Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
File:                     3136382e3132312e38342e302f32322d3234203d3e203532333938.roa (raw, json)
Hash identifier:          YveZ6WGwGbyHmmkIC/gXfg0AC4AlN90cjuxTZaXlMf4=
Subject key identifier:   A1:C0:02:C4:1E:87:DA:18:B0:58:4B:74:D1:00:BC:5A:61:2E:36:C6
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       484D82A5C15E7A95815E1DE5F9567B9D89BF580F
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
Signing time:             Tue 04 Feb 2025 18:06:58 +0000
ROA not before:           Tue 04 Feb 2025 18:01:58 +0000
ROA not after:            Tue 03 Feb 2026 18:06:58 +0000
asID:                     52398
IP address blocks:        168.121.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4d:82:a5:c1:5e:7a:95:81:5e:1d:e5:f9:56:7b:9d:89:bf:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Feb  4 18:01:58 2025 GMT
            Not After : Feb  3 18:06:58 2026 GMT
        Subject: CN=A1C002C41E87DA18B0584B74D100BC5A612E36C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:85:74:0f:c7:d5:98:bf:c1:ab:f7:cc:dc:
                    b5:5e:93:f4:67:7c:a4:b1:a6:ea:2b:cb:fd:c7:70:
                    45:3d:7d:05:b8:bc:95:74:cf:6f:e4:5f:77:37:a8:
                    51:4f:d8:d8:2c:bf:90:f0:2c:aa:55:a0:04:5a:08:
                    b6:a2:8d:76:70:41:6c:a9:a9:83:5b:7a:ad:68:1b:
                    e7:05:f5:bd:e3:d4:06:17:db:27:eb:10:c6:94:2f:
                    aa:62:f1:44:29:d4:d5:e1:3a:6b:0d:9e:14:c5:c3:
                    43:7b:be:43:c9:55:14:ca:4d:72:31:a2:a2:5b:17:
                    d4:cc:24:27:c2:c3:23:2a:51:8f:e5:87:67:f2:ed:
                    da:31:57:37:6f:b8:27:97:69:2c:5a:f7:4f:17:96:
                    e9:45:d6:6f:60:1e:d4:c8:6d:4d:b1:f1:aa:b6:a3:
                    e4:ec:b0:58:ce:88:9e:02:7c:63:3e:eb:eb:00:4e:
                    16:2f:59:12:9d:6e:24:d9:52:0c:af:7a:37:d9:a0:
                    45:54:55:88:5b:29:0b:52:bf:07:df:e8:e1:b0:a9:
                    71:c0:d7:f8:37:cb:a4:45:22:60:6a:83:ae:eb:2a:
                    f6:fb:80:b5:29:25:b3:36:63:12:1c:7e:9b:34:83:
                    74:8e:da:be:f0:15:86:e8:ba:58:d9:05:16:91:d2:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C0:02:C4:1E:87:DA:18:B0:58:4B:74:D1:00:BC:5A:61:2E:36:C6
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:3e:9d:5a:88:f5:1f:46:20:78:3a:93:87:8d:10:82:a6:
         c4:9f:5d:79:a9:36:43:fe:2a:57:42:52:24:04:1c:68:74:33:
         0c:f3:97:53:1e:01:94:11:3f:55:eb:96:2c:ad:c5:4b:71:37:
         a6:88:7d:19:e8:ad:82:aa:dd:b4:9f:ec:95:d0:67:30:d6:bb:
         3b:06:e5:4c:71:34:8b:49:83:ce:e1:3a:f3:82:8d:aa:f4:96:
         23:d4:e3:e1:10:5f:18:c9:23:7c:7d:87:9c:b7:57:b0:19:bc:
         38:16:05:50:ff:c9:4d:84:3d:34:f6:34:0c:f4:5e:e2:46:0a:
         11:1b:b2:35:37:12:e7:19:e8:43:f0:f4:4c:25:b9:7e:af:19:
         9b:1b:ae:d0:0f:cc:9e:10:08:81:42:7f:81:d5:fa:10:5f:05:
         56:bd:30:a5:be:4e:68:0a:51:24:f3:64:53:87:c0:28:20:83:
         51:57:e7:44:15:55:d4:1c:00:bd:12:04:69:02:32:76:9a:ad:
         e9:c7:0d:da:b5:f7:40:f3:0e:e3:87:6d:53:9a:8d:2d:c8:b8:
         c7:29:a9:99:ac:a1:c3:e2:bc:0d:7b:da:29:46:d7:10:0a:61:
         20:0e:92:69:40:6a:db:78:d6:5a:28:9d:bb:05:ac:84:93:f2:
         d3:70:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:40:05 2025 by rpki-client