Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e20323634363638.roa
File:                     3136302e32302e3136342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          vAe9An0nJtdFIDxp+0fHsjE8aqmjCzSIEso3NplMVNI=
Subject key identifier:   03:5D:18:F2:20:CC:A9:01:20:18:F5:C4:AF:C7:8D:3B:5F:79:F0:3E
Certificate issuer:       /CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
Certificate serial:       2AAF8A4E9D6920011EF0ECF5F12C2B54C34E21F4
Authority key identifier: 75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:50:10 +0000
ROA not before:           Tue 04 Feb 2025 18:45:10 +0000
ROA not after:            Tue 03 Feb 2026 18:50:10 +0000
asID:                     264668
IP address blocks:        160.20.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:8a:4e:9d:69:20:01:1e:f0:ec:f5:f1:2c:2b:54:c3:4e:21:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
        Validity
            Not Before: Feb  4 18:45:10 2025 GMT
            Not After : Feb  3 18:50:10 2026 GMT
        Subject: CN=035D18F220CCA9012018F5C4AFC78D3B5F79F03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:28:b3:e0:91:08:9f:15:4e:b7:72:2f:b9:
                    37:76:74:c6:54:a3:21:1b:35:04:d1:88:5e:a5:4b:
                    ad:12:24:d3:17:ea:17:4e:88:ce:57:d1:85:3e:9d:
                    1e:5c:ac:3e:12:0c:68:10:00:ec:a7:2e:3a:7d:55:
                    b4:9f:4d:28:f8:fb:6c:1b:6d:63:79:55:70:20:e2:
                    a3:09:02:a4:33:39:a3:0f:0b:5e:3e:1c:a4:9c:6b:
                    ec:97:19:38:09:f6:34:a6:66:f4:bb:f3:7e:24:11:
                    a0:f8:e4:73:eb:19:5d:9f:44:6c:e3:4a:00:46:6e:
                    a8:1c:09:02:89:8c:25:c6:fa:db:ec:0d:d4:66:ed:
                    5d:fd:df:77:95:86:35:32:7f:5b:4e:dc:33:7d:25:
                    64:bc:84:e8:5c:62:96:1b:48:10:a3:27:79:db:fd:
                    7f:28:f9:d1:98:f4:68:7b:ca:eb:b4:43:23:04:58:
                    64:4a:38:42:1e:d1:5b:f2:3f:05:a4:25:f5:f4:b8:
                    97:51:2d:14:86:70:3b:6e:53:6b:81:44:e3:b9:ce:
                    75:7f:85:ee:5b:ad:0d:a4:1e:26:1f:e9:56:23:a3:
                    27:a3:68:45:9d:4e:09:ac:9b:41:47:50:21:ec:09:
                    89:92:f4:f5:dd:17:ac:a0:08:81:aa:3a:32:f9:8e:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:18:F2:20:CC:A9:01:20:18:F5:C4:AF:C7:8D:3B:5F:79:F0:3E
            X509v3 Authority Key Identifier:
                keyid:75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:03:c2:35:37:4f:f9:1b:30:99:22:96:6f:87:0e:0e:ff:75:
         33:7a:a0:54:f0:f0:a1:7b:dd:06:9e:57:3d:ac:6b:78:e9:d5:
