Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa
File:                     3138362e37322e302e302f31342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          6jZmOIvU5B7fNdvQTMOGddKyjnG3vCTvHJgfpTle+G8=
Subject key identifier:   7D:C4:F0:15:2E:54:02:4A:F1:1F:10:B3:C7:32:EC:3E:7D:C8:7F:39
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       4A0DF69F66FC7EBB68AB3FCB8C8AC4D57F11202C
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa
Signing time:             Tue 04 Feb 2025 18:48:41 +0000
ROA not before:           Tue 04 Feb 2025 18:43:41 +0000
ROA not after:            Tue 03 Feb 2026 18:48:41 +0000
asID:                     11556
IP address blocks:        186.72.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0d:f6:9f:66:fc:7e:bb:68:ab:3f:cb:8c:8a:c4:d5:7f:11:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Feb  4 18:43:41 2025 GMT
            Not After : Feb  3 18:48:41 2026 GMT
        Subject: CN=7DC4F0152E54024AF11F10B3C732EC3E7DC87F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:5f:a2:0a:e1:1a:80:f6:9c:ac:d8:22:49:
                    0e:31:22:d8:df:99:82:ec:9b:b7:26:8a:eb:00:b0:
                    49:7d:7e:9f:9e:d5:1f:88:4a:c9:93:30:99:ce:f9:
                    bd:d7:27:27:16:ba:ba:7e:6f:de:20:54:0b:ac:71:
                    8c:db:35:c4:de:e0:92:ce:66:2f:29:ee:e5:db:72:
                    3d:83:43:86:36:32:3d:63:78:af:28:3a:3e:86:5c:
                    35:c1:d6:66:f9:eb:52:39:d8:15:9e:4d:0c:96:75:
                    fa:97:d6:72:a8:04:13:0d:ff:39:0d:97:1c:31:69:
                    42:dc:18:cd:06:fb:ac:d9:76:4e:61:96:32:a1:23:
                    11:2d:49:06:ee:ec:8b:ee:6f:1c:0a:d3:a2:df:fe:
                    9e:2f:af:c9:2d:6c:04:91:2b:47:65:07:82:e9:5f:
                    8c:8c:5d:79:9b:d5:08:60:b6:f5:f8:7b:95:4c:bf:
                    13:68:67:55:be:f7:ea:4d:9a:2d:3c:13:86:b2:1b:
                    30:1d:5e:5a:4f:3d:4a:67:c5:c8:76:36:c3:64:c7:
                    19:e7:d5:b2:eb:68:0d:58:c3:c8:a9:ab:0b:c3:29:
                    1a:3a:4b:5e:49:d5:6d:80:1f:dc:6f:bd:73:8c:6a:
                    85:2f:25:b2:2d:ae:d2:67:27:1a:84:19:98:71:ba:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:F0:15:2E:54:02:4A:F1:1F:10:B3:C7:32:EC:3E:7D:C8:7F:39
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.72.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         16:58:3f:fc:7b:a2:f0:dc:90:0c:5f:7d:25:4d:f7:98:e5:2c:
         8a:a7:39:79:c7:11:e3:a5:f7:3c:1c:ca:43:80:7f:b3:2e:06:
         d4:f1:16:e1:aa:b3:8c:fe:29:d6:df:91:28:1b:e9:2a:2b:cf:
