Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa
File:                     3230312e3135312e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          XdtPSuUE5hbhAdx6ya+pxziDy/sXHvA7QDBjCOEli4c=
Subject key identifier:   EE:D3:87:77:3E:8C:BC:7D:02:2D:83:6D:E5:75:EF:00:FF:F6:84:9B
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       58B9181C6D5DFC3CB2343519E9E98250C0FF0379
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:49 +0000
ROA not before:           Tue 04 Feb 2025 18:47:49 +0000
ROA not after:            Tue 03 Feb 2026 18:52:49 +0000
asID:                     11172
IP address blocks:        201.151.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:18:1c:6d:5d:fc:3c:b2:34:35:19:e9:e9:82:50:c0:ff:03:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:49 2025 GMT
            Not After : Feb  3 18:52:49 2026 GMT
        Subject: CN=EED387773E8CBC7D022D836DE575EF00FFF6849B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:b5:1d:14:49:ca:c2:59:a9:a3:96:a9:43:
                    6a:78:1b:a3:72:8e:43:57:a2:52:1f:a9:5f:35:a8:
                    17:b4:8b:10:fb:07:36:0f:db:af:15:6d:e9:25:2c:
                    b4:f1:58:3b:a5:be:6c:46:f9:0c:b4:20:ae:ad:88:
                    56:3f:9d:2e:f4:3e:1f:8e:a9:d8:a0:74:3f:3b:2b:
                    1c:2b:fa:a7:32:d1:c0:bc:37:5f:c1:bd:33:4f:42:
                    b6:a6:d9:b3:df:e5:bf:c8:00:6e:f6:f5:c7:db:39:
                    bd:7f:67:1e:c8:09:f5:98:2c:e2:e0:6e:a0:04:a1:
                    ad:6c:86:dc:27:ef:7a:54:f2:6a:2f:b1:16:b7:59:
                    f0:0e:2b:f2:92:32:eb:85:cb:21:af:1e:b4:aa:7e:
                    8b:00:98:45:3e:e6:37:94:e7:d5:33:37:63:e0:82:
                    02:1c:7a:58:fd:61:d2:a1:22:09:33:b0:a8:75:23:
                    06:f7:9f:98:1d:a8:b7:a3:43:9c:91:9d:d6:31:10:
                    5e:7b:8b:6b:ec:22:a1:43:d3:79:4f:70:1b:bc:bc:
                    b6:28:59:14:a5:9e:63:49:9f:19:99:bc:ba:95:4c:
                    b6:bb:e0:ac:3b:a5:8b:ec:a2:b9:e2:c1:a0:84:ee:
                    ec:d9:0c:3d:ad:a2:e0:56:6a:3b:17:2d:6e:79:18:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D3:87:77:3E:8C:BC:7D:02:2D:83:6D:E5:75:EF:00:FF:F6:84:9B
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:27:d6:43:92:66:55:d1:c9:f4:b4:44:14:5e:eb:a8:d5:5f:
         7c:c8:c8:f5:49:ce:84:e8:e9:be:95:a5:54:fb:52:ea:b8:bc:
         0a:fb:77:85:99:7a:77:4a:4e:bb:76:b3:94:2b:a7:57:07:79:
         9e:cd:ed:27:93:f8:0d:a1:31:40:ca:e6:66:e9:31:13:cb:8d:
         4c:9d:2f:7d:b5:84:28:e3:60:9e:51:60:c3:a2:e1:7c:78:58:
         70:f6:c1:9f:8d:c7:81:8b:f9:8e:58:47:33:3b:ab:af:00:d6:
         dd:0e:2d:07:d9:06:dd:d0:25:57:54:c7:04:c6:4d:04:90:54:
         8a:59:42:50:0b:6c:03:08:dc:8a:2b:ae:4b:b0:d2:5d:38:17:
         aa:fe:1d:3e:a9:c9:3b:04:4d:43:42:79:d6:8c:9b:a9:21:38:
         8f:ba:c7:df:d7:d8:42:84:72:7c:72:6c:ed:cf:6b:69:46:86:
         ca:ad:33:82:aa:68:76:46:a3:11:86:6b:b7:4f:10:1a:c0:39:
         60:1a:9c:94:09:0d:05:24:d7:1e:7b:f6:d3:72:ca:2e:40:a7:
         06:4b:83:bf:d4:24:31:05:6a:f1:c4:0a:0f:86:6c:f2:29:1d:
         e9:50:ad:48:ef:e3:41:15:b1:e7:74:52:8b:c2:55:4d:7b:c1:
         ed:95:56:dd
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUWLkYHG1d/DyyNDUZ6emCUMD/A3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNTAyMDQxODQ3NDlaFw0yNjAyMDMxODUyNDlaMDMxMTAvBgNV
BAMTKEVFRDM4Nzc3M0U4Q0JDN0QwMjJEODM2REU1NzVFRjAwRkZGNjg0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxrUdFEnKwlmpo5apQ2p4G6Ny
jkNXolIfqV81qBe0ixD7BzYP268VbeklLLTxWDulvmxG+Qy0IK6tiFY/nS70Ph+O
qdigdD87Kxwr+qcy0cC8N1/BvTNPQram2bPf5b/IAG729cfbOb1/Zx7ICfWYLOLg
bqAEoa1shtwn73pU8movsRa3WfAOK/KSMuuFyyGvHrSqfosAmEU+5jeU59UzN2Pg
ggIcelj9YdKhIgkzsKh1Iwb3n5gdqLejQ5yRndYxEF57i2vsIqFD03lPcBu8vLYo
WRSlnmNJnxmZvLqVTLa74Kw7pYvsorniwaCE7uzZDD2touBWajsXLW55GEExAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU7tOHdz6MvH0CLYNt5XXvAP/2hJswHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzMTJlMzEzNTMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzEzMTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDJlzANBgkq
hkiG9w0BAQsFAAOCAQEAYifWQ5JmVdHJ9LREFF7rqNVffMjI9UnOhOjpvpWlVPtS
6ri8Cvt3hZl6d0pOu3azlCunVwd5ns3tJ5P4DaExQMrmZukxE8uNTJ0vfbWEKONg
nlFgw6LhfHhYcPbBn43HgYv5jlhHMzurrwDW3Q4tB9kG3dAlV1THBMZNBJBUillC
UAtsAwjciiuuS7DSXTgXqv4dPqnJOwRNQ0J51oybqSE4j7rH39fYQoRyfHJs7c9r
aUaGyq0zgqpodkajEYZrt08QGsA5YBqclAkNBSTXHnv203LKLkCnBkuDv9QkMQVq
8cQKD4Zs8ikd6VCtSO/jQRWx53RSi8JVTXvB7ZVW3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:40 2025 by rpki-client