Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e302f32342d3234203d3e20323635363332.roa
File:                     3133312e3139362e392e302f32342d3234203d3e20323635363332.roa (raw, json)
Hash identifier:          Jrkzfn5rD8YakmJwk3bdRqN7WJrjDuVKpTyE5CgW7uc=
Subject key identifier:   14:98:1D:03:1C:13:21:F9:4F:3D:0F:90:4F:49:A7:02:A6:24:0A:50
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       375087F85140A70D4945280CE82ADE82AEE253F0
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e302f32342d3234203d3e20323635363332.roa
Signing time:             Tue 04 Feb 2025 18:54:27 +0000
ROA not before:           Tue 04 Feb 2025 18:49:27 +0000
ROA not after:            Tue 03 Feb 2026 18:54:27 +0000
asID:                     265632
IP address blocks:        131.196.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:50:87:f8:51:40:a7:0d:49:45:28:0c:e8:2a:de:82:ae:e2:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Feb  4 18:49:27 2025 GMT
            Not After : Feb  3 18:54:27 2026 GMT
        Subject: CN=14981D031C1321F94F3D0F904F49A702A6240A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:8d:b1:77:29:c6:d8:29:df:21:21:b2:77:
                    dc:67:33:70:12:dd:4c:17:61:82:58:ab:20:31:d9:
                    12:86:9e:0e:aa:35:69:71:e0:6b:ea:60:bf:20:e5:
                    8f:1b:2a:e6:81:86:c1:0f:28:d6:68:32:11:f2:6a:
                    ec:5f:d1:d6:60:17:68:38:77:fe:57:c7:98:07:bc:
                    97:31:3e:dc:4d:61:94:4f:e0:70:cb:9b:64:69:98:
                    9d:19:39:e8:3b:5c:93:01:05:79:2d:0b:db:d3:06:
                    5c:66:4c:59:8e:b2:40:a0:d1:55:b3:96:2a:86:af:
                    e6:77:60:cf:8a:b9:cf:99:7c:50:86:76:bf:08:89:
                    75:22:de:df:e4:cf:2f:94:64:fa:17:a7:06:43:1c:
                    9b:db:d6:11:15:ca:8b:be:54:c1:12:16:14:81:f4:
                    f7:de:43:87:1e:d5:28:91:2e:fe:be:34:8e:e7:e5:
                    a2:78:e7:fb:5d:29:14:72:54:a4:77:5b:b3:1a:15:
                    2a:5d:c3:c3:62:d5:df:d0:62:21:6d:2a:bc:77:a0:
                    f0:de:5c:92:64:6a:06:7b:18:f0:21:29:19:c2:32:
                    26:9e:12:1d:ab:47:9b:da:2f:18:0d:f6:f1:11:48:
                    aa:50:23:10:b2:3b:93:8c:7f:45:8e:64:eb:71:16:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:1D:03:1C:13:21:F9:4F:3D:0F:90:4F:49:A7:02:A6:24:0A:50
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e302f32342d3234203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:8d:59:1b:73:83:a1:79:f8:07:a6:00:dd:81:67:1b:08:99:
         b8:0b:1e:4c:95:76:5a:a9:78:a6:03:65:ed:07:28:58:85:35:
         fd:18:62:c3:62:08:cb:5a:60:f1:89:84:0b:bc:63:aa:c0:51:
