Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134342e302f32302d3234203d3e203238303332.roa
File:                     3137392e312e3134342e302f32302d3234203d3e203238303332.roa (raw, json)
Hash identifier:          Se9+DLUS8tpd/Zde8Px0fX7EJeJfXdnkkm/XngGUJXU=
Subject key identifier:   B6:A7:97:3A:A5:43:88:39:7C:A0:0F:08:78:25:82:03:7F:DA:25:C2
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       36367615D30212D9246156289A66AB3A3889363A
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134342e302f32302d3234203d3e203238303332.roa
Signing time:             Tue 04 Feb 2025 18:31:33 +0000
ROA not before:           Tue 04 Feb 2025 18:26:33 +0000
ROA not after:            Tue 03 Feb 2026 18:31:33 +0000
asID:                     28032
IP address blocks:        179.1.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:36:76:15:d3:02:12:d9:24:61:56:28:9a:66:ab:3a:38:89:36:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Feb  4 18:26:33 2025 GMT
            Not After : Feb  3 18:31:33 2026 GMT
        Subject: CN=B6A7973AA54388397CA00F08782582037FDA25C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:5e:ed:75:ef:27:b2:98:bb:3f:59:1a:46:
                    48:41:db:a5:94:af:e2:09:3e:88:23:c0:67:7d:a3:
                    d5:81:a6:cd:34:ee:13:6c:2d:f8:3c:86:f3:8c:f6:
                    d3:a4:10:e2:33:ea:d1:95:d5:4e:f4:af:a3:0f:b2:
                    e6:a1:2e:b7:a6:ef:53:dc:c8:55:42:b6:b3:76:7a:
                    6d:9b:81:30:33:b8:cd:24:a6:92:c8:08:d2:51:b2:
                    aa:80:16:b7:4f:04:c6:3e:78:06:7e:5b:d4:4a:f4:
                    b4:48:1b:46:48:7c:93:8e:d7:32:5f:ca:78:cc:10:
                    51:16:2c:4b:97:03:71:a9:c1:8b:1b:0f:ac:5d:06:
                    62:12:b0:e0:22:ad:30:39:12:aa:2f:d2:c4:ec:99:
                    d7:6f:22:b7:42:32:11:1b:b5:42:8d:bd:c9:b3:9f:
                    3a:93:e4:10:7f:e4:6b:91:06:96:43:f0:27:f0:72:
                    0e:05:54:8b:73:30:81:89:7b:5b:40:22:e8:81:ec:
                    26:4d:05:f1:87:47:30:d7:49:e5:9b:7e:07:f1:b9:
                    96:c3:a9:c7:6d:5d:c9:46:50:88:0c:fa:7c:0f:b7:
                    39:9d:83:95:d8:28:4f:66:bb:61:5f:68:99:cc:c2:
                    06:98:96:eb:e5:af:1f:a1:dc:85:6e:74:dd:e8:5a:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:97:3A:A5:43:88:39:7C:A0:0F:08:78:25:82:03:7F:DA:25:C2
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134342e302f32302d3234203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:06:35:ae:f3:d5:b7:21:ee:96:1a:8c:9a:35:e3:53:83:
         ec:fd:bd:c0:fe:c2:a5:5f:b8:26:47:f0:45:e4:4a:73:3e:bc:
         de:cb:f5:67:17:5e:2e:96:a8:25:a8:66:aa:39:c0:58:87:4c:
         88:d6:8d:3b:f2:10:51:0e:ca:a8:2c:d6:1e:a5:1a:53:4e:85:
         86:63:bb:57:02:a4:85:52:f4:5b:2c:07:ee:17:5c:5d:e7:9e:
         16:b4:aa:2e:00:fe:3c:c0:8a:96:dc:b8:ec:b5:ae:58:e8:9d:
         dc:74:57:30:d4:b1:47:bf:90:51:b0:90:89:29:d2:c3:ac:08:
         3e:43:65:77:b5:f5:f9:4e:c2:b7:28:dd:b9:ce:ab:4e:11:d4:
         d3:c2:5c:9d:59:11:1d:6e:a4:d5:6b:16:96:17:5c:d7:51:d2:
         29:83:35:7a:7d:cf:d9:95:f5:a3:60:f9:19:85:80:2c:90:fa:
         81:ca:f1:f0:d6:87:c5:3b:8d:08:e3:41:93:b6:63:38:d9:4d:
         ba:ca:7d:37:9f:7e:ae:5e:f7:00:31:80:c1:20:d6:f0:a1:f9:
         07:18:be:c6:cc:2f:69:f1:33:b3:7f:35:89:43:ab:b0:ae:e2:
         e0:fd:0b:0b:c6:fa:83:74:9a:19:0a:fa:3d:4e:e2:07:00:38:
         0b:32:ae:4a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNjZ2FdMCEtkkYVYommarOjiJNjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNTAyMDQxODI2MzNaFw0yNjAyMDMxODMxMzNaMDMxMTAvBgNV
BAMTKEI2QTc5NzNBQTU0Mzg4Mzk3Q0EwMEYwODc4MjU4MjAzN0ZEQTI1QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXF7tde8nspi7P1kaRkhB26WU
r+IJPogjwGd9o9WBps007hNsLfg8hvOM9tOkEOIz6tGV1U70r6MPsuahLrem71Pc
yFVCtrN2em2bgTAzuM0kppLICNJRsqqAFrdPBMY+eAZ+W9RK9LRIG0ZIfJOO1zJf
ynjMEFEWLEuXA3GpwYsbD6xdBmISsOAirTA5Eqov0sTsmddvIrdCMhEbtUKNvcmz
nzqT5BB/5GuRBpZD8Cfwcg4FVItzMIGJe1tAIuiB7CZNBfGHRzDXSeWbfgfxuZbD
qcdtXclGUIgM+nwPtzmdg5XYKE9mu2FfaJnMwgaYluvlrx+h3IVudN3oWuU5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUtqeXOqVDiDl8oA8IeCWCA3/aJcIwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzczOTJlMzEyZTMxMzQzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMDMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASzAZAwDQYJ
KoZIhvcNAQELBQADggEBAEjWBjWu89W3Ie6WGoyaNeNTg+z9vcD+wqVfuCZH8EXk
SnM+vN7L9WcXXi6WqCWoZqo5wFiHTIjWjTvyEFEOyqgs1h6lGlNOhYZju1cCpIVS
9FssB+4XXF3nnha0qi4A/jzAipbcuOy1rljondx0VzDUsUe/kFGwkIkp0sOsCD5D
ZXe19flOwrco3bnOq04R1NPCXJ1ZER1upNVrFpYXXNdR0imDNXp9z9mV9aNg+RmF
gCyQ+oHK8fDWh8U7jQjjQZO2YzjZTbrKfTeffq5e9wAxgMEg1vCh+QcYvsbML2nx
M7N/NYlDq7Cu4uD9CwvG+oN0mhkK+j1O4gcAOAsyrko=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:42 2025 by rpki-client