Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa
File:                     3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          uVDpCeh3gSX8GcXSwJoD5dUZX9IC0zwNAKxCDKPA1tg=
Subject key identifier:   02:C3:8E:2D:D4:00:C9:BD:53:81:3B:D8:AE:75:98:8B:0A:A4:4F:55
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       1CDF801ECB40E359B2924FC959C0961F726D53EE
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:27:39 +0000
ROA not before:           Tue 04 Feb 2025 18:22:39 +0000
ROA not after:            Tue 03 Feb 2026 18:27:39 +0000
asID:                     262191
IP address blocks:        168.197.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:df:80:1e:cb:40:e3:59:b2:92:4f:c9:59:c0:96:1f:72:6d:53:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Feb  4 18:22:39 2025 GMT
            Not After : Feb  3 18:27:39 2026 GMT
        Subject: CN=02C38E2DD400C9BD53813BD8AE75988B0AA44F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:91:49:32:23:7d:f9:69:5d:8c:da:c7:cd:
                    f2:b6:e4:3e:64:03:8a:cc:8f:ec:18:b7:5f:c3:38:
                    5c:14:c1:79:fa:91:e3:4e:b3:f1:55:37:57:e7:71:
                    04:16:d8:61:c8:25:95:3d:c4:7f:9e:c5:ab:61:16:
                    f2:c4:9e:55:37:5b:14:ba:ff:03:70:3e:55:63:e3:
                    5c:98:d7:cd:be:0b:28:74:04:a3:75:69:50:24:70:
                    28:a8:49:6c:fc:1e:31:60:1d:29:4b:10:58:98:df:
                    de:2a:f7:c2:67:e3:d1:7b:8e:6c:ad:e1:b6:42:cd:
                    70:6d:86:14:8f:e8:96:b4:1d:bb:c1:a7:ef:c0:c3:
                    59:36:b0:b9:e4:48:b4:ec:42:ce:06:51:da:88:b8:
                    dd:d3:62:eb:5e:ad:c3:c9:40:0a:0b:47:48:50:d2:
                    63:bc:ac:68:36:31:c4:74:84:0a:b9:9f:f2:f3:ed:
                    69:40:f1:fb:98:9c:06:ac:c9:90:c4:d7:fa:4f:1a:
                    d8:e3:be:16:ec:8e:aa:47:12:19:a1:0b:a5:aa:fb:
                    62:98:db:53:34:e9:62:05:2e:ca:67:c7:1d:f3:c4:
                    a1:6a:f0:35:d9:55:7c:50:0b:7f:b4:dc:a9:17:14:
                    2f:39:1a:dc:be:e7:12:68:c1:4f:87:c7:ae:93:67:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:8E:2D:D4:00:C9:BD:53:81:3B:D8:AE:75:98:8B:0A:A4:4F:55
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:19:6b:94:37:c2:24:d3:83:3b:ab:13:5f:14:a1:8c:48:
         3b:b1:03:de:ab:4f:7b:db:97:a9:61:92:90:fe:3b:a0:c6:2b:
         a4:30:4d:64:38:3b:14:31:ba:e8:31:53:79:0c:82:0f:b8:73:
         4f:56:91:35:39:fc:be:c1:c4:c8:bb:c5:02:92:5b:90:fd:52:
         c2:0f:63:6d:7b:0f:f2:43:17:6b:e3:0b:64:2f:04:8e:ba:67:
         39:b3:65:06:31:e2:2c:51:05:26:f1:98:c9:72:0b:d6:c0:1c:
         c9:1e:c2:2a:40:76:80:da:dc:fa:1c:05:6f:33:24:20:7d:09:
         d3:ea:1e:40:29:da:00:ee:e8:7f:04:ba:aa:ba:a2:5c:82:ab:
         f1:64:91:1e:8c:32:89:cd:80:36:6e:be:59:b5:40:96:5c:f9:
         a3:4d:77:bc:9b:21:15:1c:82:5f:a5:3c:d9:af:16:b4:ac:eb:
         45:44:7d:fa:73:52:b6:a2:86:ed:e3:43:00:46:3f:51:fa:b1:
         c7:0e:02:cb:a5:1e:49:b0:a4:15:db:b6:25:fa:b9:6d:54:42:
         6b:14:ad:5b:ae:6b:e1:db:87:3c:71:9d:82:ca:a6:80:d4:39:
         f0:84:5c:6f:e1:75:b9:8a:fa:c6:08:4c:11:01:c2:49:18:a9:
         1a:c6:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:52:55 2025 by rpki-client