Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa
File:                     3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa (raw, json)
Hash identifier:          0189iW7cEHM7N3xcLFDRh7YJrEyyIbqPA/xBS4vyNqw=
Subject key identifier:   B3:EC:EB:C0:2B:10:48:75:64:3E:5B:A6:A2:2B:FE:C7:55:79:39:DE
Certificate issuer:       /CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Certificate serial:       2EEF377A2657B56E06FF631F5037569136736FB8
Authority key identifier: 95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa
Signing time:             Mon 03 Mar 2025 19:15:00 +0000
ROA not before:           Mon 03 Mar 2025 19:10:00 +0000
ROA not after:            Mon 02 Mar 2026 19:15:00 +0000
asID:                     273897
IP address blocks:        213.173.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ef:37:7a:26:57:b5:6e:06:ff:63:1f:50:37:56:91:36:73:6f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
        Validity
            Not Before: Mar  3 19:10:00 2025 GMT
            Not After : Mar  2 19:15:00 2026 GMT
        Subject: CN=B3ECEBC02B104875643E5BA6A22BFEC7557939DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:b3:b9:be:9a:7c:ee:2d:93:8b:ca:07:5e:
                    ce:dc:44:d3:37:0e:e8:55:93:97:d3:80:67:e2:0f:
                    4a:fe:63:61:de:c2:5b:92:55:3f:92:2d:79:e2:e1:
                    05:e6:c3:d0:80:17:58:41:8c:ae:7a:cd:d8:98:22:
                    3e:1f:7f:ef:a6:4f:d0:a6:08:24:ee:a7:a6:55:5a:
                    3b:51:f5:f4:21:7e:65:0a:6f:5d:f7:7f:6c:a7:e7:
                    b3:07:84:8d:f0:3b:c1:bf:ee:10:e2:bf:bb:c8:fc:
                    16:92:1e:c7:30:18:a5:0f:b3:f8:68:37:74:ac:ed:
                    3c:a1:1f:bb:87:6f:6c:6d:f8:f5:da:c1:20:13:3c:
                    5a:2c:18:17:22:5b:1b:32:f0:c5:7e:6f:20:d9:dd:
                    b5:fc:b9:a9:cb:c4:e1:22:4b:b7:cf:8f:ba:69:f4:
                    fa:d3:32:89:d0:fb:45:f5:66:94:6f:18:7b:29:a0:
                    ff:ec:36:ba:ee:52:76:c8:79:0b:90:10:81:80:b8:
                    1c:ac:82:c1:d5:15:d8:02:30:53:3a:b7:e7:1f:a5:
                    9a:99:58:5c:38:00:f8:f4:49:bc:39:0f:5a:50:f6:
                    e9:e7:04:24:2e:47:32:1e:11:67:dc:b0:df:de:6a:
                    cd:89:5e:e4:c7:22:07:98:01:fc:60:94:21:b9:a8:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:EB:C0:2B:10:48:75:64:3E:5B:A6:A2:2B:FE:C7:55:79:39:DE
            X509v3 Authority Key Identifier:
                keyid:95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.173.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:97:e3:7f:f8:8a:78:68:cb:0a:fc:a6:e8:ba:75:c6:61:
         82:55:ad:10:3a:b7:f9:12:9b:7e:ca:8f:dc:fb:9e:9a:70:c7:
         49:95:49:77:73:8c:e2:2f:e4:72:c1:d8:3e:44:42:bd:13:4c:
         3e:2f:48:7b:33:9c:5d:ad:8b:93:aa:b3:b7:8b:e1:80:da:63:
         76:f3:87:b8:4d:7d:1e:41:71:44:73:2e:48:d1:d9:0f:01:fc:
         ad:03:90:f0:5e:69:02:5d:2b:48:48:df:82:12:66:80:76:50:
         33:2c:4e:a3:32:38:52:ff:18:3b:0f:16:0a:34:7a:c6:bf:4f:
         3d:49:c3:7b:29:88:d0:fa:cb:b8:2b:5e:85:c2:b9:b0:e7:f0:
         6e:9e:96:21:6c:16:7c:0d:40:0f:2e:9e:d7:77:ec:76:2e:5c:
         27:85:09:fd:c3:ab:ee:b6:48:b0:4f:32:c2:58:b8:cb:6c:a9:
         b8:c0:26:f9:35:40:b7:6c:c3:57:59:68:49:33:96:f2:f0:ea:
         7d:ab:34:db:d8:10:af:6f:8c:75:fc:30:1c:76:64:c4:1a:1f:
         d4:0e:83:5b:92:45:37:45:4c:d8:a7:fa:ec:e9:c9:23:9f:7f:
         3a:ee:31:72:2b:b9:03:ea:3f:d2:3b:54:88:7c:66:ef:a4:2f:
         32:22:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:56 2025 by rpki-client