Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          UGcuDFsKlQ37Oqe1JTs4FvOXzJi8MpE5eLHxEQTxAvU=
Subject key identifier:   DC:25:D8:69:D0:49:BA:FB:54:DB:27:1C:0C:82:A5:FE:58:19:32:47
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       1A066158782F386DF1A4E2AABA4687AA7C893D4D
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 04 Feb 2025 18:01:34 +0000
ROA not before:           Tue 04 Feb 2025 17:56:34 +0000
ROA not after:            Tue 03 Feb 2026 18:01:34 +0000
asID:                     264770
IP address blocks:        168.194.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:06:61:58:78:2f:38:6d:f1:a4:e2:aa:ba:46:87:aa:7c:89:3d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Feb  4 17:56:34 2025 GMT
            Not After : Feb  3 18:01:34 2026 GMT
        Subject: CN=DC25D869D049BAFB54DB271C0C82A5FE58193247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:98:c6:6a:d9:10:ca:2f:8e:2f:d0:8f:1f:
                    d1:0a:34:c9:70:57:98:d9:0c:57:58:3e:10:1e:79:
                    64:62:a5:bc:33:52:b7:15:d0:0e:df:72:87:dd:4e:
                    d2:da:9a:4e:7f:a8:ad:f8:f6:3c:f6:79:9d:62:a2:
                    5a:63:ae:c1:80:4e:08:d8:a1:ff:6d:3f:c1:23:96:
                    eb:11:80:ad:af:1a:cb:47:e2:d4:46:5c:fe:b6:f6:
                    b5:6b:40:93:39:17:59:f1:f2:4d:d6:80:c3:af:00:
                    2a:9b:dc:6a:51:80:e7:de:03:3e:66:01:51:91:a0:
                    08:8a:80:b8:3b:19:46:b2:69:93:fe:e9:18:80:62:
                    b2:03:61:7b:d5:34:6a:3d:e9:b1:5b:34:7d:a2:fc:
                    57:16:cf:a7:c0:a6:82:ff:85:02:41:e6:39:1c:98:
                    eb:50:34:b3:b2:60:15:54:f6:c7:bb:3e:cb:ec:4b:
                    71:d0:97:1a:62:86:3d:91:a8:95:67:d6:d3:f3:62:
                    4a:fc:cb:70:04:b6:12:80:86:2b:c8:bf:2c:e1:dc:
                    5a:10:b4:4e:ca:08:a9:95:d4:cb:f2:38:13:d6:f2:
                    fd:9f:d3:ce:5e:c3:a9:00:71:fa:42:43:7f:7a:9c:
                    52:a3:e2:ee:1f:16:d7:a2:b3:16:d3:04:20:4c:e5:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:D8:69:D0:49:BA:FB:54:DB:27:1C:0C:82:A5:FE:58:19:32:47
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:d3:b6:d4:98:17:e8:77:f7:2e:a8:82:54:43:28:f5:da:
         fe:a8:21:25:64:5d:b1:3b:08:b5:fd:2b:99:b3:83:37:bd:d1:
         e1:f8:41:52:65:f6:1f:17:b0:a3:bf:26:dd:4c:bb:a3:73:ba:
         bc:29:93:0d:e7:a9:2e:68:e7:ee:6d:16:00:b6:e3:72:70:ba:
         a3:c8:0d:ca:29:ca:1b:0a:7e:ac:37:29:9f:14:05:a3:82:4a:
         5b:e4:5a:aa:e0:a5:3e:9a:b6:87:c1:00:21:58:05:99:4d:b0:
         46:00:51:ed:e7:4b:34:63:2c:5e:0e:c4:ef:65:de:71:c1:98:
         a0:e9:32:cf:57:7a:99:96:0b:85:7d:12:b6:03:43:b0:26:c9:
         c5:e0:11:01:e1:f3:06:83:6d:47:bf:e7:16:1c:e6:11:8a:63:
         90:b0:05:1e:5f:0c:56:59:35:66:dd:cf:21:34:32:64:6a:ff:
         d5:f3:c0:17:2a:60:93:ab:53:b4:e3:f2:da:14:ca:d1:f2:56:
         f7:cc:16:4f:5f:dc:d3:8b:55:60:fe:82:3e:3c:ec:4b:33:b6:
         eb:de:94:72:74:76:95:68:c8:c5:40:2d:06:64:54:9c:4d:70:
         88:d9:15:76:c9:e4:8b:f1:25:75:82:ce:3d:8e:c6:d3:c9:39:
         2a:31:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:08 2025 by rpki-client