Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3231322e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          pjPbOTD2F8O+4hUWUZ49YenCvfcm4UQLWfLEvyVwCmg=
Subject key identifier:   EB:8C:25:93:9B:53:D3:26:B7:E3:0F:E8:32:BB:CE:03:04:CF:93:9D
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       6B7AD91028E82CD8043852E602EE8087A5E87BCD
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:58 +0000
ROA not before:           Tue 04 Feb 2025 18:13:58 +0000
ROA not after:            Tue 03 Feb 2026 18:18:58 +0000
asID:                     6503
IP address blocks:        189.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7a:d9:10:28:e8:2c:d8:04:38:52:e6:02:ee:80:87:a5:e8:7b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:58 2025 GMT
            Not After : Feb  3 18:18:58 2026 GMT
        Subject: CN=EB8C25939B53D326B7E30FE832BBCE0304CF939D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:e9:18:ae:a3:a5:6b:4a:97:be:42:02:d7:
                    91:d4:11:68:5c:3d:56:1e:6f:32:70:e8:4a:f6:14:
                    8f:de:2e:e5:74:7f:63:87:fe:eb:1b:fc:99:fd:1c:
                    89:fb:6d:7a:d0:a8:67:72:2c:52:47:90:d8:fa:dc:
                    2a:e5:3e:95:6a:51:52:a7:1e:71:58:fa:d5:6c:81:
                    24:19:c1:32:44:68:50:49:42:ec:0b:2d:95:cc:5f:
                    17:b4:8c:69:1d:f2:ce:bf:13:99:b2:fd:f6:d0:81:
                    f6:07:89:10:32:6b:0e:6d:7b:4a:53:6d:a2:df:ce:
                    f7:60:b6:50:d5:ab:11:2d:fd:b3:b9:17:1c:81:2a:
                    43:19:d2:a4:a7:65:4c:a4:59:2a:49:6b:2b:84:b8:
                    70:8e:53:c4:41:83:32:3b:74:20:54:7d:a5:bf:f9:
                    42:ba:03:2a:9e:9f:b8:cf:c3:bb:04:02:98:e2:93:
                    36:76:e9:89:a2:55:ce:88:71:49:ef:09:b9:ec:d8:
                    37:ea:d0:40:67:40:c8:ec:a0:f6:5b:ea:55:f0:e1:
                    b9:84:9d:51:b2:5d:2f:3e:d1:04:10:9c:15:9e:6a:
                    20:4a:10:4d:66:fe:2d:7f:95:14:c9:5c:ff:6d:ac:
                    a9:8e:17:b9:8f:fd:4d:b6:c0:40:19:3b:72:9f:1c:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8C:25:93:9B:53:D3:26:B7:E3:0F:E8:32:BB:CE:03:04:CF:93:9D
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:90:2e:90:88:ea:cf:dc:ad:42:23:16:62:ad:d9:f4:83:
         0c:9d:01:99:6d:3c:28:0d:ea:f1:84:a3:b9:4d:9b:4f:35:34:
         81:18:00:aa:dc:49:53:25:3c:a0:6f:e0:dc:85:c9:80:ad:d0:
         3c:90:fe:cd:f5:c9:54:21:22:d4:1f:3d:2d:d5:a7:1d:d1:c5:
         62:2d:95:bb:b8:1a:1f:8c:1b:ff:15:06:a2:b7:81:06:7a:e1:
         7f:a9:30:57:78:65:bd:23:88:67:e7:af:23:a2:43:c9:68:f2:
         ba:3c:46:99:45:c3:c0:b1:8d:b6:ba:88:ff:63:da:06:71:b2:
         ed:26:d6:cd:0e:6b:95:8f:14:39:87:9d:6e:90:1a:d8:31:c1:
         68:57:cb:90:06:c3:3d:3e:22:7f:f8:25:ed:53:dd:ad:4f:b7:
         fd:96:22:f9:64:f9:e7:78:97:36:c5:c5:ef:ad:8b:99:db:a6:
         a1:8d:16:97:53:a7:8d:fd:e8:ae:82:7e:c2:30:02:f7:97:4c:
         5c:5a:89:dc:70:b6:b2:47:ab:30:c8:df:d8:dc:8e:cf:2b:89:
         09:80:cf:bd:2d:b1:c8:84:5e:9c:bb:5e:39:43:5e:ff:c4:91:
         8a:0e:32:d2:40:bb:b8:32:90:f5:cf:89:63:7a:52:d9:d1:44:
         cf:83:af:07
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUa3rZECjoLNgEOFLmAu6Ah6Xoe80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNThaFw0yNjAyMDMxODE4NThaMDMxMTAvBgNV
BAMTKEVCOEMyNTkzOUI1M0QzMjZCN0UzMEZFODMyQkJDRTAzMDRDRjkzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4w+kYrqOla0qXvkIC15HUEWhc
PVYebzJw6Er2FI/eLuV0f2OH/usb/Jn9HIn7bXrQqGdyLFJHkNj63CrlPpVqUVKn
HnFY+tVsgSQZwTJEaFBJQuwLLZXMXxe0jGkd8s6/E5my/fbQgfYHiRAyaw5te0pT
baLfzvdgtlDVqxEt/bO5FxyBKkMZ0qSnZUykWSpJayuEuHCOU8RBgzI7dCBUfaW/
+UK6Ayqen7jPw7sEApjikzZ26YmiVc6IcUnvCbns2Dfq0EBnQMjsoPZb6lXw4bmE
nVGyXS8+0QQQnBWeaiBKEE1m/i1/lRTJXP9trKmOF7mP/U22wEAZO3KfHHrjAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU64wlk5tT0ya34w/oMrvOAwTPk50wHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzgzOTJlMzIzMTMyMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvdQwDQYJKoZI
hvcNAQELBQADggEBACV+kC6QiOrP3K1CIxZirdn0gwydAZltPCgN6vGEo7lNm081
NIEYAKrcSVMlPKBv4NyFyYCt0DyQ/s31yVQhItQfPS3Vpx3RxWItlbu4Gh+MG/8V
BqK3gQZ64X+pMFd4Zb0jiGfnryOiQ8lo8ro8RplFw8Cxjba6iP9j2gZxsu0m1s0O
a5WPFDmHnW6QGtgxwWhXy5AGwz0+In/4Je1T3a1Pt/2WIvlk+ed4lzbFxe+ti5nb
pqGNFpdTp4396K6CfsIwAveXTFxaidxwtrJHqzDI39jcjs8riQmAz70tsciEXpy7
XjlDXv/EkYoOMtJAu7gykPXPiWN6UtnRRM+Drwc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:07 2025 by rpki-client