Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa
File:                     3139322e3134312e34382e302f32322d3234203d3e203430363736.roa (raw, json)
Hash identifier:          /5Y3uClZ4cYf2VYexRF7y9a5xkzJnKPn2ujI1v4adfs=
Subject key identifier:   54:3D:F6:6B:42:F4:22:EE:B3:C6:22:D5:29:5E:0D:13:5A:0C:D1:93
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       3B5E46936C22DF6AC2A1A73F6B6EEFDF492C5D14
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa
Signing time:             Tue 04 Feb 2025 18:03:57 +0000
ROA not before:           Tue 04 Feb 2025 17:58:57 +0000
ROA not after:            Tue 03 Feb 2026 18:03:57 +0000
asID:                     40676
IP address blocks:        192.141.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:46:93:6c:22:df:6a:c2:a1:a7:3f:6b:6e:ef:df:49:2c:5d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Feb  4 17:58:57 2025 GMT
            Not After : Feb  3 18:03:57 2026 GMT
        Subject: CN=543DF66B42F422EEB3C622D5295E0D135A0CD193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:46:ee:42:3a:2e:47:9f:66:85:77:e3:5c:
                    cb:0e:b7:7a:af:e0:32:2d:bc:5c:bd:02:74:e5:96:
                    df:cd:3b:b7:91:8d:30:80:d4:a4:62:b4:52:a4:4a:
                    2b:0f:cc:a8:95:24:c4:bd:0e:e7:ce:b3:39:4e:58:
                    b6:a0:45:f3:7f:ca:60:30:8c:e7:f3:50:3d:2a:19:
                    ad:ed:f3:e3:53:1d:b4:90:63:61:9b:ca:8f:1b:10:
                    54:31:ee:95:03:43:94:96:a8:d5:c2:25:9b:78:67:
                    92:ed:1e:c7:5b:50:5b:1f:ed:ac:c6:8a:9c:da:53:
                    9b:c8:df:f8:32:1a:9e:ca:43:1c:c8:41:d2:c3:59:
                    cc:d8:30:f0:10:ab:ba:8b:ad:d0:4e:66:dc:b8:13:
                    1a:44:82:30:c5:a0:59:3a:92:70:e1:21:15:10:a6:
                    99:62:dc:0a:3f:f8:83:d7:d9:41:4b:8d:04:b3:57:
                    41:82:7e:9d:2f:a7:6c:4c:dd:93:c8:9a:0b:16:ce:
                    40:1e:b0:2d:7e:68:40:b1:99:f1:df:06:58:1e:b4:
                    31:f4:bc:f1:bb:3d:88:71:3a:6f:54:fb:e0:b4:96:
                    48:c8:9d:8f:53:d7:8f:02:56:aa:af:a7:06:6f:7c:
                    dd:c7:4d:d3:b1:ac:7f:52:6f:ce:be:9f:aa:15:8e:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:F6:6B:42:F4:22:EE:B3:C6:22:D5:29:5E:0D:13:5A:0C:D1:93
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:9c:62:f7:da:74:a0:af:aa:01:38:5b:a9:0e:40:4b:d9:28:
         3c:69:56:49:77:5c:62:ac:20:a4:40:d9:97:ed:3e:e7:ea:7e:
         32:b4:af:6b:07:f1:b7:eb:22:f2:e5:87:0e:cb:d1:db:b1:36:
         55:4d:07:f8:68:c0:4a:2e:4f:dc:bc:76:5f:9e:ff:57:8d:e7:
         60:a0:ee:ed:93:dc:58:16:15:5c:7f:91:8a:14:59:ac:24:72:
         c8:2d:73:3b:45:e3:a1:ce:a1:35:6b:7e:24:59:6c:f9:e1:92:
         17:f8:0a:b9:bd:32:a7:3a:9c:9d:bd:87:01:0d:01:06:80:7d:
         dd:e5:a3:18:90:ea:e4:0e:18:1b:0b:4e:aa:df:b5:77:1d:30:
         a7:a9:be:cf:03:ed:3c:03:3e:ac:b9:a2:ea:da:e0:6f:ad:0e:
         7e:5d:0d:ae:60:f0:bc:05:40:18:30:6f:00:f9:b4:e6:c9:d4:
         c1:eb:9a:40:b9:eb:97:2b:03:0a:70:39:62:0f:de:25:19:a1:
         cb:a3:4b:d5:95:09:f3:5b:5c:f1:39:32:be:d8:db:49:96:2f:
         22:cc:d2:f3:b3:51:c7:88:9b:b0:7c:38:38:80:b4:46:7d:0e:
         33:b7:f8:ac:fa:d8:09:64:c3:94:ba:ed:e0:39:9d:c2:29:47:
         22:6d:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:39 2025 by rpki-client