Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3137372e3232322e39362e302f31392d3234203d3e203237383832.roa
File:                     3137372e3232322e39362e302f31392d3234203d3e203237383832.roa (raw, json)
Hash identifier:          qcEcVi0m4YJ7E8uMOpT2XoFwxPGApYMN8nuqGo3PuAQ=
Subject key identifier:   13:4A:07:BE:9C:74:3F:64:52:72:2A:AC:17:63:EB:86:E5:C9:8B:DC
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       6F784FAAF7738B436DB12358E582D66C68710039
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3137372e3232322e39362e302f31392d3234203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:40 +0000
ROA not before:           Tue 04 Feb 2025 20:00:40 +0000
ROA not after:            Tue 03 Feb 2026 20:05:40 +0000
asID:                     27882
IP address blocks:        177.222.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:78:4f:aa:f7:73:8b:43:6d:b1:23:58:e5:82:d6:6c:68:71:00:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:40 2025 GMT
            Not After : Feb  3 20:05:40 2026 GMT
        Subject: CN=134A07BE9C743F6452722AAC1763EB86E5C98BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:14:d9:3d:e4:7a:1b:1c:b8:8f:32:5a:08:
                    cb:03:23:36:2f:41:c0:36:d6:e3:8e:7a:cd:e8:8f:
                    a3:2f:ae:ad:ff:42:2f:b6:db:45:7d:f1:93:3d:a9:
                    de:9f:3f:dc:a2:8b:da:05:d9:28:35:78:8a:c8:4d:
                    b4:99:4f:d2:63:ab:e8:0c:64:09:f6:a1:e6:a8:42:
                    e7:23:a1:0a:bf:cd:47:f6:92:f0:7c:9a:81:33:19:
                    6c:8b:a3:56:d6:42:d3:5c:84:36:5d:57:18:f5:01:
                    02:36:82:a6:0c:1c:82:75:32:ab:0b:89:a5:eb:bf:
                    1c:e7:cc:d8:af:3d:e9:e1:86:c7:1d:62:b0:a4:f1:
                    06:f8:a8:3c:f1:b4:fa:24:6f:9e:14:0d:7e:00:ba:
                    35:88:05:4f:d4:ca:29:65:66:5b:2b:1e:f9:24:36:
                    0a:95:c0:f7:d1:4b:be:f6:7d:83:c7:14:db:25:78:
                    a1:6e:c6:d6:06:b4:46:25:68:42:30:99:80:92:66:
                    5f:56:d5:d4:90:1d:bf:71:1f:3a:e9:05:bd:24:12:
                    8b:ae:1e:50:a5:44:da:ad:68:d8:f1:27:0e:63:09:
                    d5:c7:8d:57:2f:3e:c9:c3:34:a2:c9:7a:e4:66:65:
                    97:76:42:a8:55:ea:8a:96:eb:29:be:54:d1:f0:79:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:07:BE:9C:74:3F:64:52:72:2A:AC:17:63:EB:86:E5:C9:8B:DC
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3137372e3232322e39362e302f31392d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:fb:df:67:e2:32:56:be:41:0a:a6:a6:19:fb:fc:e9:16:2a:
         ac:6a:55:6f:c1:1f:c6:e3:d9:48:37:52:b6:fb:af:33:80:05:
