Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32322d3232203d3e20323635363838.roa
File:                     3133382e3131372e38342e302f32322d3232203d3e20323635363838.roa (raw, json)
Hash identifier:          CpWjopWQDesPmiaIBNEKCHDfZWlB2Lz1Lx+/uPs4Xys=
Subject key identifier:   40:BF:80:B5:4A:A3:C1:EB:32:20:F5:AE:1A:FE:F3:09:BE:BA:A0:CD
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       2F94E9EE31B6562E23AE2F7D92C0EEDE18B5C916
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32322d3232203d3e20323635363838.roa
Signing time:             Fri 07 Mar 2025 16:11:26 +0000
ROA not before:           Fri 07 Mar 2025 16:06:26 +0000
ROA not after:            Fri 06 Mar 2026 16:11:26 +0000
asID:                     265688
IP address blocks:        138.117.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:94:e9:ee:31:b6:56:2e:23:ae:2f:7d:92:c0:ee:de:18:b5:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Mar  7 16:06:26 2025 GMT
            Not After : Mar  6 16:11:26 2026 GMT
        Subject: CN=40BF80B54AA3C1EB3220F5AE1AFEF309BEBAA0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:35:c3:ca:4d:4a:4d:eb:8c:dc:5d:78:46:
                    df:7f:87:c5:fe:4a:75:4c:f7:df:4d:0a:7d:cc:88:
                    35:8e:a6:f3:22:72:d8:cb:a8:61:74:8a:82:5c:d8:
                    18:a9:ac:be:0b:4b:a2:60:6f:f0:e4:50:cc:3b:b4:
                    51:67:e4:f6:b1:ea:bc:87:e1:70:82:b1:32:59:f2:
                    08:bf:2c:e2:d8:81:1d:1e:ec:66:5b:f0:93:23:2c:
                    00:d3:81:e9:de:c7:26:79:12:49:8b:fb:04:37:19:
                    ec:8d:0c:31:b8:c4:b2:58:d5:43:d3:52:a1:96:20:
                    0a:8c:8d:c8:e9:c9:65:64:b5:be:b2:75:d5:32:04:
                    fb:33:ab:5b:f8:ea:0b:a3:86:a5:7d:2f:58:94:8c:
                    40:00:4e:73:20:95:42:c1:fe:eb:86:1c:a5:85:4f:
                    39:9e:7d:5e:b9:f2:ee:4c:8f:1a:86:d6:41:59:c6:
                    3e:26:ff:b8:2b:4b:17:07:fb:c3:75:0a:af:2a:32:
                    4c:8e:28:31:dd:8f:5f:61:c7:09:5c:78:be:c9:7b:
                    99:f7:d5:a5:d1:95:0a:17:ef:d4:ce:0d:de:ec:fd:
                    70:16:53:97:2a:d4:4a:8d:34:0e:c8:2c:3b:43:78:
                    3e:9f:a7:ad:ba:8e:71:3b:eb:92:2b:5d:22:19:c9:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BF:80:B5:4A:A3:C1:EB:32:20:F5:AE:1A:FE:F3:09:BE:BA:A0:CD
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32322d3232203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:14:08:97:7b:27:bf:f4:11:cc:73:5e:4b:19:28:90:2c:3d:
         6f:41:78:2e:c7:d8:33:a7:7b:66:03:20:ff:81:f4:46:1f:bd:
         b9:d1:6e:f5:13:f0:06:e7:f4:1f:8b:95:c8:d9:7c:4e:f2:de:
