Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3134332e3230382e35322e302f32322d3234203d3e203532343339.roa
File:                     3134332e3230382e35322e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          iaxFq+ZGxtFCYvwNhSKG4lMuSO/p/R/mHKy2Vmnb/nU=
Subject key identifier:   12:CD:63:76:66:D7:70:6C:98:E8:5B:A4:7F:5B:3F:FE:4B:49:C1:97
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       03C882B08BC0996B12E1B6E9B9D2C99701F6402A
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3134332e3230382e35322e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:53:03 +0000
ROA not before:           Tue 04 Feb 2025 18:48:03 +0000
ROA not after:            Tue 03 Feb 2026 18:53:03 +0000
asID:                     52439
IP address blocks:        143.208.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c8:82:b0:8b:c0:99:6b:12:e1:b6:e9:b9:d2:c9:97:01:f6:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:03 2025 GMT
            Not After : Feb  3 18:53:03 2026 GMT
        Subject: CN=12CD637666D7706C98E85BA47F5B3FFE4B49C197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:eb:29:87:0c:7e:2d:1a:58:a9:ae:6a:81:
                    0d:db:f6:b1:32:57:e4:ee:f6:1f:f8:da:01:75:62:
                    c1:28:73:ca:18:70:0e:75:a4:2b:5a:a8:57:21:08:
                    86:5b:e4:2b:a2:45:3d:0f:a6:ab:e6:77:dc:6c:8d:
                    95:58:00:31:6a:d2:62:6c:4a:e5:c7:ab:31:28:66:
                    dd:3c:12:05:61:9d:d3:85:e4:c0:fe:64:fc:30:2a:
                    59:67:2f:7f:59:36:42:b2:17:22:83:a5:00:67:af:
                    c1:ee:c8:4b:84:a2:66:92:68:36:46:d8:2a:5b:5f:
                    ae:55:fe:56:eb:9a:cd:68:1c:5f:ae:63:68:9c:5b:
                    ff:2f:04:86:af:1d:12:e2:a9:6a:f9:71:7d:60:c6:
                    3d:b1:bd:4b:06:93:15:1f:d3:cc:77:7f:d1:94:24:
                    3e:97:07:73:76:1f:ae:06:ba:af:9f:9c:66:57:a1:
                    e4:c0:cc:5d:ba:05:0f:48:07:a0:ec:eb:8b:d9:f1:
                    1d:98:9c:1e:c7:25:af:41:10:a6:09:66:0d:78:d1:
                    c0:4f:d3:16:95:c3:c0:dc:85:98:43:b4:7c:98:09:
                    97:17:74:b2:04:96:15:ba:49:88:0a:4c:79:33:45:
                    c4:44:9d:1f:f3:7f:fc:75:7d:6e:33:6e:50:b1:5a:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:63:76:66:D7:70:6C:98:E8:5B:A4:7F:5B:3F:FE:4B:49:C1:97
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3134332e3230382e35322e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:62:f1:60:98:3e:da:cd:e2:a9:c6:a4:0c:8a:c3:28:95:
         85:78:8b:45:75:fb:ea:e6:3e:b3:4e:a1:13:2b:5c:ef:ca:f1:
         a3:a0:49:45:86:5e:e5:26:30:ad:e0:ba:9e:d3:56:56:ee:d0:
         c6:4a:d2:7e:62:7a:5a:5f:20:5d:57:45:41:fd:a1:0c:32:19:
         e6:6d:8d:57:f5:b8:7f:52:00:be:9e:bd:35:15:32:4c:ad:c0:
         8a:4d:c1:15:df:05:dd:1f:82:14:0c:28:aa:31:2e:f7:53:14:
         b8:30:ff:34:25:57:9a:ba:68:b2:5b:84:41:8b:aa:8f:28:54:
         3f:5c:46:7b:4b:2a:f2:19:a8:a9:cd:5e:a8:ad:65:23:25:01:
         4e:57:32:9d:62:e8:61:29:7a:52:f2:a0:74:46:4d:fc:96:c9:
         5b:50:18:fc:9c:ab:a1:1b:3d:8b:8d:91:4c:24:1b:f6:ee:ad:
         47:18:c3:a7:41:ac:1e:c0:b5:32:22:c7:3d:ad:4f:c8:37:d4:
         fe:d5:85:01:5f:41:39:cd:a5:3e:44:83:08:1d:32:de:52:99:
         c2:3f:1a:c6:ff:36:20:ba:e3:86:6a:25:80:3e:35:dc:cd:da:
         a4:46:e7:4f:0a:fc:89:03:dd:cf:5c:07:23:73:31:d6:92:b5:
         31:e0:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:02 2025 by rpki-client