Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32342d3234203d3e20323635373631.roa
File:                     3136342e3136332e31302e302f32342d3234203d3e20323635373631.roa (raw, json)
Hash identifier:          EkgmTIepZMLdxjM7s8IlXG1ZRiV//knQ1oyq4DGLnVI=
Subject key identifier:   AF:21:42:CF:E8:43:72:CD:95:59:92:A4:C6:64:E6:63:D2:8E:32:8D
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       19065502279BC6AC49E993C5B29BCE842AAEA9DF
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32342d3234203d3e20323635373631.roa
Signing time:             Tue 04 Feb 2025 19:59:10 +0000
ROA not before:           Tue 04 Feb 2025 19:54:10 +0000
ROA not after:            Tue 03 Feb 2026 19:59:10 +0000
asID:                     265761
IP address blocks:        164.163.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:06:55:02:27:9b:c6:ac:49:e9:93:c5:b2:9b:ce:84:2a:ae:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Feb  4 19:54:10 2025 GMT
            Not After : Feb  3 19:59:10 2026 GMT
        Subject: CN=AF2142CFE84372CD955992A4C664E663D28E328D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:ff:4e:29:56:9a:9a:65:2a:df:20:fd:8e:
                    12:b1:ba:7b:3d:d9:db:bf:f1:f4:c2:d4:f6:08:f9:
                    7b:0f:ff:6a:b4:37:78:73:ef:42:8a:ee:c0:97:ec:
                    6a:be:9d:fd:74:2a:7f:11:dd:ca:62:12:09:2e:d7:
                    ae:81:ba:95:3d:10:1d:ae:55:c6:90:eb:db:fe:b1:
                    d8:b6:39:59:39:6f:54:37:a6:27:cb:82:14:a3:6c:
                    0b:eb:d0:46:36:8a:09:23:83:a3:7d:d5:be:a7:d5:
                    e0:c7:32:bb:04:ba:4f:37:7f:38:f0:20:f7:9d:c8:
                    2a:1c:f6:d5:4d:fc:b0:8e:10:ee:da:ea:91:20:e3:
                    ce:21:47:d2:d7:4b:5a:5b:cd:fb:2f:36:15:65:85:
                    e9:55:bf:53:9c:25:58:e7:31:a9:c9:86:18:98:d8:
                    3b:c5:58:de:62:a9:fd:91:2c:3d:d1:2d:9c:d2:ca:
                    02:14:bf:b5:c1:d7:ca:b8:64:3a:e9:76:7c:28:bf:
                    36:35:be:60:87:a4:1f:34:2d:af:13:2c:10:f9:9d:
                    94:69:4c:5a:37:07:7a:e4:1c:55:6d:03:a0:06:2b:
                    81:71:33:ab:78:1a:92:4d:42:50:22:3a:80:72:4e:
                    ac:a7:f1:22:6c:1a:2f:1b:9f:8d:82:6f:43:03:67:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:21:42:CF:E8:43:72:CD:95:59:92:A4:C6:64:E6:63:D2:8E:32:8D
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32342d3234203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:7d:cb:26:1a:25:44:71:ad:ae:04:fb:83:89:b0:b1:98:
         17:4d:79:92:ef:da:11:60:f9:35:e2:47:5c:b9:79:4f:1c:02:
         4b:fe:c2:b1:fc:31:f2:c5:f2:7f:1c:c5:10:28:2e:74:69:49:
         f1:bb:6b:b2:c4:56:c1:57:c7:57:2b:ec:88:77:77:9e:a2:23:
         fe:cc:ff:f8:41:ce:3d:d8:00:99:d3:d0:d6:e6:e2:09:15:e7:
         f2:55:9b:38:0f:3a:5e:3f:c2:72:69:9a:08:4b:90:66:43:c5:
         58:ce:fb:e8:9f:1b:ed:0d:1a:06:fb:f2:3b:61:3d:c9:72:45:
         00:31:a0:44:ed:a4:cf:61:50:ee:5b:82:0f:04:3c:56:6a:be:
         a9:ef:33:a8:7e:54:b3:47:e1:ca:15:1e:47:7a:09:b4:36:7d:
         bb:b7:c1:0e:69:de:5d:20:af:dc:ad:2f:17:5e:f4:57:17:1f:
         c5:cd:1b:4e:2b:3e:7d:40:98:04:b0:5f:eb:57:1b:10:1e:4b:
         4c:24:4f:7f:2b:a1:90:93:b3:05:74:2b:1d:c4:f1:39:99:f0:
         fd:f9:ca:2b:f2:e0:47:fc:55:70:4d:65:07:bd:c7:4a:35:69:
         32:3a:c8:62:cc:80:f4:43:46:b8:de:a1:18:46:76:25:33:18:
         22:98:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:55 2025 by rpki-client