Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          g2NDD7N73e8IVKAkXkC0Pw65uGLFWPy60Uhfe6mJlII=
Subject key identifier:   2F:17:75:7C:DD:D1:EF:4F:7F:53:00:9B:7A:33:C8:EF:3B:DA:30:E1
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       022F788AAB3E3E117B417F3CC4FBE6B2BD072797
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 04 Feb 2025 18:03:57 +0000
ROA not before:           Tue 04 Feb 2025 17:58:57 +0000
ROA not after:            Tue 03 Feb 2026 18:03:57 +0000
asID:                     265831
IP address blocks:        192.141.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2f:78:8a:ab:3e:3e:11:7b:41:7f:3c:c4:fb:e6:b2:bd:07:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Feb  4 17:58:57 2025 GMT
            Not After : Feb  3 18:03:57 2026 GMT
        Subject: CN=2F17757CDDD1EF4F7F53009B7A33C8EF3BDA30E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:bf:6c:9c:95:88:3f:5c:a9:ea:48:08:e9:
                    e8:61:f6:7a:c3:1d:8a:6b:7c:43:ff:f9:57:01:13:
                    80:df:d5:ca:dc:85:ef:40:ad:a5:fb:d5:7a:9d:9a:
                    eb:05:5d:bb:f2:71:1e:cc:b4:c6:1d:c1:c7:0f:7d:
                    7a:75:b9:ea:c2:8f:10:4e:16:27:61:cf:58:b3:90:
                    9b:4d:93:95:4e:d9:93:35:51:4b:46:49:63:39:15:
                    6e:74:82:ce:f1:a5:aa:c4:84:48:4c:f7:52:8d:ec:
                    bc:ef:1f:88:e7:b6:89:bc:c9:9a:fd:c2:ff:8b:06:
                    5d:63:93:28:ec:50:8e:47:90:f8:22:2a:57:61:ae:
                    2f:4f:90:57:f6:78:d7:24:cb:46:21:f0:fe:92:48:
                    a2:1a:e5:0e:82:1f:eb:05:81:94:6f:12:e2:4e:69:
                    8f:93:e7:91:7c:2a:cf:57:05:9c:46:f4:ef:97:aa:
                    01:f1:9e:6c:55:6e:25:88:85:b8:3d:7a:3e:9e:e3:
                    5b:86:fe:7a:ae:56:58:fb:e6:3e:42:4b:85:b4:69:
                    2e:50:ef:6a:75:2a:eb:b7:4c:90:93:48:80:42:79:
                    62:e7:6c:5c:4d:ca:00:9c:8a:7a:5e:d9:30:29:47:
                    31:c3:b5:45:61:02:86:27:62:fc:42:ce:d4:1b:94:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:75:7C:DD:D1:EF:4F:7F:53:00:9B:7A:33:C8:EF:3B:DA:30:E1
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:59:64:6e:82:52:74:d4:87:d0:93:69:cb:5b:4f:4d:c5:02:
         68:1e:fd:66:60:52:77:27:d0:43:37:b2:c0:1e:5f:4a:54:68:
         16:07:77:bf:a8:6d:d4:ab:06:57:f2:ef:2d:98:da:71:6f:d5:
         31:7c:05:9f:17:5c:08:93:27:bc:e7:1d:ec:cc:c4:86:c1:97:
         25:6b:08:eb:37:ce:94:42:84:d9:8a:57:22:60:ee:5a:83:05:
         8b:1f:cc:e1:f8:f7:41:11:c4:98:65:31:9e:e8:07:d5:64:b9:
         d4:cf:db:19:5d:db:c1:80:39:3a:c3:76:b9:62:98:69:0e:a5:
         25:df:d0:0e:05:b3:68:a7:3b:53:cf:0f:9a:54:6b:5b:6c:89:
         0c:ff:98:ca:34:45:3c:0b:22:9a:5d:4d:7c:d1:61:d9:7d:ae:
         6f:f7:9f:a2:a6:d4:22:56:0b:18:1a:b6:d8:5f:91:7d:dc:4d:
         9a:60:62:0f:5b:37:96:61:c8:96:d0:22:62:93:97:12:8d:7f:
         e1:ff:6a:d2:69:dd:57:bc:7e:39:29:1b:f9:2e:61:7c:c9:59:
         73:0e:fc:ba:66:c9:03:fa:8b:45:50:2a:48:0e:d9:23:4d:33:
         61:57:6f:01:4c:b7:ae:80:19:42:fe:c0:49:c8:29:ab:d8:fc:
         e7:05:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:08 2025 by rpki-client