         a6:a4:57:0f:70:63:87:0b:1e:f7:d1:27:2b:7c:88:97:a9:f6:
         ce:0e:47:73:0e:17:60:91:53:db:c9:d3:a7:f6:90:ac:19:7d:
         26:7d:3d:34:32:38:cd:6a:a3:7e:39:9b:57:92:b4:2e:d9:aa:
         a7:64:58:89:4a:3a:39:7c:32:90:99:33:57:6e:f2:21:97:18:
         c7:e8:86:61:11:fe:c5:01:ba:e1:61:4d:73:ce:e5:a9:52:05:
         ab:2e:21:25:5b:61:1c:5d:b8:29:8b:d0:cf:10:98:4f:e0:52:
         3a:66:42:a8:8e:27:f8:b3:6a:4a:50:a9:78:ba:bf:13:00:22:
         55:5e:a9:46:ab:01:8e:cb:a9:98:f6:71:b8:f4:69:63:76:6c:
         ea:75:cf:79:0a:0d:1a:ce:32:2c:7c:58:45:05:1d:48:a1:c4:
         86:22:5d:17:d0:03:16:1b:f8:b8:69:f8:0e:2c:68:1d:e4:ac:
         09:59:33:6d:1f:46:0c:d7:32:d5:97:9e:2d:54:1d:ad:dc:78:
         a3:bc:41:12
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL5Tp7jG2Vi4jri99ksDu3hi1yRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJEREUwOTFDRDUxRjY3MTQ5NDJBNTI2N0ZCQzRCODBB
RkI0RTAyMjAeFw0yNTAzMDcxNjA2MjZaFw0yNjAzMDYxNjExMjZaMDMxMTAvBgNV
BAMTKDQwQkY4MEI1NEFBM0MxRUIzMjIwRjVBRTFBRkVGMzA5QkVCQUEwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljDXDyk1KTeuM3F14Rt9/h8X+
SnVM999NCn3MiDWOpvMictjLqGF0ioJc2BiprL4LS6Jgb/DkUMw7tFFn5Pax6ryH
4XCCsTJZ8gi/LOLYgR0e7GZb8JMjLADTgenexyZ5EkmL+wQ3GeyNDDG4xLJY1UPT
UqGWIAqMjcjpyWVktb6yddUyBPszq1v46gujhqV9L1iUjEAATnMglULB/uuGHKWF
TzmefV658u5MjxqG1kFZxj4m/7grSxcH+8N1Cq8qMkyOKDHdj19hxwlceL7Je5n3
1aXRlQoX79TODd7s/XAWU5cq1EqNNA7ILDtDeD6fp626jnE765IrXSIZyQgjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQL+AtUqjwesyIPWuGv7zCb66oM0wHwYDVR0j
BBgwFoAU693gkc1R9nFJQqUmf7xLgK+04CIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTBGODQ3NDM3MDYyNTNBOUU5MTlCRkM3MTRDNEQ2RERD
NEU3M0Q1REQyN0NENTVEQTI3QURDREI4NjJBMTVDLzAvRUJEREUwOTFDRDUxRjY3
MTQ5NDJBNTI2N0ZCQzRCODBBRkI0RTAyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkRERTA5MUNENTFGNjcxNDk0
MkE1MjY3RkJDNEI4MEFGQjRFMDIyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEwRjg0NzQzNzA2MjUzQTlFOTE5QkZDNzE0QzRENkREQzRFNzNENURE
MjdDRDU1REEyN0FEQ0RCODYyQTE1Qy8wLzMxMzMzODJlMzEzMTM3MmUzODM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzYzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinVU
MA0GCSqGSIb3DQEBCwUAA4IBAQBcFAiXeye/9BHMc15LGSiQLD1vQXgux9gzp3tm
AyD/gfRGH7250W71E/AG5/Qfi5XI2XxO8t6mpFcPcGOHCx730ScrfIiXqfbODkdz
DhdgkVPbydOn9pCsGX0mfT00MjjNaqN+OZtXkrQu2aqnZFiJSjo5fDKQmTNXbvIh
lxjH6IZhEf7FAbrhYU1zzuWpUgWrLiElW2EcXbgpi9DPEJhP4FI6ZkKojif4s2pK
UKl4ur8TACJVXqlGqwGOy6mY9nG49Gljdmzqdc95Cg0azjIsfFhFBR1IocSGIl0X
0AMWG/i4afgOLGgd5KwJWTNtH0YM1zLVl54tVB2t3HijvEES
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:51:10 2025 by rpki-client