Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa
File:                     3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          EF3hSbWNSuLwGIfHqixC+IhvKwbPgDX66CGxt4frxnU=
Subject key identifier:   83:4C:E5:41:DA:6B:23:D4:91:3E:E4:11:77:31:D9:A6:26:34:90:23
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       11E530DAA11883A50EC7DFCBCFB1B31413FC43A3
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 04 Feb 2025 17:58:51 +0000
ROA not before:           Tue 04 Feb 2025 17:53:51 +0000
ROA not after:            Tue 03 Feb 2026 17:58:51 +0000
asID:                     262159
IP address blocks:        143.137.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e5:30:da:a1:18:83:a5:0e:c7:df:cb:cf:b1:b3:14:13:fc:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Feb  4 17:53:51 2025 GMT
            Not After : Feb  3 17:58:51 2026 GMT
        Subject: CN=834CE541DA6B23D4913EE4117731D9A626349023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:21:a4:ec:eb:50:ca:fb:28:84:4f:a2:3b:
                    24:74:5a:bd:15:65:fd:e5:56:c9:14:0c:97:ec:bf:
                    84:9c:74:b2:a5:ed:fb:84:a5:e2:d6:4b:db:a7:23:
                    3d:00:b1:55:16:c4:e8:8c:2f:e4:e8:ba:88:af:2b:
                    87:9b:4e:18:32:f1:6f:c2:ce:cd:9b:3e:6a:68:dd:
                    5a:b8:ca:44:90:d4:a3:23:20:75:78:92:9f:ce:57:
                    37:bf:0e:39:c1:3f:cb:37:d0:06:63:e9:14:b6:35:
                    fa:ea:6d:c1:25:6c:20:76:04:aa:b7:d8:58:44:33:
                    89:56:f7:10:2b:b3:8f:6a:a7:81:1a:46:b5:ff:b8:
                    f0:22:50:b8:ae:db:fc:a8:6d:ba:44:53:f9:b6:3a:
                    13:74:50:26:90:11:b4:15:7e:fc:26:8d:9c:d7:94:
                    91:f8:4e:ec:36:f9:01:06:f9:4a:c9:a4:69:7d:25:
                    55:ee:df:88:22:73:d5:7b:11:23:86:c3:e6:6a:7e:
                    37:a4:f3:21:cf:8e:05:f3:99:5b:d7:52:0d:6b:17:
                    78:f1:9c:07:bc:87:62:b5:85:53:8b:cf:64:17:82:
                    a2:1c:08:9f:81:0d:73:7c:ec:44:a2:48:d9:bd:bd:
                    ae:f4:27:c3:01:60:78:d3:04:34:bb:78:69:9c:28:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:E5:41:DA:6B:23:D4:91:3E:E4:11:77:31:D9:A6:26:34:90:23
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:09:90:b5:6e:a4:83:f4:97:47:cc:67:e3:4b:68:cd:2d:
         8b:8c:e6:31:e2:9a:1c:03:3a:cb:dc:e9:81:15:ec:18:f2:0a:
         68:f7:a7:1b:ba:9f:e9:8d:c0:85:1f:e9:16:a4:7a:51:ee:64:
         ec:df:f0:68:d6:9a:c0:24:3b:4d:37:4e:5a:dc:88:81:7a:15:
         6b:ae:08:51:38:3d:9f:4c:b2:30:3b:03:ea:38:7c:69:be:f2:
         7f:7f:cf:83:1a:c1:05:96:cd:dc:b5:6c:71:4b:35:67:1a:6a:
         a2:b9:79:35:2e:37:d9:7b:33:f0:e5:42:99:87:c9:a4:95:bb:
         cc:97:65:4d:93:4d:02:f2:b3:87:0e:2d:12:44:d9:fd:36:9f:
         35:4c:1b:e1:11:d3:fb:b6:f2:37:80:9b:b7:dd:48:b8:93:09:
         dc:72:f5:de:d6:38:38:f4:ed:b3:46:f1:5b:0e:06:8b:dc:ed:
         77:4d:6c:97:49:10:9e:62:30:04:39:16:d4:8e:d0:06:4d:b6:
         43:e1:44:e6:b7:b5:49:16:b5:fb:23:4d:1c:dd:3e:db:16:88:
         0d:d9:b6:1f:e4:ce:e1:62:d0:f2:b1:c9:d8:a5:f0:40:d9:73:
         c2:99:7e:b3:80:dc:a3:6a:24:1e:bf:52:5c:f3:c1:52:e5:4f:
         63:d8:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:07 2025 by rpki-client