Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa
File:                     3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          1X+4jWQ1zFArjtSWlvagxpLIg9Q5mOq0usjIEvadMCM=
Subject key identifier:   03:01:5A:7F:29:46:42:AF:31:89:2A:E7:65:B1:28:A5:9F:DB:EF:21
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       635FB1392AB88660CF5B286DF2EA8FBEF6B2506D
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 18:01:05 +0000
ROA not before:           Tue 04 Feb 2025 17:56:05 +0000
ROA not after:            Tue 03 Feb 2026 18:01:05 +0000
asID:                     264830
IP address blocks:        168.227.204.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5f:b1:39:2a:b8:86:60:cf:5b:28:6d:f2:ea:8f:be:f6:b2:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Feb  4 17:56:05 2025 GMT
            Not After : Feb  3 18:01:05 2026 GMT
        Subject: CN=03015A7F294642AF31892AE765B128A59FDBEF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:05:1c:ff:d2:b2:40:cb:8b:20:80:79:63:
                    27:17:ce:dc:94:6d:b5:75:d6:be:be:04:af:b4:cd:
                    3d:96:d1:2d:8d:e5:e2:2c:38:20:1f:ac:49:1d:2f:
                    11:d9:14:be:3c:2e:fe:a0:d8:b2:ed:ce:67:25:c7:
                    56:27:bc:10:33:f8:fe:d8:09:17:9f:66:8f:d6:f1:
                    73:32:b8:25:34:82:15:26:ac:c6:f1:08:02:82:57:
                    d1:c4:e0:31:b9:6b:29:46:c7:45:22:64:63:06:3f:
                    1b:50:f9:61:f7:a8:35:fd:a6:84:c8:ff:6d:d4:71:
                    a2:01:6b:5d:39:d4:fa:19:e0:9b:e8:29:a9:f1:04:
                    ca:b9:17:c5:24:db:2a:09:ed:ea:ec:bf:7f:21:2e:
                    59:b8:e7:a0:8c:5f:a8:2b:b1:33:1e:39:11:3e:03:
                    b1:b4:ce:3f:d1:25:a2:f3:63:89:e0:64:56:40:12:
                    c3:9f:06:f8:0e:9e:91:f4:2c:b8:4a:8c:f0:fc:9a:
                    4e:1c:6f:ff:23:4a:34:0d:2b:de:4c:47:f7:96:18:
                    c4:a9:d4:78:0f:60:09:50:4a:50:fc:a2:1c:89:c3:
                    7a:ce:a5:c6:dc:a1:a8:07:33:06:c5:68:82:48:74:
                    a1:04:ab:b0:68:08:79:52:c8:80:69:c3:07:22:9e:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:5A:7F:29:46:42:AF:31:89:2A:E7:65:B1:28:A5:9F:DB:EF:21
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:07:1f:95:68:5d:77:77:7e:4f:09:fb:6c:5c:c6:1e:fb:
         95:8c:b8:ea:16:70:e2:35:f0:1b:25:4b:0b:3c:75:42:f5:7f:
         40:90:3e:28:8b:62:34:e8:c7:d2:d1:5c:fa:9a:09:e5:8f:d3:
         6a:56:e1:73:ff:4c:12:ea:0b:31:0f:7b:a6:fd:b1:6b:c6:ce:
         4a:79:6d:3e:9d:99:78:68:a6:b0:18:9b:9f:81:e7:ef:d1:ea:
         09:9b:f1:36:ba:68:a7:b3:4c:e2:49:4c:be:21:4d:22:51:74:
         8b:62:99:56:f9:23:ff:2f:f4:37:ec:b6:2a:3d:dd:a9:4a:a5:
         71:5d:9c:db:ce:20:8f:67:6c:0e:51:f7:ae:ec:62:9f:57:b6:
         06:d2:8a:56:1d:f0:96:73:5d:3a:c0:39:4f:f6:50:7d:4b:e1:
         2a:7c:72:c7:b4:3b:02:98:69:d1:77:2b:bb:a2:24:09:4c:b4:
         98:30:29:66:e1:d4:f8:a9:e4:a5:65:a6:e4:62:3f:52:de:0f:
         3b:f1:32:2b:53:9c:4d:3b:92:80:27:a1:9c:db:71:fb:a0:ab:
         b7:31:1e:9f:a2:8a:ba:2c:fa:97:d6:ce:97:40:5d:48:6d:bc:
         4f:35:ee:e4:a3:cb:4d:3c:8f:0a:70:47:9d:61:61:91:99:94:
         6a:d6:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:31 2025 by rpki-client