Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa
File:                     3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          hCpcIDCv3HXNWz3+Hepy2Ajmc2SvQ1uYSZTu54AJRxA=
Subject key identifier:   CE:FD:51:E5:03:B5:C2:74:3B:B9:16:92:97:D0:FF:B0:14:5E:56:49
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0A97E9BD3A4F3244C515162A1687FB2AED199CC4
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:19 +0000
ROA not before:           Tue 04 Feb 2025 18:50:19 +0000
ROA not after:            Tue 03 Feb 2026 18:55:19 +0000
asID:                     14754
IP address blocks:        216.230.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:97:e9:bd:3a:4f:32:44:c5:15:16:2a:16:87:fb:2a:ed:19:9c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:19 2025 GMT
            Not After : Feb  3 18:55:19 2026 GMT
        Subject: CN=CEFD51E503B5C2743BB9169297D0FFB0145E5649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:63:7c:dd:2c:4f:42:2e:65:84:85:11:6a:
                    de:5e:10:17:02:13:3b:87:e0:ed:9e:df:b7:31:51:
                    79:99:79:5f:0a:3f:81:07:c1:20:f2:54:b1:fe:bb:
                    eb:ba:82:30:73:02:a3:f6:c6:53:b8:4a:b8:9e:b1:
                    80:f8:74:95:1e:1c:43:1c:66:6f:4f:1c:79:e7:4f:
                    a1:d0:a3:e1:6c:68:0f:8f:6a:8f:68:7a:f7:64:6c:
                    00:b4:52:35:f4:99:48:5a:60:44:5c:b2:2d:18:3f:
                    61:86:8d:33:3f:44:5e:16:b1:e4:36:26:2f:81:2c:
                    29:37:cf:80:50:a9:da:21:a2:f1:53:bc:31:a7:88:
                    e7:e8:d5:89:d7:96:7d:95:bb:18:36:de:cb:34:a2:
                    87:b9:a7:35:6d:ec:92:65:88:74:04:2a:24:f6:ab:
                    92:a5:d3:9b:f6:36:09:88:5e:c9:1e:da:b6:b8:dc:
                    37:8b:29:75:75:6a:e8:24:61:0c:8c:23:19:90:3e:
                    ff:98:40:ee:36:01:e3:f5:38:58:56:c1:e0:1e:74:
                    4f:64:86:0f:98:d8:7d:c6:f4:1b:27:04:c8:65:61:
                    e2:a6:ec:39:eb:01:cb:25:83:9d:fa:94:a9:6f:ac:
                    10:83:14:61:77:12:33:8b:a1:b3:f7:f8:06:a1:7d:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FD:51:E5:03:B5:C2:74:3B:B9:16:92:97:D0:FF:B0:14:5E:56:49
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:31:17:a8:5a:36:26:d0:06:1d:74:49:e8:83:c3:f3:fc:c1:
         85:8f:dd:71:d7:0c:45:c0:94:55:3f:53:00:5e:1d:64:61:e3:
         85:ed:63:03:db:b2:5f:94:68:a5:7c:7f:2e:f0:c6:d1:7d:6c:
         23:ae:31:ff:74:fe:5a:84:23:dd:04:f7:4b:54:7c:a0:ae:a5:
         1d:0e:75:47:37:fa:00:d4:d0:2e:48:10:a1:d1:b4:d1:17:49:
         57:dc:71:ef:f5:d8:79:07:d5:5e:39:7c:66:ee:8e:d0:0e:b7:
         a0:91:fb:4b:42:a0:d8:f3:46:dc:71:e2:f3:cf:ee:01:00:39:
         1f:40:1c:1b:c8:c1:2c:34:db:e7:6e:60:af:d0:60:52:2d:1f:
         ee:ba:1d:5e:96:65:5b:14:79:79:9c:99:fb:a1:9d:c3:1d:74:
         5f:b5:71:4d:24:81:31:26:89:e3:1a:5c:b2:7d:5e:0f:c7:7f:
         be:d5:ea:bb:68:90:16:57:ba:ca:06:52:e1:a9:5d:d0:61:36:
         06:58:5c:5a:ac:71:23:57:57:87:43:19:81:55:f2:ad:06:66:
         be:4c:42:a5:cc:9f:15:40:7c:82:34:b0:5f:39:55:10:df:af:
         86:ce:e8:81:38:ca:81:36:ee:55:3c:e2:ea:2b:3a:c5:99:94:
         7b:7c:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:33:00 2025 by rpki-client