Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          48Ynqkw0pFv3ADlRGXdrxadHgHMoi1wXhgHXW0lXaEM=
Subject key identifier:   5E:06:18:48:28:D4:6A:00:84:01:EC:15:FD:EC:23:A5:EC:3D:57:1B
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       453CEB1E473ECE3C9B75D49564C74BD35D131740
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:43 +0000
ROA not before:           Tue 04 Feb 2025 18:01:43 +0000
ROA not after:            Tue 03 Feb 2026 18:06:43 +0000
asID:                     18734
IP address blocks:        189.202.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:eb:1e:47:3e:ce:3c:9b:75:d4:95:64:c7:4b:d3:5d:13:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:43 2025 GMT
            Not After : Feb  3 18:06:43 2026 GMT
        Subject: CN=5E06184828D46A008401EC15FDEC23A5EC3D571B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:ca:af:a9:ed:ec:b1:6f:c5:aa:92:3c:71:
                    5a:e2:da:87:40:36:d9:c2:ab:b4:14:8b:d7:d3:09:
                    10:0d:19:bf:a6:2d:79:58:b0:c1:b4:e9:13:07:e5:
                    39:48:27:f8:eb:82:d8:09:51:42:f1:28:77:c5:67:
                    4f:06:0d:75:2c:2d:72:91:fa:a3:4d:cf:fb:48:91:
                    bd:27:a3:a4:47:75:e1:a0:44:eb:21:95:26:c6:c4:
                    0f:8b:48:82:24:dc:9f:4a:de:a4:b6:97:75:bc:89:
                    93:f4:bb:aa:a6:51:67:c4:00:8b:0f:ed:15:b5:a9:
                    ef:49:04:bc:19:9d:f3:51:4b:76:1f:f7:d0:d4:c7:
                    9a:6a:18:3f:14:fa:e4:b5:61:c8:d4:cf:80:94:0b:
                    58:75:cb:70:8d:5b:50:85:42:64:cd:b1:12:f2:97:
                    31:c2:3c:a7:4e:6d:0b:27:29:20:cb:f4:7f:dc:6f:
                    42:d6:48:a1:c1:1b:21:87:32:7f:af:ab:d6:16:0b:
                    60:15:e0:45:42:c8:37:8b:9a:ba:39:92:e8:c0:f0:
                    f8:8a:27:74:68:9c:82:ab:0d:ca:f1:8d:8e:f3:1c:
                    55:ed:81:e5:b7:b3:be:f1:ad:78:b0:39:37:7b:5e:
                    fc:55:c2:94:cb:d0:92:28:e6:98:bc:61:b2:12:85:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:06:18:48:28:D4:6A:00:84:01:EC:15:FD:EC:23:A5:EC:3D:57:1B
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:22:1f:e9:6e:e0:ac:a4:8f:14:ea:a8:c4:12:9b:86:6e:48:
         a2:d2:5a:af:8c:d8:d2:4a:0b:45:73:41:cd:21:93:9a:a9:e6:
         6b:70:7e:ef:aa:96:6e:59:16:2b:15:13:42:30:7d:63:02:e4:
         ae:52:d6:fc:2a:1d:0c:f3:38:33:76:90:40:25:2f:4b:c0:ab:
         88:39:09:5f:b2:21:c4:3e:93:b8:44:57:83:96:da:46:bf:45:
         20:6c:21:9f:a3:b2:55:c4:56:85:04:fc:59:ac:c7:ac:5e:c8:
         62:45:dd:3d:0c:69:4f:32:c4:f6:94:8f:65:0d:68:fc:bc:87:
         cd:93:0e:56:57:ed:cc:69:bd:e8:82:6f:e6:7b:71:1b:08:69:
         8e:91:b4:c1:80:56:77:97:36:29:4c:96:da:12:68:64:92:b0:
         d7:e5:07:9c:02:1a:82:b5:8e:87:20:5a:34:d3:5b:b5:f5:b9:
         e4:b4:5f:10:7c:16:3d:2f:85:f1:f9:17:2c:30:a7:69:74:56:
         f0:d9:7c:c4:44:b6:5b:08:86:0b:57:dc:b9:22:81:42:75:be:
         53:6c:70:76:4d:20:4f:22:69:e7:f7:e1:69:4e:6a:63:91:eb:
         e5:93:11:54:05:56:9f:78:ae:4e:ec:a4:63:f2:cc:7d:8b:ac:
         9c:92:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:52 2025 by rpki-client