Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3136382e3139372e3132302e302f32322d3234203d3e203138373334.roa
File:                     3136382e3139372e3132302e302f32322d3234203d3e203138373334.roa (raw, json)
Hash identifier:          v3vQH8FT+cCR8+DAA/NbS/apD/wlcM8Qn0m0ZejS/lg=
Subject key identifier:   F3:5C:AA:2D:50:FB:CC:44:68:40:CF:E2:87:61:34:9C:78:88:D2:3B
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       78F9A763E3228E0F9349A5E5F00B504C32FC2B22
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3136382e3139372e3132302e302f32322d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:48 +0000
ROA not before:           Tue 04 Feb 2025 18:01:48 +0000
ROA not after:            Tue 03 Feb 2026 18:06:48 +0000
asID:                     18734
IP address blocks:        168.197.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f9:a7:63:e3:22:8e:0f:93:49:a5:e5:f0:0b:50:4c:32:fc:2b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:48 2025 GMT
            Not After : Feb  3 18:06:48 2026 GMT
        Subject: CN=F35CAA2D50FBCC446840CFE28761349C7888D23B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:2c:99:e6:7f:97:04:50:c6:47:ec:ad:07:
                    fe:50:7a:42:e4:87:73:ea:3b:80:9e:e9:b5:58:a4:
                    de:5a:a8:a1:50:84:cd:c4:18:87:b9:3f:9f:9f:9f:
                    19:e3:3e:44:be:6b:23:79:ab:2f:17:c0:a3:be:36:
                    8a:09:7d:86:a1:8a:77:12:42:45:09:2b:e7:80:92:
                    eb:37:84:6e:a2:e4:a8:2a:16:9e:7b:10:bb:05:71:
                    59:38:52:c0:2e:b7:3b:ee:4d:f8:8d:23:b0:0d:46:
                    29:99:f1:00:87:ab:d2:a7:c5:9f:43:37:0e:d0:72:
                    46:a0:ad:f2:a2:da:02:66:7a:bc:69:f6:b7:9a:fd:
                    eb:86:fa:bb:c2:d8:56:84:1f:7c:3f:4b:48:10:02:
                    7c:73:44:d5:48:5b:2f:17:e1:77:5d:37:a8:9b:43:
                    a5:fb:58:90:d0:72:76:d1:fd:51:b4:d5:89:a1:1a:
                    24:84:d2:cb:63:50:b1:65:fb:ea:c9:00:ae:be:86:
                    4b:cf:e5:c2:fb:3b:81:36:8c:85:13:ed:13:60:d2:
                    7f:59:d1:94:29:01:11:3e:48:de:b4:28:44:b8:17:
                    c1:db:fa:64:d8:be:01:9c:30:c3:38:a0:f8:c0:2a:
                    5e:b0:29:21:d5:28:2c:95:94:c0:0e:00:93:46:58:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:AA:2D:50:FB:CC:44:68:40:CF:E2:87:61:34:9C:78:88:D2:3B
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3136382e3139372e3132302e302f32322d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:47:c3:b6:82:18:21:89:d7:85:c6:f8:96:bc:8f:0b:a2:
         ba:4f:48:40:cd:73:39:a8:7c:6c:a4:15:77:5c:cc:6a:7f:a6:
         61:99:59:ff:61:f7:04:5d:ea:eb:97:5f:77:8e:09:78:0a:6f:
         ca:b5:32:71:dd:2d:0a:b8:92:14:f4:dc:b7:a5:20:d0:8f:38:
         bb:cd:a4:82:e5:06:ff:6a:77:4d:58:b8:dd:9d:86:76:af:7c:
         69:ce:b4:92:d5:21:7d:cb:8e:99:e4:ed:f9:1a:14:4d:1b:fe:
         a1:d2:6e:3e:52:78:33:16:2a:2c:21:ed:29:b2:2a:2b:4f:4c:
         5a:67:e9:3a:48:e1:b3:a4:aa:4f:1e:9f:ea:2c:11:f8:e1:52:
         cb:e5:a2:bb:d9:ec:1c:5a:77:34:e5:f3:16:23:26:e5:29:1b:
         3d:e2:ba:ce:ce:5d:0f:86:40:82:9e:c9:bc:6b:ed:ed:27:92:
         30:10:1f:be:40:27:62:dd:0a:ed:eb:5c:6e:98:49:5a:78:29:
         97:e1:39:3b:22:66:dd:5f:51:88:2f:16:22:90:92:e4:16:ef:
         fb:27:e9:1d:03:61:2a:d4:55:22:89:60:de:f6:7a:e2:08:81:
         67:74:c5:2b:c6:ac:0f:63:b5:46:68:b7:a3:13:c9:8b:11:ba:
         6d:44:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:08 2025 by rpki-client