Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          M7O6D9HK57KeUd/jGqXWjFnWsrGVS8vtbTmEqAc+zeI=
Subject key identifier:   1A:F7:8C:B8:C3:C3:DA:66:C4:6B:D1:4F:79:C7:3B:83:05:78:55:26
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       7046D188BD1B90BC2575E7B5BCD4B6C2FEE0B12B
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 04 Feb 2025 18:56:09 +0000
ROA not before:           Tue 04 Feb 2025 18:51:09 +0000
ROA not after:            Tue 03 Feb 2026 18:56:09 +0000
asID:                     263767
IP address blocks:        167.250.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:46:d1:88:bd:1b:90:bc:25:75:e7:b5:bc:d4:b6:c2:fe:e0:b1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Feb  4 18:51:09 2025 GMT
            Not After : Feb  3 18:56:09 2026 GMT
        Subject: CN=1AF78CB8C3C3DA66C46BD14F79C73B8305785526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:67:bf:5b:1e:9b:73:32:6c:01:60:38:ba:
                    cf:13:d5:4b:e4:4a:7a:6d:17:05:c2:96:7e:22:4a:
                    0b:89:2b:8c:8e:f0:f3:d8:26:de:7e:3e:f0:c5:3b:
                    a8:3a:80:99:98:78:a1:60:89:46:b6:02:58:09:aa:
                    09:69:e1:92:78:b3:31:0d:4e:b8:4e:94:8a:68:c1:
                    f5:da:dd:eb:ba:93:1a:9b:4f:61:87:73:5c:a4:ef:
                    18:c4:a5:4f:b5:4e:fa:8d:bf:3d:08:b8:28:d1:bf:
                    3a:15:bb:04:16:6e:46:69:d4:90:88:71:01:71:4d:
                    07:72:f3:8e:fe:5d:5c:28:6e:e9:9a:4a:a3:da:45:
                    d9:f4:66:db:96:de:82:28:30:f2:7e:e9:08:48:db:
                    72:e7:eb:8d:20:7e:e3:39:5c:7c:74:75:83:61:35:
                    b6:89:27:4c:97:91:c6:33:f0:cb:b2:91:e8:b8:6d:
                    72:d6:c5:15:a8:83:a6:8d:eb:08:66:00:75:07:e1:
                    34:c1:a8:6f:91:0a:f9:a2:55:34:58:b0:29:10:6f:
                    64:f9:cd:da:f2:c0:ec:f9:8d:37:ec:ba:76:24:78:
                    3e:c3:79:af:99:fd:9f:7c:fa:19:c0:8f:bb:0e:c0:
                    4e:70:82:1e:47:d8:4a:8e:2a:e8:e2:d4:9b:3f:cd:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:8C:B8:C3:C3:DA:66:C4:6B:D1:4F:79:C7:3B:83:05:78:55:26
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:af:e6:dc:b1:fc:9d:6c:b9:47:3e:f5:49:6a:75:f7:14:6b:
         72:a5:e2:58:8f:2e:de:f9:62:7c:73:2a:6e:88:b6:17:0c:8d:
         48:40:b1:b3:08:06:36:3b:26:db:f6:a9:88:dc:ac:ef:09:1d:
         75:25:bb:18:5a:d1:b2:e6:96:76:91:68:27:35:97:99:1b:5d:
         4c:e5:aa:71:b4:16:40:5f:eb:e8:34:6e:0f:96:e4:18:0b:44:
         b1:0a:2f:4a:dd:37:30:9e:5a:02:23:7b:fb:f7:79:a0:0a:55:
         5b:85:89:62:a0:db:d1:c0:ea:97:57:99:6c:be:84:8f:46:cd:
         0a:22:7b:e3:83:26:7f:cc:24:21:77:1a:c4:b3:f6:24:7a:b9:
         f4:6b:ca:3e:cf:f0:28:e7:47:e7:e1:0b:c5:7a:fb:12:a8:bb:
         e7:ff:9f:89:a9:c4:c6:8f:fd:40:75:97:eb:fa:76:33:65:72:
         b3:39:d3:08:b7:74:58:2e:7f:bd:b8:a4:14:c3:39:7c:9c:39:
         3f:72:4b:0e:47:b1:77:e1:1d:ed:09:4e:94:26:0c:d6:8e:3d:
         16:80:ed:c3:c2:44:1f:6e:d9:5f:a5:f2:6b:f3:6b:a0:c7:e7:
         2b:a0:09:bd:b8:9b:49:00:52:0c:27:9a:a0:fa:35:0c:7b:cf:
         5d:12:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:47 2025 by rpki-client