Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa
File:                     3133322e3234372e302e302f31362d3234203d3e20323738.roa (raw, json)
Hash identifier:          lnznuX6byW97zPjiL68V3Cu5l82TSLPIBCsN4mHdWj8=
Subject key identifier:   FC:D5:E6:CF:75:B0:F1:0C:E6:EF:92:99:C4:1A:75:FF:8C:96:63:B1
Certificate issuer:       /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial:       1532FD72943DFD6D598069C62EDC4718B03FC94A
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa
Signing time:             Tue 04 Feb 2025 18:53:48 +0000
ROA not before:           Tue 04 Feb 2025 18:48:48 +0000
ROA not after:            Tue 03 Feb 2026 18:53:48 +0000
asID:                     278
IP address blocks:        132.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:32:fd:72:94:3d:fd:6d:59:80:69:c6:2e:dc:47:18:b0:3f:c9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
        Validity
            Not Before: Feb  4 18:48:48 2025 GMT
            Not After : Feb  3 18:53:48 2026 GMT
        Subject: CN=FCD5E6CF75B0F10CE6EF9299C41A75FF8C9663B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:7e:5b:c1:52:df:79:14:c4:9d:6b:c1:07:
                    14:59:62:6b:66:d4:03:ca:73:b2:8f:41:ec:99:7d:
                    26:72:ef:4f:3d:18:b7:d9:1c:17:5b:91:f1:d9:ef:
                    52:c8:f3:b7:3b:12:7a:ec:c5:a0:25:a5:46:a7:bf:
                    34:ce:b3:16:02:6e:5a:4d:65:93:cb:93:77:7d:fc:
                    8d:97:7f:14:97:72:3f:ea:46:ea:16:7d:4f:d9:7f:
                    e2:ce:e3:eb:45:43:ad:71:70:23:8f:9a:8a:5e:41:
                    44:36:f8:45:eb:c9:4c:fe:50:5e:67:d2:d3:43:ab:
                    b1:ba:1b:d9:f5:68:fb:1f:f9:53:78:c2:5f:4c:95:
                    f5:f4:49:e8:86:35:d2:22:2e:dd:b7:28:5f:b1:91:
                    52:b0:4d:16:2d:b8:f5:85:1b:a5:9d:ec:95:d1:ed:
                    39:33:fd:42:cc:f3:77:b8:09:d9:9f:38:26:3b:e0:
                    11:6e:59:e9:de:21:84:bb:b8:08:ca:10:a6:9c:c2:
                    38:f8:cc:1a:80:81:bf:f3:16:91:40:3c:87:fb:9d:
                    62:57:42:2a:58:13:80:5d:cc:2e:18:22:48:0f:f0:
                    89:1d:84:eb:c2:2f:d2:3e:28:e6:fe:aa:de:9e:19:
                    2f:bc:2a:89:b7:5c:8d:16:8e:d5:4c:cf:63:f9:4a:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D5:E6:CF:75:B0:F1:0C:E6:EF:92:99:C4:1A:75:FF:8C:96:63:B1
            X509v3 Authority Key Identifier:
                keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:df:9e:93:11:6c:17:82:0c:a6:84:ac:41:7a:b1:9e:f9:
         39:1f:07:aa:ee:0f:45:d8:99:03:8f:b3:4e:e6:09:3d:c6:b4:
