Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          M8EVk9uGuJA8eh62QL+SYTF74/D+DL2zRgl0iQps0E8=
Subject key identifier:   C6:39:85:FE:C4:5D:A9:F5:2F:DD:58:31:EF:CD:8A:38:18:66:FF:9F
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       7B24D0BC5FB449263196E4EC4F8776B10E7102B5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 17 Dec 2024 14:25:00 +0000
ROA not before:           Tue 17 Dec 2024 14:20:00 +0000
ROA not after:            Tue 16 Dec 2025 14:25:00 +0000
asID:                     262166
IP address blocks:        168.234.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:d0:bc:5f:b4:49:26:31:96:e4:ec:4f:87:76:b1:0e:71:02:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Dec 17 14:20:00 2024 GMT
            Not After : Dec 16 14:25:00 2025 GMT
        Subject: CN=C63985FEC45DA9F52FDD5831EFCD8A381866FF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:7f:c2:6e:f9:d6:68:26:94:29:8b:e9:a3:
                    da:51:f6:99:03:08:64:d8:6f:08:cd:5d:22:79:32:
                    df:57:41:24:be:1e:ca:3b:03:10:dc:24:5a:6d:c5:
                    e3:89:6c:b4:3b:f0:f7:38:16:72:94:c3:37:c8:92:
                    e4:02:dc:3e:79:ff:46:18:a9:dc:5b:a2:c7:3f:2e:
                    e7:cb:d0:6d:b8:c8:06:e0:ca:c7:bb:66:cd:d3:58:
                    b2:5c:8d:c2:6a:af:5b:cf:97:a9:85:3d:ec:ab:c0:
                    53:e6:e6:2b:b7:e0:af:36:41:7c:92:80:ee:91:a4:
                    8b:e4:ae:1a:8a:73:8a:d7:1a:28:e3:99:17:9c:79:
                    65:01:6c:04:3b:c5:5a:4b:40:ea:e3:03:2c:39:c1:
                    dc:b3:35:20:1a:14:d3:a2:1c:10:14:59:a5:41:67:
                    34:16:5a:bd:30:91:21:06:ca:8d:91:d4:80:ca:47:
                    77:5e:e0:57:4f:d0:8b:e9:45:bb:e8:08:7a:1e:f3:
                    aa:0c:cf:b5:14:ea:c2:a0:5d:75:f7:5b:b1:d1:15:
                    c8:d5:43:72:14:e9:ef:aa:46:b5:9d:a9:8e:c8:d3:
                    d1:33:57:0f:57:b7:6a:b2:8c:ca:1e:b3:54:d0:c8:
                    ea:57:08:e0:b7:d9:24:33:c1:63:70:ae:74:f7:b1:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:85:FE:C4:5D:A9:F5:2F:DD:58:31:EF:CD:8A:38:18:66:FF:9F
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:f4:a4:05:f9:53:93:86:3a:dd:73:6a:5f:9f:82:66:f1:
         a2:f1:34:aa:7a:02:d5:b6:de:1a:db:64:ef:ad:c2:73:09:89:
         e6:d6:0b:56:af:74:71:6a:e1:86:4d:9e:b6:d6:9b:aa:da:60:
         f2:c3:6f:2d:c8:49:fd:31:41:9f:d5:53:08:be:ca:6a:cf:4d:
         d3:ed:1a:ce:ba:90:76:a4:51:dc:f5:7a:09:10:a9:5a:99:19:
         f1:23:48:56:06:02:6f:b5:c4:d7:dc:c7:d6:c9:9a:f4:0b:9f:
         ff:32:f7:42:c6:37:0c:29:dc:db:56:93:5f:48:08:ab:30:9f:
         1d:34:ce:21:aa:a8:36:e1:b0:c1:b9:7b:9c:a9:d7:1a:d4:e6:
         f3:fe:f0:45:07:0c:1a:a7:c5:77:73:f1:b0:7c:cc:e2:c7:4a:
         80:3b:c0:bb:28:a6:d1:ef:2c:18:f0:f3:68:d8:f6:8e:2e:01:
         6e:f5:1c:02:47:27:1a:cd:0d:72:dd:03:a0:6e:05:02:d8:df:
         dd:d1:2d:b8:fb:25:d5:de:3e:51:29:b4:4c:be:c7:32:a3:cc:
         57:ac:10:b6:a6:91:1d:fb:aa:24:8f:f4:db:99:04:b4:29:94:
         b4:7b:48:8b:94:96:10:9f:ef:6a:9b:58:1a:44:54:e0:1c:34:
         33:07:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:31 2025 by rpki-client