Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
File:                     3133312e3136312e38352e302f32342d3234203d3e203237373831.roa (raw, json)
Hash identifier:          3ng4i/O5aSCXgxnQggGV3fyIbeJ3qC8YGCbWjcfS4f8=
Subject key identifier:   7A:A9:A9:E1:81:6B:1E:CE:E4:DB:90:FD:A0:68:14:07:14:94:CA:E2
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       61DAE2680A3F862ACEA0C73C7050C47546BE6B79
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
Signing time:             Mon 17 Mar 2025 05:12:04 +0000
ROA not before:           Mon 17 Mar 2025 05:07:04 +0000
ROA not after:            Mon 16 Mar 2026 05:12:04 +0000
asID:                     27781
IP address blocks:        131.161.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:e2:68:0a:3f:86:2a:ce:a0:c7:3c:70:50:c4:75:46:be:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Mar 17 05:07:04 2025 GMT
            Not After : Mar 16 05:12:04 2026 GMT
        Subject: CN=7AA9A9E1816B1ECEE4DB90FDA06814071494CAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:65:2b:fb:83:b2:53:af:73:88:0a:c0:9f:
                    97:6b:d2:6e:f9:bb:22:ae:59:3a:b6:34:95:45:bc:
                    13:80:c3:32:2f:b7:e3:f1:a2:32:1e:52:22:7d:de:
                    f5:bd:be:16:7f:2e:e2:81:32:88:00:24:f0:2c:f7:
                    86:f5:ef:6e:bd:54:e7:8d:9f:8c:c8:79:fa:14:aa:
                    83:6b:77:c3:8e:22:e8:e7:3a:ce:d2:1d:6b:22:83:
                    ec:7f:00:50:a5:08:1d:09:fe:d2:fa:aa:e2:4d:01:
                    cf:47:f1:24:f0:26:0d:cb:7a:0b:36:9d:bc:e7:21:
                    8f:6a:20:1e:04:7a:c3:86:66:94:fd:0c:7b:d9:55:
                    f3:09:63:c3:84:94:bd:51:1d:e4:c3:f1:b5:9e:1f:
                    3e:50:2f:de:da:7e:78:6d:1b:be:5a:8f:df:26:49:
                    fd:db:52:36:b3:54:95:fc:c1:8a:29:e1:74:e1:9d:
                    be:78:7a:4f:ff:94:e7:5f:be:75:4c:0d:d5:c1:8d:
                    9e:d1:d1:d4:1e:10:24:0a:37:4b:ea:49:1d:55:08:
                    5a:e5:88:8f:b6:ad:56:55:d7:9e:bd:d8:d0:26:84:
                    e6:05:ab:6d:bc:c2:d0:2e:23:b0:ad:26:99:2b:72:
                    62:85:81:6d:98:1f:b7:05:bc:26:d9:e8:cd:e3:c7:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A9:A9:E1:81:6B:1E:CE:E4:DB:90:FD:A0:68:14:07:14:94:CA:E2
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:2b:02:b7:e7:2b:61:e1:39:b3:60:09:ca:6f:64:58:04:
         25:ec:1b:1b:2d:11:97:28:f9:ef:d1:c9:f5:8f:df:93:89:12:
         47:59:ce:6a:ca:51:8d:97:11:ea:38:92:a2:4b:ae:de:39:5e:
         fe:5f:70:c8:75:18:c8:59:b6:7f:f4:b7:e4:65:fc:32:a6:b9:
         79:b7:e7:ea:ca:60:b1:2d:7c:9f:4a:86:9a:21:a6:27:ad:a5:
         9e:53:63:da:11:59:d1:80:00:1b:31:2a:18:96:c5:8e:4c:4f:
         fb:03:ec:9c:19:71:14:7c:87:b7:16:4a:ea:da:7e:b9:3e:6e:
         66:11:43:c7:59:25:34:9f:b7:b7:da:0f:63:3e:38:48:cf:d9:
         c7:56:9f:e5:84:e3:2d:70:77:40:3f:43:19:b6:ee:b3:d9:86:
         f3:68:f9:29:59:24:c5:35:aa:f9:9d:04:e9:98:29:32:e7:43:
         47:06:95:e6:53:4d:79:eb:ef:56:03:33:e5:79:9c:33:cd:7b:
         39:74:ea:56:af:f7:c2:9a:00:7d:ac:64:54:a0:76:27:94:95:
         a0:a7:04:be:5a:9d:5c:0f:f9:40:8e:2c:14:dd:bd:5d:87:bc:
         7c:0f:04:88:0a:59:7c:6d:c3:8f:b1:18:6d:cd:26:68:30:33:
         fc:de:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:31 2025 by rpki-client