Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          BKZ3d885AUE+4Jmsojoh/RfxuLAITemvIp6F+4i3k7Q=
Subject key identifier:   E7:C1:69:F0:52:B9:34:95:69:EE:94:70:E7:5E:70:C2:A5:42:51:0A
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       40331ACB813BD1FE788D9804372158274A531511
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:50 +0000
ROA not before:           Tue 04 Feb 2025 17:54:50 +0000
ROA not after:            Tue 03 Feb 2026 17:59:50 +0000
asID:                     262166
IP address blocks:        168.234.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:1a:cb:81:3b:d1:fe:78:8d:98:04:37:21:58:27:4a:53:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:50 2025 GMT
            Not After : Feb  3 17:59:50 2026 GMT
        Subject: CN=E7C169F052B9349569EE9470E75E70C2A542510A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:6e:8d:c4:38:33:3f:e0:8d:ed:47:03:7f:
                    07:85:5a:ec:c2:c6:57:a5:7d:e9:2d:54:7f:79:72:
                    af:82:34:4b:ad:2d:1b:30:9e:34:c9:e2:4e:7a:22:
                    68:c1:41:93:27:2b:c3:0f:e4:db:77:a7:8a:6c:93:
                    42:e0:94:e9:76:16:1c:ef:04:e4:79:eb:46:cc:68:
                    52:9f:b8:21:a9:3e:b2:37:fc:43:c8:54:5a:53:b5:
                    29:e1:54:a7:bd:b4:4f:8c:f7:85:56:9c:26:b2:1c:
                    73:79:58:be:1a:8c:20:23:9d:17:0a:6b:a6:d5:04:
                    fe:9e:0a:ae:b0:6e:fa:cc:de:5f:80:2a:44:16:0a:
                    a7:35:3a:7d:34:99:8a:82:60:68:23:fe:da:c0:9c:
                    e1:d7:48:de:6c:c1:fe:75:15:a9:17:6a:07:b5:d1:
                    bb:56:df:5d:ae:a2:85:b7:fd:84:fa:05:44:9b:6b:
                    a3:42:0f:d7:20:5f:66:16:4b:d2:11:f7:cf:55:38:
                    69:3c:b2:12:df:72:08:da:cc:88:46:28:24:82:9c:
                    91:b1:df:d1:73:f4:ef:42:79:cf:6e:6c:bd:b3:56:
                    59:56:41:be:dc:14:38:72:9c:07:47:0b:90:40:7e:
                    3a:a2:34:62:65:52:9b:dc:97:1b:c8:bb:10:bb:a8:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:69:F0:52:B9:34:95:69:EE:94:70:E7:5E:70:C2:A5:42:51:0A
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:63:3d:31:6f:c0:83:04:5c:b9:5c:c5:c9:eb:70:69:d5:
         e0:bd:d9:ac:a1:1b:ec:2b:6b:09:dc:7c:a9:23:37:e6:4b:83:
         57:2d:85:7d:46:eb:48:80:f6:81:8d:56:ce:a4:1f:e0:7b:cf:
         a9:02:f1:99:24:a8:be:49:9c:89:00:db:33:cc:62:d3:1a:50:
         c7:9b:16:8a:0c:82:52:ae:ee:13:66:79:14:6e:7b:3a:b3:3a:
         93:dd:44:d4:4e:e2:a8:15:08:5a:ed:8c:1a:0c:49:9a:c0:f2:
         78:bf:2c:d2:2e:40:de:80:f2:1f:62:0b:de:33:7b:b6:c9:3d:
         7c:ca:8e:23:32:1e:49:9d:fb:9c:d6:6f:90:06:88:9f:08:22:
         4d:db:bd:60:36:e2:52:f5:33:ee:9b:cc:ad:e8:c7:c9:0a:d0:
         58:ab:5b:f0:b7:67:93:14:5a:0f:c4:7a:fa:34:8b:7e:93:99:
         41:24:13:ab:38:f1:f3:96:f4:7d:8e:42:7f:9b:bf:40:2f:ee:
         20:22:b0:18:cd:3c:c0:bc:1d:20:55:fd:b2:61:44:b7:70:68:
         d4:e8:07:27:d2:fd:c8:a8:c0:ae:b3:94:69:ab:a1:e6:06:f7:
         46:29:6c:28:f0:0f:e0:6a:6d:f7:84:03:07:8f:db:30:6c:31:
         43:ba:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:46 2025 by rpki-client