Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          E0j+5jcZnfSQrEvyhRFHmhPJxR6ujIDoELNc+mduTKs=
Subject key identifier:   A5:92:CE:63:C7:23:25:F4:A8:D1:BB:DE:BA:83:93:A2:46:5F:6A:33
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       4D97478DD887813B8CDEBDFB4045FB24F6294625
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 04 Feb 2025 18:03:58 +0000
ROA not before:           Tue 04 Feb 2025 17:58:58 +0000
ROA not after:            Tue 03 Feb 2026 18:03:58 +0000
asID:                     265831
IP address blocks:        192.141.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:47:8d:d8:87:81:3b:8c:de:bd:fb:40:45:fb:24:f6:29:46:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Feb  4 17:58:58 2025 GMT
            Not After : Feb  3 18:03:58 2026 GMT
        Subject: CN=A592CE63C72325F4A8D1BBDEBA8393A2465F6A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:d7:98:e0:cb:20:fd:bd:f5:37:0c:9c:4b:
                    fc:a7:f2:92:12:d4:df:cb:3f:c0:41:4d:b2:6f:cb:
                    f5:c7:9f:4e:42:1a:cd:77:7d:c3:37:4a:1f:95:66:
                    c5:de:fc:b5:28:07:ce:3b:22:78:55:db:bf:27:d7:
                    76:6b:97:a8:3e:60:37:f3:b0:09:13:d6:6f:1b:a2:
                    58:ae:71:90:06:63:5a:fe:f0:20:69:bb:56:b2:df:
                    b8:31:d7:76:4e:3a:a4:22:0f:cd:8e:22:70:0a:2c:
                    07:5d:bb:6f:26:a8:de:13:b0:aa:3f:a7:75:29:b8:
                    1e:49:1d:2b:9e:4d:ed:c5:d8:90:67:2b:f8:b9:fc:
                    b3:63:97:ee:fb:0f:73:ab:df:66:f8:15:ee:32:af:
                    b8:93:93:8a:c6:76:ef:6b:3f:34:c1:92:c9:94:89:
                    50:17:04:3f:cc:3b:01:00:2f:cd:a3:f2:15:2b:38:
                    fb:90:7c:d2:56:55:51:83:86:9d:2e:e8:a2:d0:5a:
                    b3:2c:c0:24:25:29:77:9d:7c:3c:1d:04:5e:9f:a0:
                    49:23:76:26:ec:35:6e:16:81:45:01:0f:a7:7a:cd:
                    c1:4a:5e:d9:f7:79:75:a3:46:11:54:de:c0:57:2c:
                    96:b8:a1:f7:01:15:0d:84:25:b7:ab:d4:2f:f8:11:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:CE:63:C7:23:25:F4:A8:D1:BB:DE:BA:83:93:A2:46:5F:6A:33
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:8f:46:23:e3:99:f7:c8:98:f5:80:37:5c:b8:cb:4e:f5:
         e3:28:cb:90:10:6d:44:6c:2b:c4:e1:1e:e9:49:b9:ff:97:e7:
         68:f1:c4:9c:f5:9a:17:4f:35:dc:ab:1b:b0:a1:de:e9:c3:a6:
         1b:0e:15:57:34:a8:94:30:8a:b1:d6:c8:52:11:4a:e0:dc:90:
         7a:4f:bf:39:a2:83:f1:e4:a1:9a:6a:4d:ca:e2:b7:82:24:cb:
         16:cd:39:57:ad:1d:33:e2:f9:5e:f2:71:b8:90:de:a0:68:2e:
         dd:ab:31:e8:d7:28:7f:95:c9:17:97:3c:62:aa:de:d0:d3:b5:
         26:a1:8f:57:9a:55:8d:82:45:bf:82:30:95:c6:4f:a1:bc:b0:
         7e:62:54:b8:5e:ed:22:19:0f:70:41:e9:5d:c3:4b:e4:d0:57:
         87:b7:04:80:40:bb:c8:c1:c0:47:88:28:d3:f8:9b:56:09:d4:
         4d:0b:52:e0:0e:90:07:fb:9b:71:ba:71:a1:f1:2c:d7:74:9a:
         80:07:bb:7e:58:66:98:51:34:b2:71:cc:d9:74:7e:0f:73:9e:
         3d:18:e5:e0:b7:fb:f8:37:d9:13:41:9f:a1:2b:35:9a:0d:b2:
         11:58:57:75:ab:f8:e3:7b:ee:ec:3a:ea:cf:fb:47:bc:d7:0d:
         7d:ab:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:10 2025 by rpki-client