Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa
File:                     3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa (raw, json)
Hash identifier:          gxZbKs+njy675ue24C9UlbBAxMlPheIiqVTRit1tVEc=
Subject key identifier:   A4:A1:B7:82:A8:33:98:1B:B5:E6:45:67:50:9B:B9:1B:19:CC:DC:FC
Certificate issuer:       /CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
Certificate serial:       57C96765B9AC09F15D90249C84868EB2BC8FB469
Authority key identifier: C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa
Signing time:             Tue 04 Feb 2025 20:03:31 +0000
ROA not before:           Tue 04 Feb 2025 19:58:31 +0000
ROA not after:            Tue 03 Feb 2026 20:03:31 +0000
asID:                     263235
IP address blocks:        192.100.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c9:67:65:b9:ac:09:f1:5d:90:24:9c:84:86:8e:b2:bc:8f:b4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
        Validity
            Not Before: Feb  4 19:58:31 2025 GMT
            Not After : Feb  3 20:03:31 2026 GMT
        Subject: CN=A4A1B782A833981BB5E64567509BB91B19CCDCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:94:6a:63:e5:6a:80:c1:67:45:33:33:2f:
                    05:a5:f0:e5:f5:0b:f3:be:ae:f1:f2:a1:fa:ca:44:
                    40:fd:7a:71:5e:dd:87:6f:5e:01:a5:4b:2a:cc:4b:
                    44:d1:a4:13:9f:9d:40:ee:35:c0:6d:cd:36:4d:29:
                    83:62:97:98:0b:02:d8:b9:09:60:d4:95:57:96:d3:
                    15:b1:59:a7:74:97:c9:69:fd:d4:96:a3:ed:35:1c:
                    d0:1f:a4:7a:dd:63:65:6e:0f:0e:12:37:fd:40:83:
                    c8:49:30:b9:74:cf:b5:8e:16:83:66:be:8b:fc:b6:
                    b7:51:be:2c:7d:37:d1:f9:88:c7:5f:23:c7:ab:96:
                    15:9a:5c:db:9d:70:68:97:1c:ca:e1:34:fe:d1:2c:
                    83:84:de:73:ea:c8:06:11:8a:29:ac:04:cf:50:50:
                    c6:13:cb:29:c1:fa:7d:59:5e:f0:a6:53:ef:d3:b9:
                    6a:91:39:b3:77:2f:c7:15:a6:c1:e6:91:31:7b:13:
                    1b:fe:d0:c2:33:d7:ca:17:72:cf:83:20:81:4a:48:
                    58:14:bb:33:20:26:0a:c5:6d:56:bc:fa:fb:75:df:
                    f1:52:5c:ac:3b:a9:5f:16:16:8d:2e:bb:47:36:e5:
                    75:13:44:20:45:64:41:5a:1b:cc:ff:ce:4e:1a:33:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A1:B7:82:A8:33:98:1B:B5:E6:45:67:50:9B:B9:1B:19:CC:DC:FC
            X509v3 Authority Key Identifier:
                keyid:C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:69:da:69:d4:25:b2:51:52:2d:ea:2c:d8:49:0b:6a:c3:49:
         cc:b9:1d:c4:fc:83:d4:21:bf:42:09:e6:de:d3:7a:cf:8e:31:
         61:15:21:34:f3:c8:3a:bb:f3:c0:66:83:9b:a1:80:72:12:30:
         bd:2d:3b:0c:40:5e:eb:89:8e:88:b3:11:04:93:f6:67:c2:82:
         5e:a8:19:4c:0c:44:63:38:c9:3b:46:07:ca:97:eb:ee:e1:58:
         98:8a:78:ca:5c:bf:60:6e:f0:72:1e:d8:5f:c8:ae:cc:f5:26:
         95:ce:db:08:93:69:1b:ee:e2:b6:15:29:a0:c5:48:b2:6e:c7:
         b9:da:9b:ac:07:01:10:62:83:25:65:aa:ac:1f:ec:91:ce:cd:
         11:5b:38:3b:cb:f7:02:2c:51:57:c7:7f:99:7a:9d:c2:c5:99:
         4c:02:28:96:05:b5:13:0d:92:fb:87:60:9b:3e:65:c0:a0:75:
         95:3d:d8:76:fd:4e:05:b5:04:c1:67:5f:a6:bd:c5:85:06:0d:
         39:c3:9c:a8:f1:aa:06:95:fa:d0:db:95:8e:64:ee:af:fc:34:
         3f:e1:bb:f9:2e:d2:86:64:61:96:93:66:b7:0d:9a:f2:8e:31:
         01:23:fe:eb:25:dc:00:20:b1:49:c3:93:95:c1:30:67:f3:f0:
         ea:18:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:28 2025 by rpki-client