Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
File:                     3230312e3133312e332e302f32342d3234203d3e203234393430.roa (raw, json)
Hash identifier:          pdQyC2rCpEZ1Bkw5uF3X3rgoMYG8SFFF+myOTaullPg=
Subject key identifier:   32:76:45:0F:0D:95:E8:60:E7:74:16:16:3B:E4:AE:33:B5:AC:36:0C
Certificate issuer:       /CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
Certificate serial:       59F719AFB03D7585638AD8C12965E337BF1FF18C
Authority key identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
Signing time:             Tue 04 Feb 2025 18:23:45 +0000
ROA not before:           Tue 04 Feb 2025 18:18:45 +0000
ROA not after:            Tue 03 Feb 2026 18:23:45 +0000
asID:                     24940
IP address blocks:        201.131.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:19:af:b0:3d:75:85:63:8a:d8:c1:29:65:e3:37:bf:1f:f1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
        Validity
            Not Before: Feb  4 18:18:45 2025 GMT
            Not After : Feb  3 18:23:45 2026 GMT
        Subject: CN=3276450F0D95E860E77416163BE4AE33B5AC360C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:21:a7:e5:b3:f3:f7:d1:9f:76:b3:95:92:
                    87:7e:d1:09:d1:2a:a4:61:db:bb:24:43:76:a0:be:
                    fc:0d:a8:e2:89:f4:e3:c0:e6:c3:96:e8:0a:da:10:
                    0a:9a:da:f3:df:1b:fe:af:23:50:44:a3:ad:e3:84:
                    39:63:ce:b9:9e:a9:8e:5f:09:a6:58:d9:9a:d8:2d:
                    2f:3a:34:6b:05:bb:79:3a:4a:7d:dd:fb:f4:8e:e6:
                    d1:c2:f9:18:8d:99:bc:2a:c7:c8:8a:bb:56:a7:e8:
                    7b:1c:59:2b:0c:0c:e4:8a:41:88:22:c7:62:09:34:
                    f9:f8:50:a2:42:ce:7d:ff:90:01:79:fc:1c:39:d9:
                    39:99:24:f7:a3:03:58:66:fa:ae:c4:6b:9e:ca:5e:
                    89:c1:32:0b:f1:d9:a2:4c:7c:fe:1a:51:23:c0:2f:
                    ed:28:32:c2:71:07:c4:ec:ee:bd:2e:9f:3c:73:7b:
                    d7:91:9b:e4:89:6f:22:d5:26:71:8c:7d:56:40:cb:
                    34:69:da:0e:60:7c:21:59:71:29:0c:05:a9:ff:cd:
                    be:c0:a4:d2:1e:08:70:b3:6c:43:15:56:05:7d:2c:
                    a6:5f:99:a0:6b:72:f7:f7:02:b0:e7:4e:f9:15:b0:
                    d8:2a:5c:8b:0b:ff:56:09:f0:dc:27:97:63:4f:28:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:76:45:0F:0D:95:E8:60:E7:74:16:16:3B:E4:AE:33:B5:AC:36:0C
            X509v3 Authority Key Identifier:
                keyid:AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:d2:26:b9:b1:0b:87:c2:40:2f:ec:08:68:cc:b4:64:0d:
         f9:d1:f3:1b:dc:c2:a1:54:8f:e8:8d:31:a8:a5:8c:53:d0:75:
