Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36392e302f32342d3234203d3e203532323632.roa
File:                     3139312e3130332e36392e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          WsCuMS+RW3Y3c9qFwhA4sKdMv04ZS6zoNpr7e44RIoY=
Subject key identifier:   EE:6D:64:18:7C:6F:CC:93:B2:1C:72:E1:6B:45:85:5B:6E:15:E1:A8
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       5ACFBBD39F2368A266903D82B0F353725130DEA3
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36392e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 18:24:11 +0000
ROA not before:           Tue 04 Feb 2025 18:19:11 +0000
ROA not after:            Tue 03 Feb 2026 18:24:11 +0000
asID:                     52262
IP address blocks:        191.103.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cf:bb:d3:9f:23:68:a2:66:90:3d:82:b0:f3:53:72:51:30:de:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:11 2025 GMT
            Not After : Feb  3 18:24:11 2026 GMT
        Subject: CN=EE6D64187C6FCC93B21C72E16B45855B6E15E1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:9e:da:6c:f1:b9:01:01:4d:75:ad:d1:7c:
                    52:db:f4:2e:83:de:e4:e7:ce:f2:ea:65:26:92:c8:
                    65:a0:3c:4a:b6:ea:1c:46:66:6e:f0:1a:ae:fc:09:
                    9c:31:09:65:b0:19:f5:55:91:e7:6e:e0:60:2d:db:
                    0d:a9:37:57:35:4b:5c:16:89:48:f3:63:98:20:81:
                    75:88:58:79:32:86:e7:e6:56:ee:5a:f8:19:e7:0c:
                    d3:2a:35:14:00:80:f8:69:ef:cf:ae:31:76:a0:c9:
                    50:13:a4:14:04:e4:c1:6d:78:10:56:77:6c:93:26:
                    a7:81:af:e7:12:d8:ff:38:1f:27:50:6f:b3:d1:ba:
                    ff:0c:4e:26:a7:b2:20:28:ec:d9:7b:f1:8f:41:00:
                    70:67:bc:6b:7a:5e:d8:21:72:df:00:d1:fa:fb:27:
                    f7:a6:3a:5b:d8:a3:2f:b2:b8:48:5d:c6:de:a9:19:
                    14:32:c7:2e:7f:d9:c6:23:0a:31:82:0e:85:9b:66:
                    82:f9:b5:06:6b:50:75:2a:8e:8d:8d:b3:72:4f:08:
                    8f:67:68:7b:3a:54:c0:f6:53:d5:b4:12:1f:77:b7:
                    ab:3f:71:1a:c4:f4:c4:de:a3:d2:e0:74:e1:51:66:
                    11:e0:ca:85:8b:f6:76:2c:d0:c4:eb:47:c6:13:af:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6D:64:18:7C:6F:CC:93:B2:1C:72:E1:6B:45:85:5B:6E:15:E1:A8
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36392e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:48:20:24:8c:6d:b4:10:4a:8c:a6:34:13:c1:93:4b:ab:
         42:15:dc:63:cf:a9:87:f1:4e:0e:18:41:6c:fd:d8:a4:2b:c0:
         a3:cd:28:8f:79:23:a5:91:3d:7d:46:f0:d6:36:81:7d:c6:b8:
         dc:7a:f9:55:1b:a8:10:79:36:71:bc:42:3a:36:da:60:04:77:
         00:5b:9f:31:b3:97:13:45:2c:b5:53:c2:29:a7:d7:91:53:35:
         a8:47:94:15:78:31:c4:37:81:22:da:cf:cf:b6:50:13:71:04:
         f7:85:bc:67:ea:00:1d:e2:ed:54:48:22:85:f3:dc:b1:97:be:
         02:f7:02:0d:99:3a:f6:1a:3c:0a:33:ed:a6:22:74:0e:17:f2:
         48:b6:d8:ad:d4:b2:6d:e4:17:3a:db:a5:1f:e2:e0:d9:18:ab:
         e2:dc:3d:7c:69:97:c5:41:52:2c:ce:68:97:77:5a:47:db:c7:
         1a:6c:7c:68:9f:79:b6:46:96:e6:04:28:a5:59:34:1d:73:bc:
         cd:45:06:59:2a:f1:0c:f5:75:44:28:c6:da:86:7c:06:5e:c3:
         c8:d4:fd:7a:15:3d:4f:96:85:9d:e5:62:dd:98:78:21:02:47:
         db:41:28:21:29:53:be:c8:c9:36:e3:55:07:73:a8:e7:15:e7:
         8e:a8:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:27:55 2025 by rpki-client