Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
File:                     3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa (raw, json)
Hash identifier:          +oo5/v/MVKYILXGGcZGxHk3wue38xtrNMjYHW1MC/Lk=
Subject key identifier:   F2:C8:FF:2E:93:63:3F:E3:B6:BA:8C:4A:FE:6E:F5:12:4D:40:73:F7
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       0F86537AC91F32092B256BE47B43CAF5B334369B
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
Signing time:             Tue 04 Feb 2025 18:40:57 +0000
ROA not before:           Tue 04 Feb 2025 18:35:57 +0000
ROA not after:            Tue 03 Feb 2026 18:40:57 +0000
asID:                     28094
IP address blocks:        131.161.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:86:53:7a:c9:1f:32:09:2b:25:6b:e4:7b:43:ca:f5:b3:34:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Feb  4 18:35:57 2025 GMT
            Not After : Feb  3 18:40:57 2026 GMT
        Subject: CN=F2C8FF2E93633FE3B6BA8C4AFE6EF5124D4073F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:59:43:51:39:48:af:d8:50:10:6c:2c:50:
                    c7:12:84:c2:d7:f5:e4:70:5b:06:71:9d:bf:a9:80:
                    9b:2d:1b:3e:5d:ae:0c:4d:eb:d1:29:f2:a9:b9:f1:
                    1b:8b:63:3a:1c:29:7f:6f:98:e3:fe:be:a6:29:86:
                    96:2d:72:e6:f9:9d:3b:c4:33:ca:1b:5f:ca:8d:3c:
                    5a:63:25:86:bc:75:44:73:7b:e5:65:b9:04:63:bc:
                    84:ec:c3:19:aa:0e:81:d4:42:ac:73:eb:3e:c7:3c:
                    e8:26:9b:f1:1d:71:6d:8b:67:7f:d3:bd:f0:b0:70:
                    8d:75:27:41:01:27:57:3a:2f:79:15:7f:4a:03:18:
                    c6:71:50:80:d6:e1:77:72:3c:d3:22:9c:84:83:f7:
                    c0:ef:92:8a:fc:fa:37:80:00:a8:cd:57:1e:65:46:
                    6e:ed:12:71:2f:e3:4d:e2:8a:6d:11:ae:c4:d3:23:
                    77:75:e5:ca:25:0e:19:f3:56:67:fa:85:73:58:a8:
                    99:65:0d:65:7f:07:52:e9:6b:c0:70:6a:7e:b7:33:
                    e0:91:2f:36:0e:c1:81:e7:f2:f6:0d:57:73:a2:ad:
                    1e:61:63:8e:2f:15:44:0b:ca:73:44:90:f6:e4:cd:
                    2e:82:1b:f6:fe:2d:bb:88:4b:32:e1:2b:b0:42:a1:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:FF:2E:93:63:3F:E3:B6:BA:8C:4A:FE:6E:F5:12:4D:40:73:F7
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:4c:50:c0:62:37:85:59:d2:b7:04:4e:69:b5:4c:4a:59:e1:
         31:bf:a5:16:8e:f2:08:82:08:2a:56:4a:5d:4c:a8:ab:4d:17:
         71:3e:0a:1d:7b:de:3c:d8:7c:25:8a:53:28:ff:4d:62:14:0d:
         b8:4d:0c:3a:3b:f5:0f:90:c8:ff:77:f9:6a:38:e7:e4:a6:d0:
         8c:43:c6:31:3c:1b:d6:95:f6:2f:e9:b0:82:32:7a:33:4f:06:
         06:5b:08:08:84:d3:02:c2:f0:ff:ce:9e:7b:53:18:4b:9b:fe:
         9f:83:e0:3c:7b:7e:f7:fd:fe:d2:6b:ec:27:41:35:70:63:b2:
         b2:fb:a8:a3:00:dc:c2:98:de:29:ed:82:54:fa:f4:e8:4b:45:
         af:10:84:ff:1b:a2:5d:41:a4:7f:0b:d3:96:92:c3:6f:45:88:
         8b:ef:a6:74:dd:d6:9e:7c:a5:ce:8e:7f:51:a2:73:e2:08:27:
         79:b3:ed:b3:ef:57:41:f9:f7:79:8c:c9:5f:b5:28:a3:36:1e:
         c8:8a:5d:e1:35:fd:84:f9:58:99:7b:eb:0a:bf:4b:65:64:a1:
         99:bd:fc:24:d7:0e:5c:e2:2e:40:f5:6f:06:10:43:34:f5:a1:
         0f:5e:69:3f:da:89:bc:a3:a2:1e:c3:d1:8b:57:67:c8:c5:7e:
         55:97:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:39:57 2025 by rpki-client