Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa
File:                     3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (raw, json)
Hash identifier:          wNzC8NdV3FAhY0BGfmsh0OAVAzwxh9+cJwEUEYLWMok=
Subject key identifier:   CE:2E:8E:80:83:CD:E4:E2:40:79:04:83:7B:2D:49:BC:FE:4F:30:7C
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       3D3DFC5A38B5A2D7F35EE2844823573937E3E44B
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa
Signing time:             Tue 04 Feb 2025 18:03:35 +0000
ROA not before:           Tue 04 Feb 2025 17:58:35 +0000
ROA not after:            Tue 03 Feb 2026 18:03:35 +0000
asID:                     10617
IP address blocks:        216.244.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3d:fc:5a:38:b5:a2:d7:f3:5e:e2:84:48:23:57:39:37:e3:e4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Feb  4 17:58:35 2025 GMT
            Not After : Feb  3 18:03:35 2026 GMT
        Subject: CN=CE2E8E8083CDE4E2407904837B2D49BCFE4F307C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e8:0a:8f:10:87:32:cc:2d:14:8d:8c:82:ca:
                    c8:d5:07:0e:8a:91:28:a1:38:5b:dd:e4:be:2f:77:
                    e9:d8:3b:8c:22:36:93:45:c9:c7:52:c5:a8:5a:f4:
                    de:c0:ec:21:ce:64:77:ee:ae:cd:22:26:09:af:8d:
                    d8:49:f8:bd:36:e5:1c:d8:24:6d:79:05:22:57:fd:
                    54:35:f1:73:12:8f:0b:13:65:5e:97:4d:b7:b8:60:
                    7f:e0:e5:88:7a:92:16:58:40:99:4c:e8:22:45:d9:
                    01:61:5d:0c:90:41:f1:eb:b6:b8:3b:ad:34:22:0a:
                    ec:80:2c:d2:ed:73:79:b3:c5:b6:16:2f:e4:26:ea:
                    8b:21:a9:51:6f:9d:1e:27:f6:0b:29:ba:5e:4a:76:
                    6b:bb:57:69:31:98:81:ed:37:7a:71:ad:29:c2:9a:
                    ae:7f:1e:93:7c:db:e1:61:9b:bb:55:ba:5a:30:38:
                    ea:72:a9:ec:8a:bd:2b:9b:50:17:22:84:48:f3:1c:
                    88:db:58:1c:b9:d1:38:d5:27:41:80:e0:9b:fc:52:
                    9c:60:b6:b8:32:bf:56:88:92:5d:0f:98:bf:30:b4:
                    bd:b5:3b:67:15:0e:9e:15:af:3a:35:18:a6:33:24:
                    b3:9a:c2:a1:53:30:37:e0:ce:48:5c:71:3f:95:8c:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2E:8E:80:83:CD:E4:E2:40:79:04:83:7B:2D:49:BC:FE:4F:30:7C
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.244.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:5c:1a:e5:22:ea:56:3c:f7:3d:88:29:a9:51:9e:f3:40:
         96:6d:53:c8:ea:19:07:6c:bd:a2:e1:28:86:e6:49:62:d8:ae:
         3f:3e:f1:52:9f:58:4e:a5:5c:41:6c:64:9d:6a:96:1a:5d:49:
         78:66:c2:21:69:ee:5e:51:26:c7:07:76:0a:e0:01:5e:84:a7:
         63:93:6e:30:30:d4:8a:53:ec:ec:39:d6:7a:51:02:3e:00:43:
         30:7d:f1:ce:72:8f:a3:ce:99:dc:d7:2a:df:bb:9f:7a:74:61:
         cd:0f:5a:12:ce:3f:d6:55:18:33:40:09:10:3a:49:9c:ba:77:
         92:a9:37:5f:4d:1d:83:39:0b:7b:b4:41:af:6c:d2:8d:86:96:
         b7:d6:cc:68:cb:32:e4:d9:5f:75:d7:5f:d7:48:c3:eb:a5:b2:
         5a:fa:76:ab:17:b7:1a:d7:5b:40:f4:65:2a:51:17:b5:cb:23:
         71:d9:3d:46:aa:c0:2d:88:47:7e:db:e9:67:6c:51:b2:9d:c1:
         cb:81:2c:68:8a:64:5e:7c:cb:f2:14:96:64:2c:df:26:23:05:
         eb:e6:67:f9:89:8d:cb:a4:4b:3e:b9:5b:da:d3:f2:81:2a:c6:
         3f:31:02:bc:08:ed:80:20:5d:77:7f:45:2a:99:4b:3c:7d:f3:
         af:d0:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:43 2025 by rpki-client