:66:e5:b2:b8:e1:63:d1:96:ed:58:25:ff:
         74:b3:fd:4b:57:44:97:f4:1e:df:6b:bb:c0:eb:8f:f4:00:87:
         0b:4a:15:08
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZoiUAoMQYdIIRNaeHIKnnBlD6J0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNkJCRDNGNkE0NTZBRUQzN0M0RThBRkExM0Y5NkJB
RUU2NUM5RTAeFw0yNTAyMDQxODI3MTdaFw0yNjAyMDMxODMyMTdaMDMxMTAvBgNV
BAMTKEJGNTNBOTMzNDU5MTM4MTM0ODJEMDlCNTNENzdENzc3OEUxMTQwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1gZmxiumFm0zjGAN/0THcjvpg
n27rdVpByhy+hU/uOFt9Af1VLg5tyIC8aNoUm5IXCvGauwSahFNoSRpImTvyIJKu
9gClwThmzmDJo7aNEV9xViZooX8KI3aBT21aPWmGuEPvX4zbzyrLI69UTB1TOAEn
t3TmlVyjmlgg/SZzs5AES7GV8XWAFWbfHSDO7Rgex0QfYxH5/Qp2PvGCYikbEqIl
mddUvOHSsOiYdUSoC16EAW6Y1VobBlcsReOqwA2i7OIwlwWHFotQKa8kKbYzB8DK
3B4R7J1I4WatW3iWlEYLU+yetLAiacodkt19qZ94l5p7/WNRNKZ3FTbJVfqRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUv1OpM0WROBNILQm1PXfXd44RQPIwHwYDVR0j
BBgwFoAUURa70/akVq7TfE6K+hP5a67mXJ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRDk1RTQ1NUVCNTdGNUIwNjMyRDFENDZCQTA4RDBCNTJF
NTc0M0NBNjFGNEFDRkNEMEVCNTQ4OEU3MTYxMUU3LzAvNTExNkJCRDNGNkE0NTZB
RUQzN0M0RThBRkExM0Y5NkJBRUU2NUM5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTE2QkJEM0Y2QTQ1NkFFRDM3
QzRFOEFGQTEzRjk2QkFFRTY1QzlFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUQ5NUU0NTVFQjU3RjVCMDYzMkQxRDQ2QkEwOEQwQjUyRTU3NDNDQTYx
RjRBQ0ZDRDBFQjU0ODhFNzE2MTFFNy8wLzMxMzMzODJlMzIzMTM5MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzODMyMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
29QwDQYJKoZIhvcNAQELBQADggEBAHdCOxXhEAVUzGo1AJTgMjGTUG/rOFqRqP+H
uLvbSK9RDqLhA2fvciekyKUQCIzvxPeno9uifMxVcEnWpzZC7IjbGlQefuInjK7+
qHOuV9o8Te4+40Y6e9mMBSKP0DnQYL4iIPKCFYVy+wKsc4cXodCYYJIcyCdpb6fD
qsNtQB77om40fRf8TsS6frwtN8RDQl06pbDQrFluBFgakrMocjuwEjup6Tq/YXtc
q1JMWRpx7u7OWfwANfQxTb7VIDKfj38eD72JwFUWBnGm/p4DtICgbIw1fo4E1dhc
Y0WgX2blsrjhY9GW7Vgl/3Sz/UtXRJf0Ht9ru8Drj/QAhwtKFQg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:35:30 2025 by rpki-client