Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa
File:                     3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          PpYm4/6YPJOL7ptLv+ypRI7uuQxJE/b7pFO4pARJuJo=
Subject key identifier:   FC:33:8C:AD:EA:77:DB:D6:60:F7:CD:25:82:AE:45:E5:F5:03:4C:46
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       2ECC895A5E910C769356B151FEA1A9ADB9C6DE59
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 04 Feb 2025 18:29:02 +0000
ROA not before:           Tue 04 Feb 2025 18:24:02 +0000
ROA not after:            Tue 03 Feb 2026 18:29:02 +0000
asID:                     263717
IP address blocks:        131.108.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:89:5a:5e:91:0c:76:93:56:b1:51:fe:a1:a9:ad:b9:c6:de:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Feb  4 18:24:02 2025 GMT
            Not After : Feb  3 18:29:02 2026 GMT
        Subject: CN=FC338CADEA77DBD660F7CD2582AE45E5F5034C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:4e:28:d1:16:64:54:f0:49:86:19:12:89:
                    0d:f2:22:28:d8:a2:a6:5e:90:09:92:ce:3a:a0:63:
                    01:40:7f:9e:c2:2e:fc:84:40:4e:27:c3:33:3f:6f:
                    f6:99:b5:94:d8:eb:8b:94:0d:ee:3f:8c:ac:cd:5e:
                    4c:58:39:04:6b:0b:26:d4:d6:28:7b:37:59:e5:e4:
                    67:9f:1d:46:12:4b:be:aa:1b:52:8d:84:79:e9:75:
                    ac:d5:c0:ac:7f:63:e6:58:84:6a:c4:80:15:bd:e2:
                    28:47:c5:5d:30:77:49:8f:9b:76:aa:10:d8:c6:64:
                    ef:35:05:21:83:25:80:86:13:8e:1b:d5:76:50:aa:
                    61:51:77:71:c4:ea:5f:7a:d7:ba:6c:58:4a:44:bd:
                    05:da:fc:18:f3:b1:0a:bf:25:3a:80:64:eb:d6:c7:
                    c8:e8:88:2b:ed:b5:9f:18:86:2f:af:ab:08:62:7e:
                    a8:5c:4e:fe:33:e9:5c:78:fe:9a:d7:ab:5d:32:44:
                    21:ce:c1:cb:f2:51:f0:63:1f:db:43:ed:a9:a5:a7:
                    2f:49:85:c8:53:5f:af:e7:ea:31:3c:6a:99:a5:98:
                    b1:21:74:1e:06:7f:22:dd:0d:a0:e2:7b:7c:4a:73:
                    57:01:f7:e2:68:1a:27:8a:fd:4f:28:c1:72:bc:b4:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:8C:AD:EA:77:DB:D6:60:F7:CD:25:82:AE:45:E5:F5:03:4C:46
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:95:4c:ad:62:f3:7e:78:55:60:32:a5:c0:61:bd:d6:4c:60:
         0b:2f:55:6f:e8:05:b8:b9:ab:13:c2:4f:a4:10:7a:30:4f:13:
         0d:59:fb:10:8f:fb:4d:b0:3b:d2:a4:da:b0:08:c5:55:cb:4c:
         22:24:a5:da:f7:8c:eb:23:93:c9:4c:17:09:2b:b5:03:a5:76:
         76:8b:91:41:b4:d2:3b:43:8e:a7:78:28:0f:5f:61:68:a7:c1:
         7d:65:0d:91:6f:17:ee:ef:5b:e2:54:ee:7f:c0:d2:10:34:56:
         35:0a:95:30:e6:be:ac:09:91:0b:9d:04:03:75:c4:f1:8f:64:
         d8:81:9b:93:3e:fa:17:84:24:4f:6d:9a:1a:c2:89:a7:4c:d4:
         b9:eb:4c:b5:4c:4c:3e:47:32:5d:00:bc:47:93:4b:e3:76:af:
         e3:44:93:92:b9:bd:46:fe:fa:ad:2d:71:01:04:a4:b6:f6:fb:
         a6:f0:f1:45:09:e4:26:c7:36:4e:f1:69:62:cd:15:1a:26:b1:
         3e:28:f5:91:b0:33:b5:58:89:cb:17:9a:5a:5e:d6:1f:55:3d:
         93:0c:e7:c4:b3:69:11:ab:ec:0d:a0:68:b0:8d:e1:82:50:ef:
         47:72:1c:7d:8c:62:cf:f4:c1:38:66:08:41:b8:e0:a1:d8:57:
         f6:cb:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:17 2025 by rpki-client