Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa
File:                     3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          mIlkeCY3REDs51SWu2P4jDS0ue+LDEeSdDgXC7U8i10=
Subject key identifier:   13:D6:00:BB:46:6B:97:7A:39:54:45:E2:BE:9B:E1:34:04:99:C4:59
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       53D5D97DBAB38283A10A8313E6FF7A9F0A5C277C
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:49 +0000
ROA not before:           Tue 04 Feb 2025 17:54:49 +0000
ROA not after:            Tue 03 Feb 2026 17:59:49 +0000
asID:                     262166
IP address blocks:        168.234.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:d9:7d:ba:b3:82:83:a1:0a:83:13:e6:ff:7a:9f:0a:5c:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:49 2025 GMT
            Not After : Feb  3 17:59:49 2026 GMT
        Subject: CN=13D600BB466B977A395445E2BE9BE1340499C459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:1d:09:bd:f8:5a:97:cf:92:39:45:2e:a3:
                    ac:13:ee:d3:db:ab:42:83:17:40:85:fd:97:66:65:
                    a3:28:14:60:de:99:1f:ef:61:a2:ce:59:52:0b:9c:
                    a1:3d:78:6c:27:9e:78:81:5b:fc:36:8a:a4:4c:bf:
                    53:c0:25:d8:bf:da:67:9c:ad:b0:fb:b2:ea:fb:65:
                    e1:6d:4f:43:d9:7c:70:0d:de:fa:50:d7:de:ff:48:
                    da:0a:fe:62:48:c0:2d:b2:ee:0f:0c:84:53:3e:05:
                    5f:f2:14:59:69:93:41:b9:20:4f:0c:7c:3e:9b:95:
                    29:93:1f:e1:cb:b1:06:95:7e:82:fb:9f:7a:1d:c9:
                    aa:d0:80:67:c2:89:4d:e4:de:fb:b1:b3:2f:8e:c5:
                    b1:62:0e:93:44:1b:98:d1:88:65:90:b6:d4:6f:90:
                    f2:5c:c6:9f:d1:2d:52:01:9c:3d:f7:b4:c3:8d:06:
                    49:7a:04:0a:e0:e4:4e:fb:b2:e9:80:95:da:12:66:
                    44:70:3a:5e:ca:0c:e7:21:8f:56:24:96:72:5a:02:
                    47:c2:9f:26:75:dc:4c:46:24:53:66:38:25:c2:49:
                    a1:16:9c:2d:dd:d3:7e:0d:cb:77:5d:98:c3:5a:65:
                    30:34:14:74:63:78:35:31:ce:e8:74:cd:7c:b7:b1:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:00:BB:46:6B:97:7A:39:54:45:E2:BE:9B:E1:34:04:99:C4:59
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:95:51:3b:f7:6e:7e:4a:c6:73:b7:0c:53:3f:11:28:7d:
         3f:9d:a7:53:77:51:83:66:eb:70:c4:a1:ed:70:47:ef:13:6c:
         bd:b7:4f:ae:b3:df:5b:b7:36:89:cf:fd:bf:af:8c:f8:8a:85:
         8c:d0:9c:f7:74:2a:1c:fc:ff:f5:d6:db:5d:0c:05:8e:39:93:
         d5:b9:cf:60:8e:08:5e:82:dc:5a:59:1c:aa:2a:cd:70:92:5b:
         6f:f9:58:06:6a:75:36:db:8a:23:9c:20:4a:1f:5e:b6:65:47:
         68:c0:b7:06:3e:4f:d0:50:85:2c:67:b2:f0:01:02:d0:d9:55:
         21:81:87:20:0c:7f:e8:02:6c:86:80:f4:dd:80:89:1b:e8:be:
         9e:06:be:d1:61:1c:38:12:0f:e7:0f:ad:d3:bd:65:f2:11:db:
         cd:33:5f:b1:c6:0c:37:16:ad:9c:41:bd:be:69:b7:98:85:11:
         6c:2a:5d:05:9e:c2:43:b1:d0:df:77:ff:15:99:60:0b:77:60:
         67:1b:99:c6:8b:ec:16:09:e8:32:ca:ee:0d:3e:01:f8:be:35:
         10:8c:9b:b3:f0:79:18:80:bd:60:3c:e4:35:29:24:b4:fe:68:
         a6:4a:41:91:37:11:7a:e5:f8:24:e7:a2:ff:6d:4d:80:6b:45:
         4f:bb:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:16 2025 by rpki-client