Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/3139312e39372e36342e302f32322d3234203d3e20323634373436.roa
File:                     3139312e39372e36342e302f32322d3234203d3e20323634373436.roa (raw, json)
Hash identifier:          gTdxeXFrqg1VPexO5FKT3vxMpmEesz+uIeh4yVPpjJ8=
Subject key identifier:   E8:9D:3A:8F:34:30:14:C3:56:F3:FE:ED:40:23:74:0B:1A:9A:94:60
Certificate issuer:       /CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
Certificate serial:       0C487BD878D7C7A1CE5BC714227E29741AD16D4D
Authority key identifier: 9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/3139312e39372e36342e302f32322d3234203d3e20323634373436.roa
Signing time:             Tue 04 Feb 2025 18:30:44 +0000
ROA not before:           Tue 04 Feb 2025 18:25:44 +0000
ROA not after:            Tue 03 Feb 2026 18:30:44 +0000
asID:                     264746
IP address blocks:        191.97.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:48:7b:d8:78:d7:c7:a1:ce:5b:c7:14:22:7e:29:74:1a:d1:6d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
        Validity
            Not Before: Feb  4 18:25:44 2025 GMT
            Not After : Feb  3 18:30:44 2026 GMT
        Subject: CN=E89D3A8F343014C356F3FEED4023740B1A9A9460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:01:6a:b8:66:d9:07:9d:6d:1a:3f:ba:3c:
                    2f:68:32:91:70:e0:de:16:2b:b9:4f:99:c9:44:17:
                    59:6b:36:44:c2:cf:f5:7e:3e:3b:d0:85:58:a3:d7:
                    cb:46:50:cd:bd:7b:31:3f:b1:0b:2f:36:13:2a:48:
                    b1:2b:fb:e6:cb:d5:38:25:9b:13:f3:97:8b:de:0b:
                    21:fa:29:09:b9:44:59:a9:17:ad:60:2c:10:b0:02:
                    31:0b:9d:a6:33:6a:60:de:76:73:52:a7:2f:bc:cd:
                    14:0e:46:05:b8:05:a3:59:03:9f:e1:0e:91:93:ee:
                    a9:c3:87:89:a7:d7:be:34:9d:01:d4:7b:e7:30:da:
                    58:d6:45:85:a2:88:ac:c8:48:64:6e:42:3a:2b:06:
                    b0:2e:2a:00:c8:7b:e8:41:3d:06:b0:9a:4f:be:07:
                    5a:c3:de:da:bb:f9:7e:15:25:96:86:31:40:75:ce:
                    78:45:f9:19:8c:fb:7f:3c:5d:8a:fe:72:62:98:d2:
                    db:f4:18:1a:e3:b7:72:ce:db:81:3f:00:0b:e5:3a:
                    d1:13:d0:5a:66:0b:ea:31:d0:eb:98:12:29:43:83:
                    0c:70:54:e4:f1:ab:76:0f:86:7f:1b:67:57:2f:14:
                    1a:55:7b:98:d6:c8:0b:49:86:3a:7a:15:06:b6:84:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:3A:8F:34:30:14:C3:56:F3:FE:ED:40:23:74:0B:1A:9A:94:60
            X509v3 Authority Key Identifier:
                keyid:9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/3139312e39372e36342e302f32322d3234203d3e20323634373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:27:d3:82:28:f4:51:e1:88:75:d4:b9:af:ec:e0:a9:c4:
         11:da:fe:49:46:67:c0:42:11:c0:ba:10:26:28:4a:3e:23:52:
         8b:d8:33:e3:67:ce:ee:d0:b7:0f:90:ef:ed:ef:bc:71:47:6a:
         5a:cb:9d:2b:2c:cd:42:f7:78:a8:55:d2:26:97:60:09:ef:1e:
         c4:d8:88:e1:8a:5e:c1:45:f7:3b:9f:b5:13:a8:2d:cb:be:8f:
         19:48:90:bb:68:f3:f8:de:b3:64:e4:20:69:a0:19:eb:e5:94:
         bd:d6:6c:46:cf:25:47:fd:d4:53:a5:d1:b3:60:5b:d4:fe:9f:
         86:26:b3:e5:3b:20:1d:df:00:bd:6a:bc:b4:4a:93:7c:54:94:
         50:4a:a0:df:c7:8d:17:1d:d3:54:64:7f:77:fe:06:4f:b4:5c:
         33:8a:5c:2a:cf:16:2e:cd:3a:ca:f7:f4:48:90:6d:97:a3:c3:
         f4:6d:71:60:97:48:5d:8c:a8:49:71:b5:0c:32:73:ee:4d:87:
         d7:d5:5e:38:d0:10:f1:de:3e:d3:36:48:e4:f9:f5:f1:a2:f9:
         34:22:59:44:5c:7e:f0:14:b2:1e:22:94:3e:18:ae:27:71:53:
         14:bb:f8:c5:5c:ce:6a:eb:0f:a8:35:7e:ff:b9:63:64:c5:1c:
         e0:0b:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:51 2025 by rpki-client