         46:71:f7:56:78:76:be:d4:6d:42:bd:61:0b:83:24:1a:c3:be:
         0f:c3:be:21:1f:d4:dd:bc:37:d8:d2:81:63:1b:16:2d:9d:ee:
         13:28:69:33:c5:87:dc:3c:9c:cc:59:77:31:38:2b:7f:ff:98:
         12:c1:68:34:eb:65:e7:94:1a:31:f5:c8:29:3d:16:e5:44:0c:
         69:d6:62:a0:21:30:2d:f2:c1:a8:90:65:96:16:a4:38:68:92:
         fc:f2:7b:67:1b:2a:62:bb:c0:b9:30:ff:9f:96:a5:c7:6a:6a:
         e6:f5:0d:be:72:04:ad:bf:20:55:a0:89:d8:be:25:70:20:c3:
         bc:2a:cc:cc:d6:6a:b5:9e:b8:03:92:80:62:44:83:d4:a2:6f:
         41:1b:a0:33:18:f7:b4:82:48:48:08:ef:92:22:e7:16:93:dc:
         d7:97:77:05:4d:3f:66:31:d0:8d:f3:53:b7:8c:ff:30:4b:c9:
         ba:ee:ab:eb:ac:2f:30:67:2b:e8:08:27:b5:34:ac:7b:c9:bd:
         39:2c:8f:d3:1a:86:0d:3c:86:7f:e3:11:9d:6b:bd:9a:85:ed:
         d6:a1:a7:e2
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUFTL9cpQ9/W1ZgGnGLtxHGLA/yUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNDUzMkYzMjJDQzgwNUQxNUJCQTcxNDIzRDFDOEYw
NDE0OEZDNzAeFw0yNTAyMDQxODQ4NDhaFw0yNjAyMDMxODUzNDhaMDMxMTAvBgNV
BAMTKEZDRDVFNkNGNzVCMEYxMENFNkVGOTI5OUM0MUE3NUZGOEM5NjYzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPOn5bwVLfeRTEnWvBBxRZYmtm
1APKc7KPQeyZfSZy7089GLfZHBdbkfHZ71LI87c7EnrsxaAlpUanvzTOsxYCblpN
ZZPLk3d9/I2XfxSXcj/qRuoWfU/Zf+LO4+tFQ61xcCOPmopeQUQ2+EXryUz+UF5n
0tNDq7G6G9n1aPsf+VN4wl9MlfX0SeiGNdIiLt23KF+xkVKwTRYtuPWFG6Wd7JXR
7Tkz/ULM83e4CdmfOCY74BFuWeneIYS7uAjKEKacwjj4zBqAgb/zFpFAPIf7nWJX
QipYE4BdzC4YIkgP8IkdhOvCL9I+KOb+qt6eGS+8Kom3XI0WjtVMz2P5SttxAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQU/NXmz3Ww8Qzm75KZxBp1/4yWY7EwHwYDVR0j
BBgwFoAUfzRTLzIsyAXRW7pxQj0cjwQUj8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTZBNzg5RDFCMzY0Q0U0ODFCMkQzQUQ5RTZBQ0FBOTg3
OTA3MEUyOEJFRTIyMUNGNTU2MkZFMTYxRTE4NUFDLzAvN0YzNDUzMkYzMjJDQzgw
NUQxNUJCQTcxNDIzRDFDOEYwNDE0OEZDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM0NTMyRjMyMkNDODA1RDE1
QkJBNzE0MjNEMUM4RjA0MTQ4RkM3LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjk2QTc4OUQxQjM2NENFNDgxQjJEM0FEOUU2QUNBQTk4NzkwNzBFMjhC
RUUyMjFDRjU1NjJGRTE2MUUxODVBQy8wLzMxMzMzMjJlMzIzNDM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIT3MA0GCSqGSIb3
DQEBCwUAA4IBAQBvad+ekxFsF4IMpoSsQXqxnvk5Hweq7g9F2JkDj7NO5gk9xrRG
cfdWeHa+1G1CvWELgyQaw74Pw74hH9TdvDfY0oFjGxYtne4TKGkzxYfcPJzMWXcx
OCt//5gSwWg062XnlBox9cgpPRblRAxp1mKgITAt8sGokGWWFqQ4aJL88ntnGypi
u8C5MP+flqXHamrm9Q2+cgStvyBVoInYviVwIMO8KszM1mq1nrgDkoBiRIPUom9B
G6AzGPe0gkhICO+SIucWk9zXl3cFTT9mMdCN81O3jP8wS8m67qvrrC8wZyvoCCe1
NKx7yb05LI/TGoYNPIZ/4xGda72ahe3Woafi
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:48:16 2025 by rpki-client