Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
File:                     3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          DrGywcUwlcxwSFVIRZ3knj0K9EjODVZmFy8bM7OHoQc=
Subject key identifier:   A0:A6:D2:FD:15:E0:53:4F:AE:00:84:D2:07:0A:D6:62:A7:75:B7:C7
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       7C5FD25AF8054391D7BCCBECA94ACE252355EC23
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 20:00:19 +0000
ROA not before:           Tue 04 Feb 2025 19:55:19 +0000
ROA not after:            Tue 03 Feb 2026 20:00:19 +0000
asID:                     262186
IP address blocks:        192.144.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:d2:5a:f8:05:43:91:d7:bc:cb:ec:a9:4a:ce:25:23:55:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Feb  4 19:55:19 2025 GMT
            Not After : Feb  3 20:00:19 2026 GMT
        Subject: CN=A0A6D2FD15E0534FAE0084D2070AD662A775B7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:24:23:49:68:6c:eb:3f:68:e6:0f:9b:f6:
                    22:d3:97:58:a2:60:c3:e1:3c:dd:a6:af:79:88:18:
                    8b:5c:12:50:41:74:e7:2e:55:64:26:87:02:38:29:
                    b7:28:ed:e8:7b:59:36:53:dc:a6:26:bd:04:39:3a:
                    5b:32:de:de:3b:c7:2e:d9:c1:f4:33:6a:21:7c:59:
                    da:0e:ae:35:29:f4:f2:b4:2c:d9:a5:11:d5:82:6f:
                    3c:e7:34:4f:0e:6e:cb:18:76:af:ca:0c:08:7e:86:
                    a5:33:ec:39:70:75:73:52:94:df:05:fc:3a:37:50:
                    e5:75:c3:80:00:ba:f2:41:f3:98:d4:60:53:d6:1e:
                    b3:30:20:f3:13:4a:fd:f3:8d:44:d0:71:08:00:7b:
                    98:0d:0f:5b:9d:70:a5:26:1c:5c:4e:fa:24:4c:62:
                    b3:ae:a6:ed:21:77:b0:6c:f9:77:72:8b:06:75:be:
                    18:23:2a:1a:56:c0:fb:93:f7:5a:0f:21:9b:87:0b:
                    e9:72:93:8b:88:f1:09:90:a2:be:b1:10:6a:b1:2c:
                    4a:17:46:be:bb:dd:ef:20:14:6d:2f:a0:5c:8d:15:
                    c3:80:da:cb:d9:64:75:ff:12:72:0d:bc:90:2a:b4:
                    9a:51:2c:7c:66:49:c8:7b:59:b9:b6:dd:98:bd:39:
                    fa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:D2:FD:15:E0:53:4F:AE:00:84:D2:07:0A:D6:62:A7:75:B7:C7
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:b5:ba:6c:65:42:8e:41:69:e3:81:db:ed:bf:f2:f1:ff:
         f1:35:8d:56:3b:84:7e:23:b1:39:ac:6a:3c:69:fa:f3:95:ee:
         04:b9:de:e6:99:cc:ff:23:26:01:bf:ae:99:a1:20:96:6b:09:
         d1:63:70:11:66:90:5c:98:49:03:aa:c8:90:2b:44:f5:5c:6f:
         66:26:96:96:1d:bc:32:45:0d:c8:0b:35:84:dc:16:52:82:08:
         e4:4e:d8:f6:dd:0f:57:eb:8b:00:ae:8f:f2:17:11:85:c6:1c:
         e4:75:3a:0e:a1:f4:4c:03:f2:8d:da:7f:ab:d9:b0:7b:ce:c6:
         08:f3:7e:80:2e:49:e8:1f:51:86:34:22:d6:ae:e1:b4:9f:ae:
         fa:3c:c5:7f:3f:3b:94:d0:5c:40:7b:14:dd:f5:de:3e:29:98:
         88:ff:d8:99:6c:0a:95:0b:1c:96:7f:10:6c:dc:84:22:6a:46:
         a2:0a:c5:b0:82:0b:97:97:b7:47:39:a2:49:2b:bf:f8:20:ed:
         b9:83:db:57:48:06:97:a8:51:32:12:08:49:cf:2b:a4:eb:67:
         8e:dd:d7:29:01:dd:0a:02:a5:1f:5b:6f:55:77:75:23:3b:ea:
         e6:2f:1e:c4:83:ae:0b:15:04:e0:1f:f3:8a:6e:43:9f:36:85:
         12:bb:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:21 2025 by rpki-client