Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
File:                     3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          3QKW4y+lT09Fvc6eob0/Uo8Gho65ATel2vbvO3pKrE0=
Subject key identifier:   73:C4:55:4F:BD:6F:B3:58:95:34:73:49:2E:73:B2:A5:89:29:A2:71
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       16CC63F10503A889FA29C654AA6FAAF4A12F7F13
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:48:35 +0000
ROA not before:           Tue 04 Feb 2025 18:43:35 +0000
ROA not after:            Tue 03 Feb 2026 18:48:35 +0000
asID:                     265696
IP address blocks:        131.196.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cc:63:f1:05:03:a8:89:fa:29:c6:54:aa:6f:aa:f4:a1:2f:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Feb  4 18:43:35 2025 GMT
            Not After : Feb  3 18:48:35 2026 GMT
        Subject: CN=73C4554FBD6FB358953473492E73B2A58929A271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:61:4f:62:2a:96:58:33:e9:ec:13:ff:7a:
                    f4:e1:80:c4:e9:2b:42:19:1d:3d:82:f6:7e:66:a5:
                    a4:ce:d2:b6:9e:6e:fe:a7:b5:2d:21:07:97:61:3c:
                    4e:b1:12:d6:68:4c:2a:34:ff:d5:ac:76:57:1f:7b:
                    4b:2f:86:e9:09:12:8c:a5:a4:a1:a2:23:39:5f:04:
                    7a:7f:25:c4:e0:0f:87:5c:ef:c6:e2:a5:8a:45:4a:
                    44:10:e0:62:f1:5f:46:47:c2:9a:98:c7:45:78:09:
                    2a:dd:56:37:b4:51:58:3a:d0:18:b8:f0:0e:fd:da:
                    45:f1:2b:2f:d8:54:80:23:8f:63:b1:12:9d:1e:38:
                    89:fc:1c:dd:b7:38:35:a1:78:f2:f6:c4:5c:33:da:
                    3d:11:9b:ba:8e:42:db:9d:ec:d4:e2:d3:a0:50:34:
                    4c:34:a7:67:83:8b:e6:d7:74:3a:79:d2:a9:31:bd:
                    d0:5c:c3:c0:4b:fe:23:4f:34:00:3d:dd:75:d2:92:
                    19:1b:81:27:c2:94:75:b7:22:0b:fe:f8:c7:64:84:
                    04:6e:08:8b:9f:93:c2:4e:f1:54:da:5b:41:64:20:
                    1b:1e:86:91:29:da:b1:bc:26:23:47:1d:e7:01:4f:
                    99:81:2e:21:8e:b0:15:e7:e6:ad:28:e6:eb:cb:35:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C4:55:4F:BD:6F:B3:58:95:34:73:49:2E:73:B2:A5:89:29:A2:71
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:04:8f:7d:7d:f6:ed:d1:4b:f4:70:60:2c:a0:df:81:76:
         0c:92:e5:25:88:09:fb:90:11:47:8d:35:b6:60:cc:2d:1b:35:
         ea:9b:2c:9c:a1:ec:ad:03:ad:cb:08:54:fb:35:67:73:f0:79:
         93:9e:ab:a6:69:c7:97:00:75:01:9f:fb:5e:e2:56:0d:8c:94:
         bb:ba:05:e4:39:5c:50:12:ef:95:72:27:b1:f0:c8:b1:cb:3c:
         05:9a:ad:48:0a:43:b3:0f:55:18:d0:27:2f:94:a2:0b:b3:fe:
         2d:40:b9:12:ce:41:8e:66:64:01:4d:28:b7:45:46:71:93:63:
         77:74:77:08:19:d2:44:5f:18:f6:97:e7:60:f4:ee:cf:e2:6a:
         68:a6:19:54:6d:18:a8:76:f3:54:77:8d:b1:54:99:a9:94:07:
         21:c9:96:d9:fa:ae:d8:ad:8c:81:3d:50:3e:5f:e6:c5:d2:91:
         02:ab:6a:c6:1b:4f:07:ec:2a:f6:a1:8f:76:8e:3b:5c:83:c8:
         ef:fc:f6:dc:71:8a:12:4e:42:67:5d:40:3c:91:3e:c2:b3:c9:
         83:c2:42:81:34:70:f2:ba:4e:e1:cd:cc:e0:ee:7f:eb:52:51:
         18:9b:22:f2:65:dc:f5:40:f7:a2:75:17:1f:47:9c:0d:a9:bb:
         6e:32:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----