         5f:e3:ce:44:34:8f:a3:d1:63:4c:35:82:58:fa:28:54:af:0f:
         82:fd:85:f2:a5:bd:d4:9f:06:b8:98:ec:30:4f:b1:dc:dd:74:
         2a:97:6f:d3:8b:1f:66:c8:c3:c8:aa:be:d8:22:22:a8:58:5e:
         c6:28:91:aa:4d:45:e0:c8:97:42:16:25:a7:4a:0d:35:93:9d:
         3c:47:9b:8e:03:bf:d4:19:8a:e7:25:3c:ba:d0:30:8d:72:e3:
         54:45:68:70:09:cc:30:19:94:3b:d1:44:b6:95:47:95:30:00:
         0b:2a:e9:d0:f3:7e:ee:ce:de:3d:17:4a:80:38:93:74:62:ec:
         92:ee:88:d8:2b:cf:9d:b2:fe:68:1e:06:ae:03:b9:bc:1f:c1:
         fc:c0:21:2b:8d:4b:45:59:ae:27:5f:e5:33:e0:50:2e:12:ad:
         fd:da:bd:3f:9e:19:37:3a:35:a2:87:a8:54:ed:1c:7b:57:89:
         86:ad:e0:b3:23:41:ed:b1:71:1a:60:fa:da:23:47:65:20:c5:
         3d:9e:0c:f6:be:71:f3:d0:1d:94:be:b8:bb:ca:d6:59:99:20:
         f1:59:e7:3a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUb3hPqvdzi0NtsSNY5YLWbGhxADkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4NjY4MTMxNzhGRjU1MEU2RkNBQkNENDkyMzg3REQx
RDBFMDhBNTAeFw0yNTAyMDQyMDAwNDBaFw0yNjAyMDMyMDA1NDBaMDMxMTAvBgNV
BAMTKDEzNEEwN0JFOUM3NDNGNjQ1MjcyMkFBQzE3NjNFQjg2RTVDOThCREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61hTZPeR6Gxy4jzJaCMsDIzYv
QcA21uOOes3oj6Mvrq3/Qi+220V98ZM9qd6fP9yii9oF2Sg1eIrITbSZT9Jjq+gM
ZAn2oeaoQucjoQq/zUf2kvB8moEzGWyLo1bWQtNchDZdVxj1AQI2gqYMHIJ1MqsL
iaXrvxznzNivPenhhscdYrCk8Qb4qDzxtPokb54UDX4AujWIBU/UyillZlsrHvkk
NgqVwPfRS772fYPHFNsleKFuxtYGtEYlaEIwmYCSZl9W1dSQHb9xHzrpBb0kEouu
HlClRNqtaNjxJw5jCdXHjVcvPsnDNKLJeuRmZZd2QqhV6oqW6ym+VNHwebeBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUE0oHvpx0P2RSciqsF2PrhuXJi9wwHwYDVR0j
BBgwFoAUs4ZoExeP9VDm/KvNSSOH3R0OCKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTU3QkQ1OURBQkNCNkQ5NjFBQzBGMkQwMEJBNTk2NzU5
RkFDODJBMEVBRURFN0QxMjlERjI0MUNCRUZCRjE5LzAvQjM4NjY4MTMxNzhGRjU1
MEU2RkNBQkNENDkyMzg3REQxRDBFMDhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzg2NjgxMzE3OEZGNTUwRTZG
Q0FCQ0Q0OTIzODdERDFEMEUwOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1N0JENTlEQUJDQjZEOTYxQUMwRjJEMDBCQTU5Njc1OUZBQzgyQTBF
QUVERTdEMTI5REYyNDFDQkVGQkYxOS8wLzMxMzczNzJlMzIzMjMyMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbHeYDAN
BgkqhkiG9w0BAQsFAAOCAQEAifvfZ+IyVr5BCqamGfv86RYqrGpVb8EfxuPZSDdS
tvuvM4AFX+PORDSPo9FjTDWCWPooVK8Pgv2F8qW91J8GuJjsME+x3N10Kpdv04sf
ZsjDyKq+2CIiqFhexiiRqk1F4MiXQhYlp0oNNZOdPEebjgO/1BmK5yU8utAwjXLj
VEVocAnMMBmUO9FEtpVHlTAACyrp0PN+7s7ePRdKgDiTdGLsku6I2CvPnbL+aB4G
rgO5vB/B/MAhK41LRVmuJ1/lM+BQLhKt/dq9P54ZNzo1ooeoVO0ce1eJhq3gsyNB
7bFxGmD62iNHZSDFPZ4M9r5x89AdlL64u8rWWZkg8VnnOg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:41 2025 by rpki-client