Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa
File:                     3230312e3135312e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          v5UeSMqz/WX6on2HhH0slhMN0NiQa51axN0PeV7atSs=
Subject key identifier:   70:42:6F:BC:55:DF:47:AC:5C:73:08:9D:7D:2C:6D:5E:39:9D:E3:8C
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       527CE5F89DA26785CFE1A68C02AA2EC357F7206F
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:52:41 +0000
ROA not before:           Tue 04 Feb 2025 18:47:41 +0000
ROA not after:            Tue 03 Feb 2026 18:52:41 +0000
asID:                     6503
IP address blocks:        201.151.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7c:e5:f8:9d:a2:67:85:cf:e1:a6:8c:02:aa:2e:c3:57:f7:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:41 2025 GMT
            Not After : Feb  3 18:52:41 2026 GMT
        Subject: CN=70426FBC55DF47AC5C73089D7D2C6D5E399DE38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:e5:cb:19:e1:fd:d6:f7:bb:0f:c5:93:cd:
                    f5:43:1d:1b:6b:a8:b6:20:22:4d:21:46:75:a0:f7:
                    1f:3f:be:bf:58:4b:16:cc:32:bf:a3:e5:dd:4e:82:
                    fb:dd:6e:8d:d3:df:77:06:8d:e9:b1:f1:65:78:bd:
                    7f:24:75:61:31:df:6d:53:86:be:a0:e9:23:87:c4:
                    8a:5f:f9:42:aa:b4:27:a1:ed:ce:0d:86:e2:b0:5c:
                    10:6b:44:f6:e0:cb:be:6b:69:93:dc:dd:92:21:84:
                    6a:44:58:d9:7b:66:b6:2c:69:33:52:f1:fc:af:a7:
                    0d:f7:d7:3d:c7:51:14:60:2d:d5:83:99:f6:93:58:
                    6b:87:d1:1d:56:22:d4:63:d1:36:92:e4:7a:53:3d:
                    a9:cd:e1:18:4c:f2:f9:91:3d:7f:5f:bb:c4:fa:d2:
                    f5:53:41:07:20:61:80:8e:e6:df:1d:44:01:87:36:
                    32:72:4d:cf:57:f2:89:e5:f5:7b:57:31:72:9c:85:
                    27:f0:0e:93:7b:3c:59:50:ec:1f:ca:2a:b5:87:0b:
                    57:44:49:a1:ca:87:5c:96:2c:22:82:8f:61:c6:1c:
                    07:53:07:9d:c2:65:82:01:b7:74:43:17:34:64:75:
                    bb:2f:c4:2e:f6:32:69:c3:bd:ac:4a:98:ed:d0:83:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:6F:BC:55:DF:47:AC:5C:73:08:9D:7D:2C:6D:5E:39:9D:E3:8C
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:84:44:99:7a:84:32:b5:df:5e:fe:af:cb:b1:26:67:ce:bd:
         52:95:6f:73:50:1c:3e:8c:71:73:6c:34:3f:ef:04:c0:af:7a:
         6a:f6:73:7b:94:2d:88:69:c6:91:df:96:42:cd:a7:50:0f:28:
         20:54:37:48:06:a2:4b:50:b5:c0:68:58:8c:4a:e5:25:0d:3f:
         6b:d8:2d:f6:18:11:b2:d2:e3:f7:df:96:c4:68:db:77:c0:74:
         c1:5f:4e:05:59:91:81:7e:fb:33:1b:6b:5c:f9:f1:7b:9c:dd:
         66:f9:a1:95:fc:fc:6b:d9:d1:0c:58:72:70:08:44:af:3b:bf:
         64:4f:e7:90:20:5f:ad:0f:16:e3:c5:f9:2c:8b:96:b8:d3:9e:
         70:8b:2f:33:4b:e5:84:7b:8e:48:5f:e4:96:8a:ff:cd:0e:06:
         4b:79:78:81:d5:a0:90:cf:17:72:56:03:20:37:02:f8:5e:f8:
         49:06:2c:ad:32:c4:f5:37:a4:26:f4:89:81:30:7b:99:29:cf:
         15:a3:fd:97:63:5c:f3:b6:3c:f2:0a:98:af:d2:73:80:2e:61:
         2b:60:6d:a2:93:a6:b5:04:c2:85:f3:55:01:de:29:50:57:af:
         98:ed:4d:16:55:52:62:9c:11:c6:b4:bc:80:60:61:83:27:c3:
         35:66:88:8d
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUUnzl+J2iZ4XP4aaMAqouw1f3IG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNTAyMDQxODQ3NDFaFw0yNjAyMDMxODUyNDFaMDMxMTAvBgNV
BAMTKDcwNDI2RkJDNTVERjQ3QUM1QzczMDg5RDdEMkM2RDVFMzk5REUzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqleXLGeH91ve7D8WTzfVDHRtr
qLYgIk0hRnWg9x8/vr9YSxbMMr+j5d1Ogvvdbo3T33cGjemx8WV4vX8kdWEx321T
hr6g6SOHxIpf+UKqtCeh7c4NhuKwXBBrRPbgy75raZPc3ZIhhGpEWNl7ZrYsaTNS
8fyvpw331z3HURRgLdWDmfaTWGuH0R1WItRj0TaS5HpTPanN4RhM8vmRPX9fu8T6
0vVTQQcgYYCO5t8dRAGHNjJyTc9X8onl9XtXMXKchSfwDpN7PFlQ7B/KKrWHC1dE
SaHKh1yWLCKCj2HGHAdTB53CZYIBt3RDFzRkdbsvxC72MmnDvaxKmO3QgzI1AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUcEJvvFXfR6xccwidfSxtXjmd44wwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzMTJlMzEzNTMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyZcwDQYJKoZI
hvcNAQELBQADggEBAJiERJl6hDK1317+r8uxJmfOvVKVb3NQHD6McXNsND/vBMCv
emr2c3uULYhpxpHflkLNp1APKCBUN0gGoktQtcBoWIxK5SUNP2vYLfYYEbLS4/ff
lsRo23fAdMFfTgVZkYF++zMba1z58Xuc3Wb5oZX8/GvZ0QxYcnAIRK87v2RP55Ag
X60PFuPF+SyLlrjTnnCLLzNL5YR7jkhf5JaK/80OBkt5eIHVoJDPF3JWAyA3Avhe
+EkGLK0yxPU3pCb0iYEwe5kpzxWj/ZdjXPO2PPIKmK/Sc4AuYStgbaKTprUEwoXz
VQHeKVBXr5jtTRZVUmKcEca0vIBgYYMnwzVmiI0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:12 2025 by rpki-client