Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa
File:                     3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          OFb6YF+Q+FMasExVAgkMqqSO+PyqD0vtS3emWK2zX1o=
Subject key identifier:   5F:5B:70:0A:63:4E:B6:8F:42:5A:AC:B8:E5:BA:18:37:A3:3A:18:75
Certificate issuer:       /CN=222B3CF3CD749CFD33A071A688E449758651F5AE
Certificate serial:       1FAA87C7610AB28075C4F7C594583EC687006FAA
Authority key identifier: 22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa
Signing time:             Tue 04 Feb 2025 18:53:52 +0000
ROA not before:           Tue 04 Feb 2025 18:48:52 +0000
ROA not after:            Tue 03 Feb 2026 18:53:52 +0000
asID:                     265554
IP address blocks:        201.139.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:87:c7:61:0a:b2:80:75:c4:f7:c5:94:58:3e:c6:87:00:6f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222B3CF3CD749CFD33A071A688E449758651F5AE
        Validity
            Not Before: Feb  4 18:48:52 2025 GMT
            Not After : Feb  3 18:53:52 2026 GMT
        Subject: CN=5F5B700A634EB68F425AACB8E5BA1837A33A1875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:4f:63:5e:71:34:80:1b:a5:dd:f8:e5:ea:
                    56:2e:89:b8:6a:df:c0:23:14:49:10:76:85:56:32:
                    9d:0f:7e:33:d9:09:42:6b:56:21:08:9d:3d:1e:18:
                    32:90:32:a1:1f:a6:71:8b:dc:66:cb:41:f3:c4:82:
                    97:46:10:cb:c6:f9:13:a3:5e:e2:8b:70:65:78:26:
                    56:6f:9d:04:f4:bb:de:d5:7c:d3:3e:4a:50:65:a5:
                    31:8d:09:9d:1e:80:a5:9b:3b:32:dc:3b:d1:8b:c3:
                    e4:70:ae:af:6d:75:43:27:17:17:64:2d:88:e9:8a:
                    11:20:6a:ff:f4:06:c1:79:87:a2:20:a8:52:24:ee:
                    2c:82:69:cc:42:5e:6b:4c:e9:92:5e:03:cc:00:b7:
                    de:d8:db:03:07:f7:75:60:5e:14:c2:21:3d:1a:35:
                    eb:5d:30:83:ad:ec:82:32:05:cb:8e:34:e9:f2:44:
                    14:41:11:92:83:d5:38:70:d2:5d:5b:53:4f:81:36:
                    7c:14:36:a3:5a:67:cd:4c:e5:3b:8c:5e:b3:ea:fe:
                    ef:f5:3c:9f:8e:9d:1a:70:f6:4a:0f:40:5a:47:17:
                    3b:a8:89:f0:67:bd:25:0c:10:06:e5:8e:54:77:5f:
                    bc:9d:3f:8a:99:de:d6:1d:86:05:62:a8:88:42:07:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5B:70:0A:63:4E:B6:8F:42:5A:AC:B8:E5:BA:18:37:A3:3A:18:75
            X509v3 Authority Key Identifier:
                keyid:22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:85:da:f4:4a:82:66:ab:79:de:e7:25:80:17:ca:47:b3:e8:
         32:af:92:ad:df:5d:79:6e:a9:bb:04:92:4c:56:39:1f:54:f0:
         41:95:90:8c:06:28:6d:dc:a7:09:66:eb:a0:b4:9b:b9:e3:d1:
         8e:b5:dc:08:c8:c3:d1:a0:a3:fb:a7:57:c6:6e:e3:b1:dc:48:
         2f:b5:2c:68:4e:52:2f:a7:01:47:c3:b0:d4:2e:89:13:61:9c:
         25:f1:cb:c6:dd:7c:6c:04:23:c8:af:38:fe:98:2d:d4:14:00:
         95:b4:80:22:ae:61:62:4b:8b:a8:49:14:63:06:a6:98:db:3b:
         5b:78:89:19:3e:8b:54:54:96:a8:ba:6b:6c:a4:49:7b:0e:f4:
         8b:6f:aa:8b:fa:9a:7a:80:d2:09:db:09:e1:e8:5b:a8:bd:9e:
         b3:e3:8c:ff:59:1d:41:7c:25:f5:36:26:d4:39:da:7b:44:bf:
         a2:97:9f:9f:76:73:d0:e2:dc:00:19:d0:fd:36:3d:2e:73:74:
         b4:e6:9b:f5:8d:1b:0c:f3:d1:c1:9e:c8:43:58:35:ce:bd:1f:
         da:17:d0:19:06:1a:3d:8f:8d:6f:cc:24:36:03:bd:e6:f0:d4:
         09:f0:14:64:e1:7e:38:9d:fc:4e:69:65:50:41:21:41:8c:68:
         26:36:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:42 2025 by rpki-client