Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          yQ16qAmqaAI98FtkS8ZQ30/0hGNA2eTWMHfC3sWdx4Y=
Subject key identifier:   6A:2B:F3:7A:92:C1:01:79:C2:64:21:10:EB:6F:35:30:33:CA:D5:A5
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       4822761E9F035A6CCF46A3B6FCE3B2674B426E84
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:38 +0000
ROA not before:           Tue 04 Feb 2025 17:54:38 +0000
ROA not after:            Tue 03 Feb 2026 17:59:38 +0000
asID:                     262166
IP address blocks:        168.234.222.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:76:1e:9f:03:5a:6c:cf:46:a3:b6:fc:e3:b2:67:4b:42:6e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:38 2025 GMT
            Not After : Feb  3 17:59:38 2026 GMT
        Subject: CN=6A2BF37A92C10179C2642110EB6F353033CAD5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:00:a3:ed:8b:4b:82:c8:b5:01:31:a1:54:
                    73:08:cf:76:48:9b:02:a9:39:6e:ce:0d:1e:ac:4b:
                    39:b9:87:50:e4:2d:2c:62:cc:e7:54:7e:85:56:23:
                    b8:95:80:a1:20:32:79:ed:62:0f:bb:12:e1:ae:80:
                    13:71:e1:8d:cb:83:6b:fc:4b:ce:8f:b5:e8:a0:56:
                    8a:44:87:07:a5:26:85:7a:94:19:e0:1b:27:97:d7:
                    7b:c9:3d:ca:e0:81:3b:8d:3d:32:36:2f:74:3c:44:
                    f4:4d:7e:5f:55:32:96:8e:5a:eb:c7:f7:cc:4e:85:
                    46:78:36:eb:af:6e:4a:88:d2:67:9e:94:44:a2:05:
                    c5:b9:b9:14:9d:75:30:f9:d5:df:51:28:0f:0a:a4:
                    d2:35:10:1a:ce:48:cb:ee:d5:0f:5c:1f:7b:a0:25:
                    e9:73:d0:53:2e:2a:91:e0:cc:eb:cc:08:60:73:10:
                    0e:a2:02:a7:3b:36:87:b9:cd:02:d6:35:46:34:7d:
                    a0:60:5c:fa:3d:c3:a0:f7:71:f5:80:9d:59:ac:13:
                    3d:39:17:61:41:1d:ce:52:ef:22:88:e0:3c:fe:87:
                    e3:7f:64:da:42:39:ea:d3:43:66:76:14:fb:57:0e:
                    ee:3f:fb:ee:74:39:14:d3:47:86:e5:89:8c:16:b0:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:F3:7A:92:C1:01:79:C2:64:21:10:EB:6F:35:30:33:CA:D5:A5
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:5d:14:61:e8:45:60:5b:0d:b6:9d:8b:81:f4:9a:76:fe:
         de:a8:ac:e8:86:36:c2:18:4f:e4:79:31:21:42:fb:21:88:34:
         d4:8d:f6:bf:8e:69:b6:b2:65:2c:59:6b:3a:7c:9d:2a:53:d6:
         23:50:97:41:9e:95:0c:53:42:fb:f3:37:38:26:bb:d2:10:db:
         a9:2e:49:e2:95:d6:2a:4d:a9:1e:e5:74:a3:23:57:c6:c3:a8:
         52:f8:68:03:e3:f3:63:8a:93:b0:ef:ea:2d:35:0e:08:64:f0:
         2a:f5:08:b0:ef:9a:6e:ac:9f:5a:e3:60:1c:a7:e2:21:88:47:
         68:dc:93:e3:09:6e:32:42:aa:84:46:59:a4:30:ab:f7:ab:f2:
         a8:9a:4b:64:2f:8c:45:39:06:66:d7:25:68:9f:8a:7e:46:4c:
         0e:8b:c6:81:56:4d:dc:68:07:4f:62:7b:fa:27:22:ed:9b:81:
         0a:82:cb:cf:72:06:c3:ef:22:d8:91:63:c0:ef:62:d3:8b:7f:
         8b:4c:ff:8a:0b:9c:83:d9:a9:c4:05:e5:e2:94:98:71:e0:b8:
         2f:18:32:37:54:a7:a3:7e:d7:ea:57:fc:84:7d:e5:93:9c:58:
         b3:17:88:90:38:6f:55:4a:d1:c1:69:ca:e1:67:a2:fd:b8:7f:
         5b:1b:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:08 2025 by rpki-client