Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa
File:                     3138362e36352e38342e302f32322d3234203d3e203532333830.roa (raw, json)
Hash identifier:          CSmdXZCWp9HZHzLhXdyReO+MeP4FY51BDMpCX8hEKFM=
Subject key identifier:   0C:78:B4:7F:6B:45:B5:9F:E8:65:47:23:EB:3A:C5:AE:61:1A:2F:C8
Certificate issuer:       /CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
Certificate serial:       454DD92A543628DE8D5D83F7B176731756A16565
Authority key identifier: 98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa
Signing time:             Tue 04 Feb 2025 18:09:36 +0000
ROA not before:           Tue 04 Feb 2025 18:04:36 +0000
ROA not after:            Tue 03 Feb 2026 18:09:36 +0000
asID:                     52380
IP address blocks:        186.65.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:d9:2a:54:36:28:de:8d:5d:83:f7:b1:76:73:17:56:a1:65:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
        Validity
            Not Before: Feb  4 18:04:36 2025 GMT
            Not After : Feb  3 18:09:36 2026 GMT
        Subject: CN=0C78B47F6B45B59FE8654723EB3AC5AE611A2FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:2b:54:15:e9:58:4a:2b:ed:aa:1e:6f:39:
                    f5:54:00:a2:84:0f:21:76:8e:98:72:cd:2a:b4:99:
                    02:66:72:73:06:3f:03:4a:55:81:d8:52:9d:9c:de:
                    ff:d9:92:87:cb:a4:7a:33:23:91:de:ed:81:e8:3e:
                    06:f0:2e:00:d2:c2:70:3a:3d:5a:23:66:48:71:40:
                    52:7b:60:b5:ab:f9:60:89:1b:40:ec:6d:d4:b9:d5:
                    fc:52:5c:14:fc:ef:ba:f4:fd:dd:7a:dd:a8:10:71:
                    47:15:d9:83:85:c5:ea:a0:a3:17:a0:65:33:62:8b:
                    97:b9:ff:f9:a7:95:de:30:dc:d3:ed:f5:4e:b8:69:
                    44:91:2e:86:c2:ce:32:fb:e6:89:bb:38:02:42:4a:
                    0c:60:77:aa:74:27:90:38:69:2f:1e:db:5a:15:5d:
                    7a:b0:6b:2e:cb:6a:56:1d:49:ea:2a:9d:68:ee:81:
                    e6:aa:9b:ac:8c:1e:b5:9d:0b:1f:1d:6b:05:91:c7:
                    62:27:ce:a2:5b:f4:6b:7a:07:14:e0:e7:5a:ca:f8:
                    8e:70:4a:aa:4e:1b:15:08:25:23:53:ad:2f:28:b1:
                    f1:27:1d:e7:ee:33:a5:2b:5e:11:22:ef:16:7b:e8:
                    db:c7:03:95:a5:f5:04:4f:cd:91:dd:74:9d:e2:38:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:78:B4:7F:6B:45:B5:9F:E8:65:47:23:EB:3A:C5:AE:61:1A:2F:C8
            X509v3 Authority Key Identifier:
                keyid:98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:c9:2a:e6:74:26:a4:f5:87:87:28:1d:1b:10:97:00:90:7f:
         62:e6:c5:42:b9:83:c2:2c:6f:6b:98:66:cb:cc:67:58:dc:6f:
