Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e3132382e302f31372d3137203d3e2036333036.roa
File:                     3136312e3231322e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          vIYlAd0nddhIRqErrZzTlI84u1CegoTIVTm0Kvs+jyg=
Subject key identifier:   0D:4C:14:2E:AB:8C:23:B5:90:5C:2E:BF:E4:B0:50:38:8E:C8:45:86
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6E0230AFC8A309F3B1EEB12963D2A6457D21C8AC
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:01 +0000
ROA not before:           Tue 04 Feb 2025 18:28:01 +0000
ROA not after:            Tue 03 Feb 2026 18:33:01 +0000
asID:                     6306
IP address blocks:        161.212.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:30:af:c8:a3:09:f3:b1:ee:b1:29:63:d2:a6:45:7d:21:c8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:01 2025 GMT
            Not After : Feb  3 18:33:01 2026 GMT
        Subject: CN=0D4C142EAB8C23B5905C2EBFE4B050388EC84586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:7e:f3:ed:15:09:8a:25:d7:3e:26:ad:0d:
                    75:02:48:a7:de:03:e1:13:dd:a3:a6:8e:28:14:d2:
                    ef:25:30:3b:ba:2f:1e:00:bd:0c:65:91:95:9a:3e:
                    86:f2:09:a8:70:c3:d4:98:e6:02:4f:3c:94:cc:e6:
                    ea:da:8b:bf:8b:df:1d:2e:06:65:b0:92:45:58:c0:
                    ee:64:5c:50:ce:3e:f2:9f:ce:8d:a4:fe:b5:50:4f:
                    b4:5b:2e:c1:5d:b0:47:d1:0e:18:d0:bd:dc:fd:fe:
                    5a:a9:1b:59:ec:23:9d:f1:b2:7e:66:d4:04:d8:f5:
                    1b:74:bf:25:ad:f4:59:62:22:35:3f:0e:6a:e8:38:
                    e3:0d:26:e8:46:59:c1:5e:c2:58:98:bb:d6:d6:a1:
                    35:14:e4:30:2b:60:26:f3:7f:1c:95:ca:87:55:1d:
                    03:6d:c5:f2:22:42:7f:45:f6:64:39:1e:59:53:77:
                    fa:ee:1c:4b:19:78:6a:39:e6:26:1d:6c:9b:41:ce:
                    99:92:19:bb:7e:8e:cc:99:59:27:71:04:e4:74:ee:
                    eb:cf:a0:c5:45:e6:f3:34:55:66:f4:b3:a2:e5:5b:
                    2c:9d:65:95:f3:18:c6:dd:99:5d:fd:ba:f0:6a:97:
                    86:ad:25:92:72:ec:03:a3:32:18:d5:2b:93:e6:53:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:14:2E:AB:8C:23:B5:90:5C:2E:BF:E4:B0:50:38:8E:C8:45:86
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.212.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:25:d7:31:e6:d4:25:3c:bf:98:72:33:91:63:45:25:12:9b:
         e7:25:81:3b:88:13:dc:da:ab:38:07:0b:1c:fa:52:c0:0c:97:
         5c:d0:9e:9a:84:7a:70:a6:68:2f:71:cf:42:22:2f:92:73:f7:
         9a:d5:24:c2:aa:58:87:c1:ea:ee:fc:69:96:1e:c0:bc:47:1f:
         8b:9a:f5:aa:e7:e8:ce:7e:5f:58:e4:95:f9:f9:83:22:53:08:
         18:52:85:3b:2b:16:31:b1:db:ce:0b:9a:b3:55:30:a2:f8:e6:
         e5:ca:20:16:18:1c:31:af:cf:ec:bc:97:e7:c8:fe:ee:23:df:
         90:02:41:ed:58:52:a2:be:d4:03:ce:10:d9:f7:71:86:7e:bd:
         7b:24:eb:82:4e:8a:4a:5b:e2:e3:27:c4:7c:d8:65:fe:47:c3:
         e5:64:8d:cb:24:ec:8a:b2:61:17:95:b3:13:76:78:60:fe:eb:
         66:44:9c:32:17:84:19:ff:2f:7c:b3:b5:fc:e6:39:94:a0:e1:
         80:73:ae:b4:bd:83:cb:1c:af:cc:34:00:d6:fd:64:98:31:9a:
         09:ee:ac:5e:93:4f:fc:a2:74:35:68:52:86:bb:6a:57:37:e5:
         c4:64:80:d0:16:db:c4:64:9b:95:ea:e5:01:07:5c:39:2d:45:
         0e:01:e9:83
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbgIwr8ijCfOx7rEpY9KmRX0hyKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNTAyMDQxODI4MDFaFw0yNjAyMDMxODMzMDFaMDMxMTAvBgNV
BAMTKDBENEMxNDJFQUI4QzIzQjU5MDVDMkVCRkU0QjA1MDM4OEVDODQ1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkY37z7RUJiiXXPiatDXUCSKfe
A+ET3aOmjigU0u8lMDu6Lx4AvQxlkZWaPobyCahww9SY5gJPPJTM5urai7+L3x0u
BmWwkkVYwO5kXFDOPvKfzo2k/rVQT7RbLsFdsEfRDhjQvdz9/lqpG1nsI53xsn5m
1ATY9Rt0vyWt9FliIjU/DmroOOMNJuhGWcFewliYu9bWoTUU5DArYCbzfxyVyodV
HQNtxfIiQn9F9mQ5HllTd/ruHEsZeGo55iYdbJtBzpmSGbt+jsyZWSdxBOR07uvP
oMVF5vM0VWb0s6LlWyydZZXzGMbdmV39uvBql4atJZJy7AOjMhjVK5PmUyy3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDUwULquMI7WQXC6/5LBQOI7IRYYwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzYzMTJlMzIzMTMyMmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzNjMzMzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB6HUgDAN
BgkqhkiG9w0BAQsFAAOCAQEAeSXXMebUJTy/mHIzkWNFJRKb5yWBO4gT3NqrOAcL
HPpSwAyXXNCemoR6cKZoL3HPQiIvknP3mtUkwqpYh8Hq7vxplh7AvEcfi5r1qufo
zn5fWOSV+fmDIlMIGFKFOysWMbHbzguas1Uwovjm5cogFhgcMa/P7LyX58j+7iPf
kAJB7VhSor7UA84Q2fdxhn69eyTrgk6KSlvi4yfEfNhl/kfD5WSNyyTsirJhF5Wz
E3Z4YP7rZkScMheEGf8vfLO1/OY5lKDhgHOutL2DyxyvzDQA1v1kmDGaCe6sXpNP
/KJ0NWhShrtqVzflxGSA0BbbxGSblerlAQdcOS1FDgHpgw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:30 2025 by rpki-client