         80:bc:f1:d5:3d:89:70:1b:aa:04:6d:e3:80:56:66:09:bf:e4:
         49:b9:c3:86:85:3c:6d:6c:11:2a:04:ce:99:c5:6c:db:88:82:
         0f:64:fb:c1:79:8d:a7:5c:49:a6:0d:68:01:6f:82:14:a6:0c:
         5b:b8:7a:ab:e3:2f:54:9c:09:07:93:2f:62:e2:b9:0a:56:25:
         a1:04:cc:4b:23:06:19:8f:76:ac:32:cd:0b:b0:3e:1a:46:71:
         27:eb:3e:ea:c9:29:7a:c7:4b:1f:22:b8:69:36:63:53:8e:ea:
         05:0b:da:ac:fb:7e:7a:90:3e:60:ed:03:60:c6:52:95:fc:66:
         04:dd:cb:bc:8c:ed:d1:65:ae:1a:3f:b1:ec:52:be:91:59:b4:
         1b:00:11:dd:a9:73:4e:ac:ec:34:34:2d:70:2b:2b:a2:bc:56:
         ef:e1:89:33:3f:93:81:bf:ca:b0:ab:29:fa:14:88:70:59:c6:
         c9:b3:77:80:fc:e7:83:d7:f8:17:21:f6:45:ac:6f:6b:88:97:
         b1:9e:7b:cb
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUSg32n2b8frtoqz/LjIrE1X8RICwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3NUE4OEJGMjIxMzc3MkEzNjM3QjhCRDFGNzc1RUM5
OEYyMjc1RjAeFw0yNTAyMDQxODQzNDFaFw0yNjAyMDMxODQ4NDFaMDMxMTAvBgNV
BAMTKDdEQzRGMDE1MkU1NDAyNEFGMTFGMTBCM0M3MzJFQzNFN0RDODdGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/l+iCuEagPacrNgiSQ4xItjf
mYLsm7cmiusAsEl9fp+e1R+ISsmTMJnO+b3XJycWurp+b94gVAuscYzbNcTe4JLO
Zi8p7uXbcj2DQ4Y2Mj1jeK8oOj6GXDXB1mb561I52BWeTQyWdfqX1nKoBBMN/zkN
lxwxaULcGM0G+6zZdk5hljKhIxEtSQbu7IvubxwK06Lf/p4vr8ktbASRK0dlB4Lp
X4yMXXmb1QhgtvX4e5VMvxNoZ1W+9+pNmi08E4ayGzAdXlpPPUpnxch2NsNkxxnn
1bLraA1Yw8ipqwvDKRo6S15J1W2AH9xvvXOMaoUvJbItrtJnJxqEGZhxupqNAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUfcTwFS5UAkrxHxCzxzLsPn3IfzkwHwYDVR0j
BBgwFoAUeHWoi/IhN3KjY3uL0fd17JjyJ18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUZDOUU1MURFMjY5RDI4RENERTBCQjIyODM4NzFGMjZE
Nzc4QjgwNDUxMzMzMjc2N0YyRjBBRTM5MUZBOUJELzAvNzg3NUE4OEJGMjIxMzc3
MkEzNjM3QjhCRDFGNzc1RUM5OEYyMjc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc1QTg4QkYyMjEzNzcyQTM2
MzdCOEJEMUY3NzVFQzk4RjIyNzVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVGQzlFNTFERTI2OUQyOERDREUwQkIyMjgzODcxRjI2RDc3OEI4MDQ1
MTMzMzI3NjdGMkYwQUUzOTFGQTlCRC8wLzMxMzgzNjJlMzczMjJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCukgwDQYJKoZI
hvcNAQELBQADggEBABZYP/x7ovDckAxffSVN95jlLIqnOXnHEeOl9zwcykOAf7Mu
BtTxFuGqs4z+KdbfkSgb6Sorz4C88dU9iXAbqgRt44BWZgm/5Em5w4aFPG1sESoE
zpnFbNuIgg9k+8F5jadcSaYNaAFvghSmDFu4eqvjL1ScCQeTL2LiuQpWJaEEzEsj
BhmPdqwyzQuwPhpGcSfrPurJKXrHSx8iuGk2Y1OO6gUL2qz7fnqQPmDtA2DGUpX8
ZgTdy7yM7dFlrho/sexSvpFZtBsAEd2pc06s7DQ0LXArK6K8Vu/hiTM/k4G/yrCr
KfoUiHBZxsmzd4D854PX+Bch9kWsb2uIl7Gee8s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:58 2025 by rpki-client