Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa
File:                     3133312e3130382e302e302f32322d3234203d3e203631343837.roa (raw, json)
Hash identifier:          ghlLgd8tVRnaq0UP8JFuyesMAPM+bZBtQKW1rts8OM4=
Subject key identifier:   F4:75:72:B8:18:29:C2:D0:65:C8:07:EF:12:4D:40:12:2B:42:E6:67
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       55D5208603B0C54C24EC74BE9061821C4AF54F25
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa
Signing time:             Tue 04 Feb 2025 18:22:44 +0000
ROA not before:           Tue 04 Feb 2025 18:17:44 +0000
ROA not after:            Tue 03 Feb 2026 18:22:44 +0000
asID:                     61487
IP address blocks:        131.108.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:20:86:03:b0:c5:4c:24:ec:74:be:90:61:82:1c:4a:f5:4f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Feb  4 18:17:44 2025 GMT
            Not After : Feb  3 18:22:44 2026 GMT
        Subject: CN=F47572B81829C2D065C807EF124D40122B42E667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:e0:7c:12:f9:50:6a:e0:66:bd:c8:5d:f6:
                    69:d0:46:c8:97:37:91:a4:81:ea:ac:e1:0d:48:f6:
                    37:5c:30:30:42:7c:08:4f:30:01:4e:f9:d7:fe:52:
                    ad:7a:75:82:3f:de:2f:2e:b2:74:cc:8a:3a:2b:da:
                    c7:c6:e8:8e:2b:62:ca:6c:97:26:f9:0e:0f:c2:9a:
                    6a:74:70:a5:ba:5c:6d:52:cc:c7:6a:a2:74:e8:04:
                    b1:20:16:3c:80:0d:9a:18:08:a6:21:48:c4:ee:1b:
                    d8:33:b7:53:8e:ab:98:5b:d4:f5:93:9b:c4:5b:bc:
                    15:60:45:d0:bd:95:2a:ad:6d:79:d1:98:7c:17:f9:
                    08:fe:ef:90:2d:52:96:4a:d4:be:d8:e7:33:1c:19:
                    52:76:58:8f:90:ff:01:15:5d:07:5b:05:50:ac:d6:
                    28:e3:9f:ba:4e:f5:a7:bf:5f:1d:53:d5:dd:9a:3e:
                    63:98:a1:0c:2e:ba:a6:64:d8:9f:52:13:52:39:0f:
                    9f:db:5e:d5:e1:62:b8:f1:0a:61:48:dd:ec:55:cd:
                    6c:98:06:d4:ce:3c:89:ca:9b:7e:74:dc:0d:b0:f5:
                    7a:2f:f5:ea:59:8b:86:bc:9e:0f:27:e0:23:09:42:
                    10:de:b5:20:4c:03:8b:06:04:0f:0c:f1:98:63:51:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:72:B8:18:29:C2:D0:65:C8:07:EF:12:4D:40:12:2B:42:E6:67
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:ea:c6:c2:c8:d9:b1:a8:98:f1:27:e4:56:fb:57:98:06:
         dd:92:2d:75:fd:31:53:ad:c2:46:b3:b7:ec:b9:7a:81:e3:29:
         a9:49:21:17:31:d4:2b:ec:10:52:4c:9f:c9:45:76:3f:48:6a:
         c5:d4:3c:58:ac:b7:04:91:61:ee:95:cf:83:72:6e:73:7e:4e:
         5e:03:9b:8c:ef:37:e1:f0:16:c7:78:2d:d2:d6:f5:a1:89:4c:
         25:f2:f1:d3:eb:d3:e2:58:9b:4e:b8:fe:3d:40:b7:39:53:52:
         37:44:90:68:17:82:43:4e:b2:9c:57:89:ee:7a:32:ce:81:ab:
         fe:81:03:a5:d2:06:3a:df:28:91:95:fa:9e:e1:8c:e7:1b:ba:
         95:db:42:04:97:dc:84:2a:e6:73:b5:22:3d:5b:f6:8b:3e:73:
         e1:f4:ca:e7:b0:80:b0:45:9a:69:5a:c2:d5:ff:6b:d4:5b:4b:
         bb:97:c9:c5:c7:f3:3c:f1:01:ed:2c:43:3d:a8:1d:8a:7d:8b:
         ea:96:93:15:ee:20:f6:bc:31:d2:f4:0c:62:9d:92:bc:77:66:
         94:a3:5b:89:1f:ac:98:1d:4a:13:cd:67:fc:20:41:11:74:b8:
         65:92:1c:a5:81:23:4d:22:cf:d9:b6:ab:1a:23:11:e9:25:85:
         52:74:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:22 2025 by rpki-client