Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa
File:                     3133382e33362e36352e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier:          UXZh8ttjQegCHesdNQ8pDNLS8/z2lzrOi0EkJt8pOoY=
Subject key identifier:   EF:96:1E:14:12:B7:8A:DA:62:B4:B7:7B:B5:88:D8:94:2B:02:E9:D4
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       413D99EAD30A9CF6D97C887461D8A2AF17AFDCCE
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa
Signing time:             Tue 04 Feb 2025 18:05:47 +0000
ROA not before:           Tue 04 Feb 2025 18:00:47 +0000
ROA not after:            Tue 03 Feb 2026 18:05:47 +0000
asID:                     52467
IP address blocks:        138.36.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3d:99:ea:d3:0a:9c:f6:d9:7c:88:74:61:d8:a2:af:17:af:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Feb  4 18:00:47 2025 GMT
            Not After : Feb  3 18:05:47 2026 GMT
        Subject: CN=EF961E1412B78ADA62B4B77BB588D8942B02E9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:75:e7:c0:81:4f:7b:b6:37:c6:f4:f5:1c:
                    b5:14:d2:ab:ec:28:15:9f:b9:0f:7e:17:87:02:76:
                    1e:35:18:5e:fe:71:83:0b:a9:38:b7:94:af:74:99:
                    c1:ca:ae:6e:74:ce:46:ac:e4:64:59:a1:42:12:e4:
                    9e:6c:03:38:8a:9d:9f:59:48:58:a1:45:5d:74:15:
                    cf:f4:08:ae:f3:33:9c:2c:82:16:98:5c:e1:4e:75:
                    fe:57:05:cd:59:87:6b:f5:a1:d4:fb:7a:58:19:9c:
                    d8:06:66:4f:4b:da:fc:72:31:05:d1:c5:34:17:e3:
                    4b:85:ba:5a:0d:38:a8:b7:50:86:54:40:32:6b:26:
                    9c:d1:11:e2:20:77:bd:4b:ec:8e:f2:32:4e:03:74:
                    8c:4e:50:a9:5a:a1:0f:7a:89:a9:24:da:3b:6e:03:
                    b5:3b:59:6e:03:d0:d3:04:3d:9c:d3:4a:4a:5e:8d:
                    ac:12:5b:a5:df:ed:c5:ae:e0:f5:31:7e:7a:fe:8e:
                    27:d6:4d:06:a6:5a:53:97:9b:59:3d:35:00:cb:1d:
                    16:d4:ee:38:06:ed:bf:7a:b0:34:1f:49:1a:cd:ca:
                    58:55:32:63:a1:52:6f:9c:46:3a:f5:28:17:b4:51:
                    71:55:d3:29:d5:8a:0c:a9:52:21:19:8d:11:2a:bb:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:1E:14:12:B7:8A:DA:62:B4:B7:7B:B5:88:D8:94:2B:02:E9:D4
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:64:22:90:f7:ba:98:2d:f6:e8:f7:da:1d:c1:d0:c4:92:41:
         33:a8:7a:83:88:81:1e:7d:ca:8b:80:73:59:52:e7:63:ff:28:
         37:69:ec:65:d0:1a:87:d6:f7:e1:b8:1d:80:87:81:60:c4:8b:
         2d:6d:9a:6f:67:e6:ab:38:a7:bf:15:b9:2c:50:e5:5c:68:f3:
         e6:f0:b0:98:30:43:58:d5:ce:0a:08:00:c6:6f:d1:a9:0e:c6:
         0f:a2:bc:1e:b2:d4:67:9d:ac:10:dd:7b:39:2c:52:65:35:17:
         f1:78:ed:08:b9:93:53:1c:6b:fe:b2:91:9f:30:c0:58:e5:e5:
         3e:d9:31:bf:cc:e9:aa:c5:06:87:39:b5:e0:b5:29:b9:a8:18:
         1f:25:46:7e:03:45:56:86:1f:b4:8b:da:1d:da:45:eb:9f:5c:
         53:d3:52:77:3c:77:63:79:e1:e9:ab:b3:1e:45:01:8e:84:84:
         0e:cd:8a:8d:7c:94:ee:41:5c:b4:b9:f8:c5:89:40:1e:14:9c:
         b8:f9:d2:33:8a:ce:d5:f7:05:29:fa:f5:b5:c3:86:20:47:ea:
         20:c5:1b:9b:26:3b:8f:ec:2e:d5:e9:be:2a:62:f1:9d:c9:08:
         20:09:be:59:05:44:6b:5e:07:72:8b:6d:e5:e8:01:95:19:e9:
         ea:09:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:27 2025 by rpki-client