         81:23:5b:ec:f5:d5:1b:fd:cf:19:57:84:d1:e7:ca:6d:7f:9d:
         c1:2f:68:44:6d:eb:d6:8e:a8:92:c2:83:a2:27:45:cd:76:ec:
         66:d2:e1:58:06:72:75:4c:ca:8b:00:cc:6c:75:0b:64:96:ca:
         24:8b:7c:94:6b:d4:45:88:9c:11:9c:0b:97:32:8a:c9:01:e8:
         c2:e8:2c:63:07:39:a0:54:fe:0a:1d:52:3c:3e:b3:46:de:f8:
         3b:01:67:47:c2:13:7a:5f:da:b0:6c:e1:0e:4e:4a:14:46:15:
         7e:ee:b9:3e:0c:c2:10:d3:04:19:c8:49:81:2f:9a:cb:9f:41:
         be:3c:06:ad:39:cc:e4:0b:d2:9a:d3:48:4c:f5:6e:82:e0:86:
         0a:a3:b3:92:97:67:c8:ff:71:44:74:85:0a:26:70:cc:d9:63:
         b2:57:c0:1d:cc:6d:90:de:90:bf:4c:6f:11:56:c4:2b:af:b4:
         c0:27:28:e6:e5:63:80:21:e3:4b:71:47:8d:bf:2c:c8:bb:73:
         d0:14:b8:72
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN1CH+FFApw1JRSgM6Cregq7iU/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGMzdBMzRGMzMzMTgwMTI1ODFBNzE5RTc3MUY4NzE1
NTJEMDUwOTAeFw0yNTAyMDQxODQ5MjdaFw0yNjAyMDMxODU0MjdaMDMxMTAvBgNV
BAMTKDE0OTgxRDAzMUMxMzIxRjk0RjNEMEY5MDRGNDlBNzAyQTYyNDBBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1I2xdynG2CnfISGyd9xnM3AS
3UwXYYJYqyAx2RKGng6qNWlx4GvqYL8g5Y8bKuaBhsEPKNZoMhHyauxf0dZgF2g4
d/5Xx5gHvJcxPtxNYZRP4HDLm2RpmJ0ZOeg7XJMBBXktC9vTBlxmTFmOskCg0VWz
liqGr+Z3YM+Kuc+ZfFCGdr8IiXUi3t/kzy+UZPoXpwZDHJvb1hEVyou+VMESFhSB
9PfeQ4ce1SiRLv6+NI7n5aJ45/tdKRRyVKR3W7MaFSpdw8Ni1d/QYiFtKrx3oPDe
XJJkagZ7GPAhKRnCMiaeEh2rR5vaLxgN9vERSKpQIxCyO5OMf0WOZOtxFi0xAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFJgdAxwTIflPPQ+QT0mnAqYkClAwHwYDVR0j
BBgwFoAU8PN6NPMzGAElgacZ53H4cVUtBQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTBBOUM3MjMzODVGNjFBNjU5QjZFN0IwNzA4MzA3OUE1
MUFFRTRGODUyMzA1OTNCRTk2MzRCNTk3NkJDNTM5LzAvRjBGMzdBMzRGMzMzMTgw
MTI1ODFBNzE5RTc3MUY4NzE1NTJEMDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEYzN0EzNEYzMzMxODAxMjU4
MUE3MTlFNzcxRjg3MTU1MkQwNTA5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUEwQTlDNzIzMzg1RjYxQTY1OUI2RTdCMDcwODMwNzlBNTFBRUU0Rjg1
MjMwNTkzQkU5NjM0QjU5NzZCQzUzOS8wLzMxMzMzMTJlMzEzOTM2MmUzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM2MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPECTAN
BgkqhkiG9w0BAQsFAAOCAQEA1Y1ZG3ODoXn4B6YA3YFnGwiZuAseTJV2Wql4pgNl
7QcoWIU1/Rhiw2IIy1pg8YmEC7xjqsBRgSNb7PXVG/3PGVeE0efKbX+dwS9oRG3r
1o6oksKDoidFzXbsZtLhWAZydUzKiwDMbHULZJbKJIt8lGvURYicEZwLlzKKyQHo
wugsYwc5oFT+Ch1SPD6zRt74OwFnR8ITel/asGzhDk5KFEYVfu65PgzCENMEGchJ
gS+ay59BvjwGrTnM5AvSmtNITPVuguCGCqOzkpdnyP9xRHSFCiZwzNljslfAHcxt
kN6Qv0xvEVbEK6+0wCco5uVjgCHjS3FHjb8syLtz0BS4cg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:21 2025 by rpki-client