Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e38302e302f32302d3234203d3e203138373334.roa
File:                     3230312e3134302e38302e302f32302d3234203d3e203138373334.roa (raw, json)
Hash identifier:          wQ346fBri7brunNzgcs5sexKxzs4Mn+P1/nspmUrgIE=
Subject key identifier:   91:D8:6A:DC:23:63:53:FB:46:55:A3:4E:7E:A7:71:19:4C:0E:84:78
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       1A2C4E139DCDFBB290472AE6B6437EA5E53FF7CD
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e38302e302f32302d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:51 +0000
ROA not before:           Tue 04 Feb 2025 18:01:51 +0000
ROA not after:            Tue 03 Feb 2026 18:06:51 +0000
asID:                     18734
IP address blocks:        201.140.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2c:4e:13:9d:cd:fb:b2:90:47:2a:e6:b6:43:7e:a5:e5:3f:f7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:51 2025 GMT
            Not After : Feb  3 18:06:51 2026 GMT
        Subject: CN=91D86ADC236353FB4655A34E7EA771194C0E8478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:04:8e:9c:ff:8c:64:e8:6c:c1:35:f5:9b:
                    2c:12:12:d8:12:86:66:6a:63:5c:7e:f5:6f:e8:11:
                    3c:a6:41:91:80:5e:54:14:78:a8:ba:08:dc:7f:c7:
                    5b:24:be:09:53:e3:77:56:c7:cf:94:34:13:8f:9c:
                    da:a9:e2:e1:49:50:34:8d:9b:69:e3:fc:85:7b:63:
                    14:dd:d4:2b:ed:44:b6:27:91:c8:a2:cb:be:0c:da:
                    ba:08:46:c0:18:73:6e:c6:69:fb:77:09:de:31:28:
                    e3:77:de:bd:eb:fd:71:5b:9c:1a:bb:df:55:38:c0:
                    ba:7f:64:bc:7a:43:3e:0f:a8:19:c8:b4:22:a7:b9:
                    c6:ea:cb:fa:d6:1b:90:0b:14:fe:97:9a:70:c4:64:
                    45:b5:15:1a:43:6c:e6:20:94:aa:79:be:c9:5e:b9:
                    f7:b6:46:97:81:5e:90:54:45:9c:a2:ad:ec:10:ab:
                    ee:cd:08:ea:59:cf:c3:ab:8a:6a:48:78:96:9a:83:
                    03:c0:e4:24:8e:2d:37:28:e7:5d:47:1f:2d:c8:ff:
                    a1:44:99:31:cf:4c:3b:15:dc:3f:8c:65:55:6f:54:
                    69:d7:e4:fb:59:fc:74:8f:2d:7b:e2:75:f1:79:ab:
                    75:d4:b9:01:f8:7a:bc:85:95:aa:0f:f1:bd:c2:7e:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:6A:DC:23:63:53:FB:46:55:A3:4E:7E:A7:71:19:4C:0E:84:78
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e38302e302f32302d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:93:98:bc:d0:4c:69:18:3f:6c:fe:f5:86:41:1b:22:0b:92:
         c8:8b:34:74:0f:e4:fb:81:0f:57:e1:7a:d8:34:cc:f3:4b:f3:
         18:e5:3a:63:a2:bd:44:ed:d9:89:67:4e:c7:4d:72:b6:cf:8c:
         d9:6e:69:00:29:b6:39:cd:dd:0f:8e:a8:70:00:5e:65:da:57:
         0a:e2:18:9c:b8:d7:d8:a4:df:5d:96:75:1c:94:60:31:46:5a:
         d2:2c:74:73:9a:84:0f:3f:a0:e4:a8:61:54:5f:9e:79:2e:52:
         01:d4:4e:34:f2:ae:07:f5:51:9e:d8:95:4e:63:dd:d3:42:b8:
         2b:06:b0:07:7b:62:29:96:ec:64:c5:3b:b2:d1:5a:11:3d:11:
         73:f4:20:0d:5c:82:e9:92:50:66:09:d5:93:c4:4b:bf:34:33:
         8d:8a:6d:c3:9f:66:07:ad:6a:79:cd:16:f0:87:e2:9d:fb:21:
         da:7c:24:ef:cb:87:b3:c8:8a:46:7c:d4:ee:c2:22:33:2b:4e:
         30:b0:00:41:62:53:e6:83:13:a1:b2:61:2a:32:05:16:f1:49:
         aa:72:09:0e:d1:3c:3c:b3:d5:0c:9e:20:f4:36:7a:44:88:3b:
         e0:72:e7:78:e6:f0:c5:d7:5a:15:3a:89:fc:bd:37:70:56:6a:
         1e:80:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:30 2025 by rpki-client