         fa:d4:0d:e6:82:f4:1d:ba:cc:9c:5a:ec:3f:fd:80:2f:a3:f9:
         da:11:9e:ec:e5:09:34:7e:11:62:66:4a:3f:41:5d:47:ea:50:
         e3:4b:2b:c1:a2:ed:62:fe:e1:b9:39:97:85:d1:cf:5e:ba:ee:
         4d:ea:3c:88:3f:75:10:1d:88:42:b8:69:8c:04:b6:25:13:7b:
         ac:e6:3f:f8:a9:9c:8a:de:9f:db:f0:0c:34:7b:e8:5d:88:dc:
         53:82:40:57:56:12:64:77:d5:55:53:7a:05:de:0f:bc:fc:4d:
         b0:2a:e9:47:d4:59:d9:66:b1:d1:54:04:ee:4d:ac:c5:54:b3:
         35:6e:ec:48:bd:74:01:ab:38:bd:54:d8:1d:14:38:12:97:07:
         4c:06:08:80:c6:2a:4d:0b:ac:1d:55:40:cf:a9:c8:b8:00:ed:
         5d:8b:12:6c:9b:cd:c9:77:ec:fd:f1:3f:ae:d3:b4:3c:82:3c:
         6d:f6:4a:83:3a:0c:48:6c:17:6f:1b:d7:06:8b:f3:3a:ff:9a:
         8b:78:14:a9:c5:be:c5:43:7c:5a:1f:d8:a1:60:e9:25:f6:d3:
         8a:73:86:9e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWfcZr7A9dYVjitjBKWXjN78f8YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJBMjM1RjhFMkVGQkYxMEQ4OUU5NjQ0N0Y2MUJCQTkw
Q0YxNDgxMTAeFw0yNTAyMDQxODE4NDVaFw0yNjAyMDMxODIzNDVaMDMxMTAvBgNV
BAMTKDMyNzY0NTBGMEQ5NUU4NjBFNzc0MTYxNjNCRTRBRTMzQjVBQzM2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MSGn5bPz99GfdrOVkod+0QnR
KqRh27skQ3agvvwNqOKJ9OPA5sOW6AraEAqa2vPfG/6vI1BEo63jhDljzrmeqY5f
CaZY2ZrYLS86NGsFu3k6Sn3d+/SO5tHC+RiNmbwqx8iKu1an6HscWSsMDOSKQYgi
x2IJNPn4UKJCzn3/kAF5/Bw52TmZJPejA1hm+q7Ea57KXonBMgvx2aJMfP4aUSPA
L+0oMsJxB8Ts7r0unzxze9eRm+SJbyLVJnGMfVZAyzRp2g5gfCFZcSkMBan/zb7A
pNIeCHCzbEMVVgV9LKZfmaBrcvf3ArDnTvkVsNgqXIsL/1YJ8Nwnl2NPKC4tAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMnZFDw2V6GDndBYWO+SuM7WsNgwwHwYDVR0j
BBgwFoAUq6I1+OLvvxDYnpZEf2G7qQzxSBEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkEwRkFCRDUyQTlGOERBODY2RDdFMDNFQzY5RDA3MERE
OUE1NkU2NUI3Q0IzOUVFNTE3RDY1NzE3NjVENENDLzAvQUJBMjM1RjhFMkVGQkYx
MEQ4OUU5NjQ0N0Y2MUJCQTkwQ0YxNDgxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQkEyMzVGOEUyRUZCRjEwRDg5
RTk2NDQ3RjYxQkJBOTBDRjE0ODExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJBMEZBQkQ1MkE5RjhEQTg2NkQ3RTAzRUM2OUQwNzBERDlBNTZFNjVC
N0NCMzlFRTUxN0Q2NTcxNzY1RDRDQy8wLzMyMzAzMTJlMzEzMzMxMmUzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQzOTM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJgwMwDQYJ
KoZIhvcNAQELBQADggEBAGKL0ia5sQuHwkAv7AhozLRkDfnR8xvcwqFUj+iNMail
jFPQdfrUDeaC9B26zJxa7D/9gC+j+doRnuzlCTR+EWJmSj9BXUfqUONLK8Gi7WL+
4bk5l4XRz1667k3qPIg/dRAdiEK4aYwEtiUTe6zmP/ipnIren9vwDDR76F2I3FOC
QFdWEmR31VVTegXeD7z8TbAq6UfUWdlmsdFUBO5NrMVUszVu7Ei9dAGrOL1U2B0U
OBKXB0wGCIDGKk0LrB1VQM+pyLgA7V2LEmybzcl37P3xP67TtDyCPG32SoM6DEhs
F28b1waL8zr/mot4FKnFvsVDfFof2KFg6SX204pzhp4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:55 2025 by rpki-client