         0f:a0:d2:d0:56:cf:98:63:dc:83:6d:35:66:9d:8f:f5:c2:7f:
         2c:93:6e:36:4b:5e:bd:2c:67:89:ca:70:a0:7a:40:af:ee:58:
         c3:c0:9f:52:e0:3d:2b:7f:a8:86:c4:c8:dd:0c:da:17:e2:19:
         0e:dd:25:ab:c1:bb:fc:8b:de:ae:bd:de:df:26:82:7b:77:a0:
         a8:13:ca:65:aa:3c:6a:cc:86:6a:6e:13:54:cc:03:50:7a:04:
         87:f0:c6:29:1b:49:15:33:c3:98:66:b2:28:9c:51:ac:93:26:
         fa:d1:be:fb:99:c6:d2:66:3c:55:82:fe:ef:39:57:ff:49:43:
         05:8b:4b:1a:14:a4:49:dc:c7:0b:a4:49:ae:d7:a0:1a:64:a3:
         80:bf:f5:b9:15:71:b1:93:32:dd:47:84:44:07:a4:79:f0:35:
         65:3a:6f:7c:84:f7:66:bc:bc:c6:c7:8e:38:f8:1b:e6:29:71:
         2f:88:db:d6:b7:7f:6c:a4:00:9c:fb:23:07:be:98:e0:ea:f8:
         b8:87:6a:9f:52:01:55:f2:a8:ad:e2:7c:99:b0:64:5d:67:39:
         a9:12:24:7c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKq+KTp1pIAEe8Oz18SwrVMNOIfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU0RTRCRDczQUVCQkEwODJDRjQ0RkY3MzgwMTczQUVF
OUU1QkY4NjAeFw0yNTAyMDQxODQ1MTBaFw0yNjAyMDMxODUwMTBaMDMxMTAvBgNV
BAMTKDAzNUQxOEYyMjBDQ0E5MDEyMDE4RjVDNEFGQzc4RDNCNUY3OUYwM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45iiz4JEInxVOt3IvuTd2dMZU
oyEbNQTRiF6lS60SJNMX6hdOiM5X0YU+nR5crD4SDGgQAOynLjp9VbSfTSj4+2wb
bWN5VXAg4qMJAqQzOaMPC14+HKSca+yXGTgJ9jSmZvS7834kEaD45HPrGV2fRGzj
SgBGbqgcCQKJjCXG+tvsDdRm7V3933eVhjUyf1tO3DN9JWS8hOhcYpYbSBCjJ3nb
/X8o+dGY9Gh7yuu0QyMEWGRKOEIe0VvyPwWkJfX0uJdRLRSGcDtuU2uBROO5znV/
he5brQ2kHiYf6VYjoyejaEWdTgmsm0FHUCHsCYmS9PXdF6ygCIGqOjL5jslxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUA10Y8iDMqQEgGPXEr8eNO1958D4wHwYDVR0j
BBgwFoAUdU5L1zrruggs9E/3OAFzrunlv4YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMzhBRjM1QzVFOEVCNzNCRTkwMjRENzlGNTFCNTYwOUQx
RjI0MDk4QzhFMzIyREE1MzgyRkUxN0I2OTE1NUExLzAvNzU0RTRCRDczQUVCQkEw
ODJDRjQ0RkY3MzgwMTczQUVFOUU1QkY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTRFNEJENzNBRUJCQTA4MkNG
NDRGRjczODAxNzNBRUU5RTVCRjg2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzM4QUYzNUM1RThFQjczQkU5MDI0RDc5RjUxQjU2MDlEMUYyNDA5OEM4
RTMyMkRBNTM4MkZFMTdCNjkxNTVBMS8wLzMxMzYzMDJlMzIzMDJlMzEzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoBSk
MA0GCSqGSIb3DQEBCwUAA4IBAQCMA8I1N0/5GzCZIpZvhw4O/3UzeqBU8PChe90G
nlc9rGt46dUPoNLQVs+YY9yDbTVmnY/1wn8sk242S169LGeJynCgekCv7ljDwJ9S
4D0rf6iGxMjdDNoX4hkO3SWrwbv8i96uvd7fJoJ7d6CoE8plqjxqzIZqbhNUzANQ
egSH8MYpG0kVM8OYZrIonFGskyb60b77mcbSZjxVgv7vOVf/SUMFi0saFKRJ3McL
pEmu16AaZKOAv/W5FXGxkzLdR4REB6R58DVlOm98hPdmvLzGx444+BvmKXEviNvW
t39spACc+yMHvpjg6vi4h2qfUgFV8qit4nyZsGRdZzmpEiR8
-----END CERTIFICATE-----