Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa
File:                     3137302e38312e32342e302f32322d3234203d3e203130323939.roa (raw, json)
Hash identifier:          pQk0kJGxUr64dpwhYhf+4ZC9HSxP5JG4QNpwU1bzje8=
Subject key identifier:   F4:DD:C8:70:95:56:51:DC:C1:85:C9:0E:1D:72:C9:C0:2B:08:25:1F
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       0624EA17451EC890D80B1D56E43E7B6063E6DB5F
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:15 +0000
ROA not before:           Tue 04 Feb 2025 17:58:15 +0000
ROA not after:            Tue 03 Feb 2026 18:03:15 +0000
asID:                     10299
IP address blocks:        170.81.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:ea:17:45:1e:c8:90:d8:0b:1d:56:e4:3e:7b:60:63:e6:db:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:15 2025 GMT
            Not After : Feb  3 18:03:15 2026 GMT
        Subject: CN=F4DDC870955651DCC185C90E1D72C9C02B08251F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:e7:76:0f:f8:43:85:30:48:7c:25:53:e1:
                    53:1b:9e:72:05:f5:8a:19:b8:8b:51:75:a1:e9:6a:
                    4d:ce:b5:85:e7:78:64:47:81:e5:91:f0:ee:f2:64:
                    33:1f:69:90:e1:7c:12:48:b1:ba:df:9e:31:3e:a4:
                    38:dd:0d:42:42:8c:19:0d:28:2b:76:e7:28:47:2e:
                    8a:fd:d8:57:72:75:4f:81:49:0c:74:f4:7e:82:70:
                    0e:7c:ec:d2:bc:f3:d9:03:46:d9:b5:63:5e:e1:29:
                    11:d2:c0:93:e3:96:4e:11:1c:1f:04:63:ba:21:72:
                    41:d2:a5:f3:16:b9:a5:af:c8:ea:4b:18:02:75:35:
                    36:4b:05:da:4d:c7:1e:99:b1:0e:6a:7c:e1:ae:8f:
                    cc:5f:88:75:0e:40:fc:08:ae:f2:09:bc:47:8a:cd:
                    ea:11:0f:84:ae:6e:96:3e:4d:70:14:99:f1:b2:c8:
                    81:17:bc:03:25:82:25:82:ec:8a:93:96:08:38:92:
                    e5:e0:c5:b8:f3:ca:ee:61:44:29:4a:fd:ed:84:e5:
                    dc:dd:0a:90:d3:06:35:30:bd:f7:48:79:0e:c9:ed:
                    f6:28:30:1f:d6:c4:78:34:eb:f9:b9:08:d2:f1:ad:
                    46:55:85:48:9d:36:d9:6e:69:5a:2b:cb:90:c7:de:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DD:C8:70:95:56:51:DC:C1:85:C9:0E:1D:72:C9:C0:2B:08:25:1F
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:96:6e:fa:f7:12:3e:70:f4:af:a8:6a:0d:cf:50:06:ff:5d:
         d3:93:b0:61:6f:d0:3a:a6:ba:f2:15:c1:22:1d:9d:80:2f:65:
         e0:9f:29:60:10:99:7e:d9:b0:11:7e:6f:50:69:20:b8:aa:c9:
         af:0a:55:7c:71:92:1b:3a:f6:7c:31:f3:70:60:31:da:46:c4:
