Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/3136302e32302e3234362e302f32342d3234203d3e20323636383131.roa
File:                     3136302e32302e3234362e302f32342d3234203d3e20323636383131.roa (raw, json)
Hash identifier:          z4N/1ge0p8ICNWp90VM+GxekibQj20FNOby83hSJoLU=
Subject key identifier:   33:5B:4B:DE:A9:24:12:A1:61:AB:A1:F9:30:45:E0:22:27:C2:6E:92
Certificate issuer:       /CN=E19A0BCC458A8B79C10780DE212FA269EC745A1E
Certificate serial:       68887740F6EF9975086B114EF164B87EB6892C13
Authority key identifier: E1:9A:0B:CC:45:8A:8B:79:C1:07:80:DE:21:2F:A2:69:EC:74:5A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/3136302e32302e3234362e302f32342d3234203d3e20323636383131.roa
Signing time:             Tue 04 Feb 2025 18:20:17 +0000
ROA not before:           Tue 04 Feb 2025 18:15:17 +0000
ROA not after:            Tue 03 Feb 2026 18:20:17 +0000
asID:                     266811
IP address blocks:        160.20.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:77:40:f6:ef:99:75:08:6b:11:4e:f1:64:b8:7e:b6:89:2c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19A0BCC458A8B79C10780DE212FA269EC745A1E
        Validity
            Not Before: Feb  4 18:15:17 2025 GMT
            Not After : Feb  3 18:20:17 2026 GMT
        Subject: CN=335B4BDEA92412A161ABA1F93045E02227C26E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:fd:ea:8c:d9:74:61:21:1c:8d:b3:6e:40:
                    c7:50:ab:63:eb:34:85:9d:75:aa:7f:5e:53:04:ec:
                    80:94:1d:a0:bd:2b:60:2d:e9:90:35:57:12:ea:30:
                    78:5a:00:b8:c8:e0:13:23:5b:29:b6:f6:40:a9:11:
                    18:2b:7d:41:3e:c7:32:e8:93:82:4b:67:93:2c:9b:
                    1c:ef:1c:65:b7:40:0f:98:1c:01:ca:34:13:84:f6:
                    69:27:dd:6e:2c:1e:b3:a1:b3:49:41:93:84:d9:94:
                    eb:f1:84:29:f7:63:3e:4e:4a:7d:c4:e5:20:b2:1e:
                    cb:4b:7e:89:7e:0c:55:41:21:94:2e:a4:08:52:75:
                    d7:8f:64:4e:47:db:b6:5c:33:a9:bf:04:a7:ee:2b:
                    d5:ef:3f:4d:1c:27:9e:06:16:ca:72:d5:54:a4:91:
                    35:e2:06:5c:73:e6:87:42:83:93:b1:e0:9d:67:cd:
                    f8:45:5b:3b:61:2c:cc:bc:c6:ad:76:91:82:19:5a:
                    95:cb:36:0f:cd:3b:01:68:9c:64:f6:7a:3b:4b:99:
                    9d:c3:9c:da:92:fe:5e:3d:e7:0d:28:98:b5:50:a4:
                    be:0a:fb:1e:a8:5a:88:9c:8b:2f:f4:ba:73:34:7a:
                    64:53:67:b8:0a:84:2e:e3:7f:5c:02:10:6a:4b:81:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5B:4B:DE:A9:24:12:A1:61:AB:A1:F9:30:45:E0:22:27:C2:6E:92
            X509v3 Authority Key Identifier:
                keyid:E1:9A:0B:CC:45:8A:8B:79:C1:07:80:DE:21:2F:A2:69:EC:74:5A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/3136302e32302e3234362e302f32342d3234203d3e20323636383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:64:35:e0:88:7d:47:bb:bc:42:f6:75:59:56:c4:e3:8f:
         d2:07:dc:0a:d8:be:da:b1:e3:8b:e2:41:eb:d6:8c:6e:cc:0c:
         5f:b6:a7:ce:63:ac:a7:72:4c:9b:a1:ac:8a:dd:ea:ef:1c:1c:
         a8:c6:8b:de:85:1e:e1:de:a3:b7:4f:00:4b:b6:5a:f4:a2:07:
         5f:0d:88:60:5f:fd:72:a7:8f:47:b5:ee:65:c7:76:1e:a9:f1:
         cd:1c:2e:c2:aa:24:11:8e:a6:22:b6:c2:a7:5c:73:47:5f:ee:
         fe:46:bb:0b:81:61:84:a9:cc:77:bb:ea:62:46:79:cd:55:95:
         01:50:93:18:ad:f7:ed:ee:e7:4d:86:08:5b:fc:1b:e5:8c:29:
         c5:1b:3a:ea:ea:14:ee:1a:6f:04:72:7f:f3:fc:ba:3b:3a:ef:
         f4:b0:64:cf:a2:a6:46:74:50:1d:0e:85:e4:79:a2:b2:e0:ab:
         fe:4a:17:fd:4c:a1:35:13:d6:4b:ef:b7:a3:41:e9:2b:57:cb:
         5f:e6:71:02:db:66:e4:78:85:53:15:e6:ba:aa:93:52:91:d9:
         3f:49:4e:16:2b:b7:22:ee:4b:82:27:dc:5b:fb:f9:aa:45:eb:
         0b:aa:11:7d:10:d3:b5:de:8a:bb:76:ba:d8:82:03:9f:f5:99:
         b3:ab:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:12 2025 by rpki-client