Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265689.roa
File:                     AS265689.roa (raw, json)
Hash identifier:          mh5E6ARCWFm+TdW6HETVi7ij1XZ1JtJc7D53OtEF+u0=
Subject key identifier:   AA:AA:59:FE:82:54:DD:EB:E8:36:92:52:BC:04:29:55:3A:D7:8D:BE
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       4511AD06CA0197EF74C58EAC417E66D8538DC24C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265689.roa
Signing time:             Tue 04 Feb 2025 18:13:38 +0000
ROA not before:           Tue 04 Feb 2025 18:08:38 +0000
ROA not after:            Tue 03 Feb 2026 18:13:38 +0000
asID:                     265689
IP address blocks:        179.40.33.0/24 maxlen: 24
                          186.56.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:ad:06:ca:01:97:ef:74:c5:8e:ac:41:7e:66:d8:53:8d:c2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:38 2025 GMT
            Not After : Feb  3 18:13:38 2026 GMT
        Subject: CN=AAAA59FE8254DDEBE8369252BC0429553AD78DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:7f:46:53:1b:a0:42:d0:ee:c9:dc:7c:41:
                    e9:37:88:b6:07:de:86:7c:98:fd:6d:48:72:f6:4b:
                    a5:37:45:09:93:ad:89:1e:eb:2a:6e:5e:52:69:34:
                    16:18:20:d0:cc:ca:8d:3d:c8:88:74:ac:1b:9d:c8:
                    c1:3e:f3:d6:4c:bd:35:09:9a:9a:0b:70:09:3f:11:
                    ad:2f:29:d5:41:74:ed:d3:df:20:f8:b2:ef:fc:ed:
                    98:e5:98:95:ea:88:95:2d:c2:f6:31:85:b5:d6:a6:
                    7b:c9:a8:01:b0:59:1c:39:89:45:79:99:1d:fe:11:
                    93:e9:ee:59:9e:26:57:1b:d4:2c:ac:71:8c:fb:24:
                    d0:58:d7:9f:3b:25:e3:a8:d7:9e:63:89:aa:41:2b:
                    23:21:3e:70:bd:9f:e5:f5:19:22:87:70:60:cf:f7:
                    9d:cd:1f:7d:89:7d:f8:33:10:fd:92:e7:ea:ed:a1:
                    81:2a:65:5e:1f:7c:dd:8e:b6:a0:7f:6b:9a:3b:d8:
                    25:2d:8e:46:98:fe:b1:f9:6f:9d:08:8e:47:f7:e9:
                    63:b2:a0:c0:19:d3:53:94:fe:f8:86:53:83:bd:87:
                    ba:74:69:54:aa:d0:9c:11:dd:a5:0e:28:80:ec:df:
                    4f:b3:d2:68:bc:c8:b1:f7:70:e4:40:3e:ed:bf:f4:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AA:59:FE:82:54:DD:EB:E8:36:92:52:BC:04:29:55:3A:D7:8D:BE
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265689.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.33.0/24
                  186.56.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:48:10:f6:3e:00:35:35:0b:94:fe:72:9f:3a:a2:bb:4c:
         71:b8:a8:2e:f9:36:6f:76:ce:99:e6:62:a5:d9:40:77:06:e5:
         53:ec:de:dd:5d:6a:e0:a5:4d:a3:ac:9f:55:52:b9:39:7a:c2:
         33:08:6f:f6:75:5b:47:f8:13:36:16:cb:22:ad:fa:27:2f:84:
         41:29:ea:ea:b4:04:11:9e:76:ed:8c:7a:cf:83:a8:82:b1:57:
         2c:ea:84:01:d5:08:58:a1:0a:88:1d:86:a7:f2:d6:4f:78:6e:
         8d:92:83:92:68:55:2f:0a:3a:89:c9:bd:a3:1e:01:33:88:10:
         3f:b9:cb:8a:f3:cd:b5:e4:1c:d3:7b:86:67:b0:e0:ce:1b:89:
         a8:1a:a6:91:12:de:52:e2:d6:f4:73:7f:74:51:c0:64:19:ae:
         f2:17:27:f1:4a:5d:79:a1:25:1e:c1:48:a1:49:b3:a5:22:c9:
         d6:93:5a:14:83:96:a7:fb:35:0e:e0:f3:b4:a8:fb:49:f7:f4:
         95:14:be:0c:c1:47:b3:1e:0b:3d:69:74:68:e3:9a:75:1d:63:
         2b:09:55:3e:40:89:5a:d5:b6:1a:11:49:d5:31:a5:8b:70:c5:
         5e:d5:d9:07:a6:6e:ee:c2:3c:c9:2b:ab:00:ea:32:21:fe:ac:
         7e:53:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client