         4e:99:52:46:cd:90:60:43:c9:76:66:7c:e7:6a:2e:31:38:b5:
         4a:b2:f8:0a:29:31:6b:6e:58:cf:9d:ba:d5:13:d8:f7:dc:b1:
         24:b0:83:45:13:72:69:ff:84:25:a8:e1:2c:19:fd:ed:99:b0:
         90:b0:73:20:28:a9:30:17:64:79:95:8a:c8:3e:50:9b:67:1f:
         f9:01:a9:dc:d8:22:71:2f:7d:41:06:65:fa:44:17:8c:94:97:
         ff:ca:95:a8:9f:66:1e:91:ba:df:4f:7a:05:38:44:91:a7:a0:
         17:7a:66:43:bb:d7:d1:3f:8e:ae:72:13:6a:20:e9:62:18:08:
         3b:af:38:d9:f8:95:5f:ea:62:12:74:f4:92:a8:e1:b4:2d:e5:
         93:50:bb:d2:84:cd:f1:fc:f1:e0:38:47:26:a1:9d:c6:6d:2c:
         dd:2e:10:2c:b2:af:3e:e8:5b:6f:a3:bb:d1:58:b0:f8:38:cc:
         92:a1:c4:5e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBiTqF0UeyJDYCx1W5D57YGPm218wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1NTJFREEzQkY4QTVCNkNBREM1MzNFNDAzNTM3QjZE
QzcyOTkzODAeFw0yNTAyMDQxNzU4MTVaFw0yNjAyMDMxODAzMTVaMDMxMTAvBgNV
BAMTKEY0RERDODcwOTU1NjUxRENDMTg1QzkwRTFENzJDOUMwMkIwODI1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMqOd2D/hDhTBIfCVT4VMbnnIF
9YoZuItRdaHpak3OtYXneGRHgeWR8O7yZDMfaZDhfBJIsbrfnjE+pDjdDUJCjBkN
KCt25yhHLor92FdydU+BSQx09H6CcA587NK889kDRtm1Y17hKRHSwJPjlk4RHB8E
Y7ohckHSpfMWuaWvyOpLGAJ1NTZLBdpNxx6ZsQ5qfOGuj8xfiHUOQPwIrvIJvEeK
zeoRD4SubpY+TXAUmfGyyIEXvAMlgiWC7IqTlgg4kuXgxbjzyu5hRClK/e2E5dzd
CpDTBjUwvfdIeQ7J7fYoMB/WxHg06/m5CNLxrUZVhUidNtluaVory5DH3g3JAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU9N3IcJVWUdzBhckOHXLJwCsIJR8wHwYDVR0j
BBgwFoAUnlUu2jv4pbbK3FM+QDU3ttxymTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUMzNzk4MzFEMkFFN0E1RDU2QUY2QTkwRDlBRjkxNUZC
NjM3N0VFOUZGOUIyQTI1RkU5MDk3MDBFOEEzQzdGLzAvOUU1NTJFREEzQkY4QTVC
NkNBREM1MzNFNDAzNTM3QjZEQzcyOTkzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTU1MkVEQTNCRjhBNUI2Q0FE
QzUzM0U0MDM1MzdCNkRDNzI5OTM4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDMzc5ODMxRDJBRTdBNUQ1NkFGNkE5MEQ5QUY5MTVGQjYzNzdFRTlG
RjlCMkEyNUZFOTA5NzAwRThBM0M3Ri8wLzMxMzczMDJlMzgzMTJlMzIzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzAzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqURgwDQYJ
KoZIhvcNAQELBQADggEBACCWbvr3Ej5w9K+oag3PUAb/XdOTsGFv0DqmuvIVwSId
nYAvZeCfKWAQmX7ZsBF+b1BpILiqya8KVXxxkhs69nwx83BgMdpGxE6ZUkbNkGBD
yXZmfOdqLjE4tUqy+AopMWtuWM+dutUT2PfcsSSwg0UTcmn/hCWo4SwZ/e2ZsJCw
cyAoqTAXZHmVisg+UJtnH/kBqdzYInEvfUEGZfpEF4yUl//KlaifZh6Rut9PegU4
RJGnoBd6ZkO719E/jq5yE2og6WIYCDuvONn4lV/qYhJ09JKo4bQt5ZNQu9KEzfH8
8eA4RyahncZtLN0uECyyrz7oW2+ju9FYsPg4zJKhxF4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:47 2025 by rpki-client