Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
File:                     3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier:          EUbSI5tX26rgtunLcvMguWJ3e3VsoBvkT3pVP+Mrvw8=
Subject key identifier:   C7:E7:F4:C7:BC:B4:C9:5B:15:3E:3E:98:4B:B1:54:75:49:47:8F:D3
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       381506127E7A7049DB3FCC4836B62DDC7ADFE9D5
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
Signing time:             Tue 04 Feb 2025 18:34:37 +0000
ROA not before:           Tue 04 Feb 2025 18:29:37 +0000
ROA not after:            Tue 03 Feb 2026 18:34:37 +0000
asID:                     265746
IP address blocks:        128.201.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:06:12:7e:7a:70:49:db:3f:cc:48:36:b6:2d:dc:7a:df:e9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Feb  4 18:29:37 2025 GMT
            Not After : Feb  3 18:34:37 2026 GMT
        Subject: CN=C7E7F4C7BCB4C95B153E3E984BB1547549478FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:e4:1c:6b:c4:85:90:e3:a5:b5:97:89:13:
                    ac:6c:8d:31:57:17:78:de:e3:bc:be:59:ab:81:70:
                    87:ba:36:c6:31:5d:18:7b:8c:6f:d1:79:0b:8c:b2:
                    eb:8c:d4:5b:1d:83:17:de:c1:67:78:05:27:de:00:
                    a3:28:78:49:6d:36:78:47:a2:be:07:a3:16:5b:a4:
                    55:d7:54:e7:a6:c3:3a:68:01:bf:bb:5a:41:b2:74:
                    a2:c9:8b:95:9f:78:10:84:74:c0:99:7f:2b:7b:4b:
                    22:b9:d3:13:b8:c5:03:57:63:dc:89:e6:34:62:c5:
                    f7:db:de:67:d7:14:aa:72:b7:f4:4a:c5:54:6e:18:
                    dd:cc:42:8e:74:f0:be:00:a1:4e:a3:92:4d:05:ea:
                    7d:3d:7e:20:82:56:73:85:2e:9b:7d:50:3b:0e:ac:
                    4e:7b:e9:5a:05:29:11:7c:40:4a:04:ba:95:bd:d1:
                    ef:c9:27:0a:b6:0b:aa:20:a9:f7:3c:27:cc:c9:14:
                    b0:ce:e6:b7:c1:b9:de:a8:f1:d7:ae:b4:4a:d4:58:
                    3d:61:33:8d:f5:e6:30:9e:5a:36:2d:05:79:17:3d:
                    86:37:3f:76:9a:84:a7:44:61:e5:b5:33:b8:06:67:
                    25:53:38:04:09:72:cb:85:3a:d2:75:cb:8d:da:cf:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E7:F4:C7:BC:B4:C9:5B:15:3E:3E:98:4B:B1:54:75:49:47:8F:D3
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:97:6e:2e:2f:ed:34:7f:7a:19:87:85:f9:fa:85:62:12:06:
         5b:a0:10:f0:4c:28:ae:26:00:6a:69:0a:17:a1:8b:4b:b7:0b:
         19:2d:bb:54:d2:fc:e8:99:97:a5:1e:f3:3b:b4:a4:89:9e:d3:
         c6:23:b8:3d:b3:0c:ea:6b:56:d1:c2:94:e0:61:d1:36:82:dd:
         f3:cb:cc:95:3f:8a:de:40:59:41:e6:87:29:bd:a9:9b:77:6f:
         ec:c5:17:0c:28:e1:da:06:a4:94:d0:d3:ea:38:d1:c2:b8:00:
         cb:d2:2f:48:01:fe:85:db:e8:4d:c3:90:7e:dc:93:f7:59:44:
         9d:ea:02:58:c4:e2:14:37:a0:c6:f6:e1:9a:ba:c4:2d:3a:84:
         5b:26:b5:ec:f5:b0:a0:03:71:7f:29:d6:c4:7b:0a:04:c8:94:
         6f:a7:d2:ea:f7:ca:f3:e9:a2:e1:f1:2a:9c:fc:5a:25:8d:04:
         93:e3:e3:e2:a5:fb:46:a3:87:1f:4e:50:23:2c:0a:90:cc:25:
         dc:5b:67:42:5a:23:05:33:a9:db:62:b4:d3:f0:11:58:14:99:
         cb:d9:af:bd:ed:b6:72:07:f9:d4:f6:0b:f9:0c:79:1f:2f:54:
         93:23:14:2c:bb:b1:4e:9c:e0:6c:87:ae:70:42:44:c4:93:24:
         c0:1c:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:35 2025 by rpki-client