Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa
File:                     3139312e3130332e38302e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          tgVl+KEzS3LzsT0R7KnMN/fMxmeZ0EWF77a8eubbN1A=
Subject key identifier:   20:9D:59:50:AE:20:3F:A0:55:F9:2E:C5:C2:67:CE:88:71:2D:61:EB
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       23F315E67D67B6EF1ACB39016938C676364652EB
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:09 +0000
ROA not before:           Tue 04 Feb 2025 18:19:09 +0000
ROA not after:            Tue 03 Feb 2026 18:24:09 +0000
asID:                     23383
IP address blocks:        191.103.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:15:e6:7d:67:b6:ef:1a:cb:39:01:69:38:c6:76:36:46:52:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:09 2025 GMT
            Not After : Feb  3 18:24:09 2026 GMT
        Subject: CN=209D5950AE203FA055F92EC5C267CE88712D61EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:38:7c:98:ea:e3:f2:4a:c8:d9:68:4c:28:
                    30:c3:39:2e:c8:9a:dc:d3:ba:d4:96:cf:79:3d:ae:
                    57:9b:8d:8f:58:a8:36:e0:67:84:e0:12:b6:94:13:
                    1d:1d:ed:c2:67:99:4a:e6:aa:6d:ef:9a:db:1d:9c:
                    e5:7a:0d:f1:e0:1c:bf:a0:42:7d:ba:38:3b:39:3f:
                    ff:69:c8:d7:0e:ee:e8:d6:84:48:87:fe:10:9f:c4:
                    3c:35:d6:4f:34:6c:b3:15:1f:01:f2:c0:15:43:03:
                    de:30:ea:c1:b0:0f:a7:80:fb:b7:6e:da:76:9c:fa:
                    94:df:5b:b3:21:69:47:4b:18:f2:85:56:31:23:f7:
                    64:8b:2a:0f:c7:69:73:c7:22:e4:61:16:bf:98:0b:
                    e4:1b:72:6f:4d:78:ab:f2:3a:5e:f0:38:fd:5b:96:
                    22:79:39:9c:79:2a:4d:a0:c5:51:e2:b7:c3:0d:10:
                    f9:b0:9c:d6:1b:00:3a:98:02:e7:9b:e2:10:9a:1d:
                    d5:e8:78:70:d5:25:a9:b4:f1:d0:e2:90:e0:11:17:
                    83:de:c8:b7:49:0a:f3:df:01:a3:dd:96:40:66:6e:
                    26:58:cd:db:2f:3e:bc:1d:df:0a:8a:67:36:92:d8:
                    df:14:36:bb:bb:29:2a:49:5b:dc:79:ec:24:89:f9:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:59:50:AE:20:3F:A0:55:F9:2E:C5:C2:67:CE:88:71:2D:61:EB
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:88:9d:02:73:3c:75:ea:0e:e6:72:ee:22:b8:90:7b:2d:0b:
         bb:84:a3:f7:16:76:9a:45:e8:6b:d0:e2:da:85:ea:fd:af:dd:
         6b:46:e8:f8:34:c7:b7:ff:a2:08:36:58:6e:6b:61:63:d6:d9:
         15:5e:33:65:a7:47:f0:19:25:a5:92:a5:c0:9a:f5:ac:99:30:
         3b:88:02:4e:48:f7:25:60:b0:99:aa:e5:38:89:ba:e4:f6:ab:
         ea:8d:81:75:ae:7b:a0:28:9f:06:88:cd:01:07:a3:14:4d:7e:
         3f:97:56:ec:b2:a9:d2:39:42:99:e5:28:a8:c9:11:41:04:19:
         47:44:24:a1:0f:9e:24:2d:dc:4b:49:00:7e:af:86:50:6e:87:
         0d:f9:1d:71:a5:a4:fe:8b:fa:be:e1:2b:de:a0:12:b7:d8:59:
         88:8b:3f:17:b2:eb:1a:6d:d5:b5:c1:98:32:78:0a:04:ca:e0:
         57:b2:68:b4:76:6e:36:e8:f8:2e:84:de:13:07:50:1e:4c:86:
         38:cd:27:60:88:e0:83:f3:2b:15:d7:b4:d7:e8:c8:66:e6:0e:
         e9:3e:5b:dc:b5:02:0e:90:52:4d:f9:48:e5:70:a5:bd:95:9f:
         bb:11:dd:de:c9:dc:79:18:1d:b4:c7:7f:4d:f6:13:99:dc:b6:
         ce:a7:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client