Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234312e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234312e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          prFTlUgxqYpK7c1z9rY+jU/b6Gma7JKsCyr2zrrOlJw=
Subject key identifier:   2E:FD:D9:7B:25:AC:75:1E:D6:90:A3:83:A7:02:40:6F:82:0E:07:1B
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       020EB18D4C2FD54E7E45CA6AA8BBD2512C34489D
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234312e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 04 Feb 2025 18:01:33 +0000
ROA not before:           Tue 04 Feb 2025 17:56:33 +0000
ROA not after:            Tue 03 Feb 2026 18:01:33 +0000
asID:                     264770
IP address blocks:        168.194.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0e:b1:8d:4c:2f:d5:4e:7e:45:ca:6a:a8:bb:d2:51:2c:34:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Feb  4 17:56:33 2025 GMT
            Not After : Feb  3 18:01:33 2026 GMT
        Subject: CN=2EFDD97B25AC751ED690A383A702406F820E071B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:26:8b:ff:42:32:dc:9b:ef:9b:0c:73:83:
                    a6:54:5f:99:61:c5:20:7e:ff:6c:a7:61:89:ba:a1:
                    75:51:f4:78:9b:2e:87:91:fc:b2:d1:64:75:3e:d5:
                    e1:86:8e:9f:27:54:73:fe:4c:aa:fa:e7:bf:5e:92:
                    e8:12:8f:44:52:66:a2:99:ca:fd:6f:f3:d5:58:20:
                    2f:81:9a:9b:32:cf:62:59:90:c6:23:e3:ab:e7:f4:
                    20:d9:58:b8:f0:b9:86:f7:00:7d:e0:e9:b2:28:d7:
                    e9:7b:6b:c0:b4:18:86:f4:c7:7a:88:e2:9f:37:5e:
                    ee:70:c0:d7:d5:f3:72:05:c0:57:d5:16:14:29:54:
                    f0:74:15:83:3b:27:e1:17:a0:3b:aa:8f:d8:b4:96:
                    28:f1:62:69:f5:ac:07:3e:07:cb:de:84:8b:87:3b:
                    78:f7:be:1a:33:f6:fd:7d:87:65:48:49:2f:d7:b6:
                    11:1c:98:bb:0a:52:7d:c4:5e:1a:da:1e:0e:2a:b2:
                    ea:e1:11:ce:ad:24:f4:1b:11:82:cb:50:0a:28:69:
                    61:ed:56:4c:9f:d9:8b:e3:76:a2:36:69:e6:68:0c:
                    8e:9a:6c:5f:f1:de:ad:32:38:be:23:50:6b:52:f7:
                    dd:a7:11:02:d7:5d:1e:3c:a6:13:e2:d3:a1:09:e4:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FD:D9:7B:25:AC:75:1E:D6:90:A3:83:A7:02:40:6F:82:0E:07:1B
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234312e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:ba:79:41:59:21:9a:a0:65:c6:9a:7b:78:95:4e:0e:b2:
         62:08:3a:d5:17:b6:3c:39:ac:07:eb:a6:eb:81:d8:97:b2:7d:
         70:73:b7:4e:02:2b:25:e2:54:5e:fe:cc:d5:79:66:6f:96:21:
         20:31:40:e9:23:cd:70:e2:d5:df:92:c8:48:25:30:ba:82:e8:
         5a:2f:4f:a3:ae:54:f3:27:51:76:e6:de:6a:35:d7:59:66:e3:
         41:f8:64:e0:4d:ad:86:a8:ff:1a:73:bb:12:23:2f:59:84:a8:
         52:b0:e5:eb:65:3f:d0:d6:a2:67:2f:38:e7:41:6c:16:2e:b5:
         0e:4a:1d:22:d0:b7:24:9c:55:79:be:d7:32:41:ae:d8:a9:e6:
         cf:97:81:69:c3:83:3a:85:90:92:62:5f:6d:ea:94:83:13:48:
         b0:bc:78:c2:20:28:a8:66:7c:33:1b:de:09:63:1e:a5:4a:33:
         37:4a:bb:df:55:39:65:b6:15:76:1b:1a:ab:8e:90:b0:23:98:
         e0:1d:f9:4b:41:3e:b6:f8:bf:30:07:e1:0b:0e:3a:11:c3:c7:
         21:37:2a:87:82:12:01:4e:96:22:ca:d2:08:57:0f:ff:75:e7:
         6b:24:05:08:6d:2f:bd:99:85:16:41:d5:b7:0e:53:89:34:9f:
         63:a7:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:56 2025 by rpki-client