         c2:92:12:19:90:64:27:86:4c:d5:8e:f1:c4:a5:5f:b7:5a:ed:
         50:4d:d6:84:81:02:28:18:04:a0:61:43:6e:ee:5e:7c:29:3d:
         53:73:b2:f3:cf:58:29:d0:13:31:7e:15:0c:93:87:66:19:8e:
         23:89:9a:37:60:ad:38:8e:44:66:d5:27:f2:44:07:c2:50:59:
         22:f7:68:5c:b3:0d:66:17:7b:91:5b:a3:91:11:a3:ec:29:08:
         35:71:e7:8b:71:21:73:04:46:40:79:6e:ac:13:d9:66:91:ca:
         5e:67:dd:b1:73:b9:6b:12:27:a1:a6:92:b6:08:7f:ee:b3:0b:
         8c:19:0e:16:da:26:9d:86:90:a3:41:2d:56:ae:91:9d:9b:b1:
         c2:16:a4:e7:67:c1:92:dc:c9:8b:5e:80:31:3d:43:1e:4c:fa:
         48:b2:9c:98:c5:ed:73:85:41:90:8e:06:70:7d:45:a1:6c:77:
         f8:32:73:2a:fb:3f:36:32:85:f7:a4:b2:49:ff:b9:30:08:ab:
         e2:ee:41:57:22:4b:3f:6a:17:8e:85:66:b1:93:d3:02:ac:35:
         c4:ba:f5:b5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURU3ZKlQ2KN6NXYP3sXZzF1ahZWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCMjJENUY1RjE5Nzk5NDBFMEIyQzFGQTVBNjZBRTcy
ODFCRkIzMTAeFw0yNTAyMDQxODA0MzZaFw0yNjAyMDMxODA5MzZaMDMxMTAvBgNV
BAMTKDBDNzhCNDdGNkI0NUI1OUZFODY1NDcyM0VCM0FDNUFFNjExQTJGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUytUFelYSivtqh5vOfVUAKKE
DyF2jphyzSq0mQJmcnMGPwNKVYHYUp2c3v/ZkofLpHozI5He7YHoPgbwLgDSwnA6
PVojZkhxQFJ7YLWr+WCJG0DsbdS51fxSXBT877r0/d163agQcUcV2YOFxeqgoxeg
ZTNii5e5//mnld4w3NPt9U64aUSRLobCzjL75om7OAJCSgxgd6p0J5A4aS8e21oV
XXqway7LalYdSeoqnWjugeaqm6yMHrWdCx8dawWRx2InzqJb9Gt6BxTg51rK+I5w
SqpOGxUIJSNTrS8osfEnHefuM6UrXhEi7xZ76NvHA5Wl9QRPzZHddJ3iOF+TAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDHi0f2tFtZ/oZUcj6zrFrmEaL8gwHwYDVR0j
BBgwFoAUmLItX18ZeZQOCywfpaZq5ygb+zEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0UyQjA5OTUzMzA1RTBFREQ4MEIxNTU4MTIxQURFNDBD
RDY0QzRBODAxODNDMDlCRTAzMTVCOUJGQTU1QTQyLzAvOThCMjJENUY1RjE5Nzk5
NDBFMEIyQzFGQTVBNjZBRTcyODFCRkIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEIyMkQ1RjVGMTk3OTk0MEUw
QjJDMUZBNUE2NkFFNzI4MUJGQjMxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNFMkIwOTk1MzMwNUUwRUREODBCMTU1ODEyMUFERTQwQ0Q2NEM0QTgw
MTgzQzA5QkUwMzE1QjlCRkE1NUE0Mi8wLzMxMzgzNjJlMzYzNTJlMzgzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzMzM4MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6QVQwDQYJ
KoZIhvcNAQELBQADggEBALLJKuZ0JqT1h4coHRsQlwCQf2LmxUK5g8Isb2uYZsvM
Z1jcb8KSEhmQZCeGTNWO8cSlX7da7VBN1oSBAigYBKBhQ27uXnwpPVNzsvPPWCnQ
EzF+FQyTh2YZjiOJmjdgrTiORGbVJ/JEB8JQWSL3aFyzDWYXe5Fbo5ERo+wpCDVx
54txIXMERkB5bqwT2WaRyl5n3bFzuWsSJ6GmkrYIf+6zC4wZDhbaJp2GkKNBLVau
kZ2bscIWpOdnwZLcyYtegDE9Qx5M+kiynJjF7XOFQZCOBnB9RaFsd/gycyr7PzYy
hfekskn/uTAIq+LuQVciSz9qF46FZrGT0wKsNcS69bU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:15 2025 by rpki-client