Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e372e3133352e302f32342d3234203d3e203532343731.roa
File:                     3130332e372e3133352e302f32342d3234203d3e203532343731.roa (raw, json)
Hash identifier:          JNcf3lkyoGx6m+R/4raDvAzNx7FmBojVgtKOyvr2hIw=
Subject key identifier:   B0:D2:34:1A:B9:DF:B9:90:9F:4E:C9:07:B1:8D:96:1C:6E:AF:73:27
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       6C4F41A1E832DA5BE32FE14CAB6D41131ACE692A
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e372e3133352e302f32342d3234203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 18:17:10 +0000
ROA not before:           Tue 04 Feb 2025 18:12:10 +0000
ROA not after:            Tue 03 Feb 2026 18:17:10 +0000
asID:                     52471
IP address blocks:        103.7.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4f:41:a1:e8:32:da:5b:e3:2f:e1:4c:ab:6d:41:13:1a:ce:69:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Feb  4 18:12:10 2025 GMT
            Not After : Feb  3 18:17:10 2026 GMT
        Subject: CN=B0D2341AB9DFB9909F4EC907B18D961C6EAF7327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:a5:1b:1c:e8:9f:71:85:55:bf:d6:fd:1b:
                    25:ac:ba:82:40:fc:92:bc:72:61:56:7c:5b:7e:11:
                    26:0a:9f:11:d8:2d:30:fc:0e:24:f0:b2:a5:89:95:
                    36:86:3c:68:75:79:d0:68:68:2f:eb:8a:ec:7f:ef:
                    30:fd:0b:d6:a9:fa:24:60:4e:c9:73:df:a4:cc:56:
                    5f:94:56:e0:8a:50:19:ee:ff:19:6e:f6:e4:76:ac:
                    76:de:9d:52:f0:16:0d:e3:01:21:5b:f8:09:33:2e:
                    5f:63:f0:e5:02:38:50:00:2e:53:68:66:1c:9b:38:
                    24:c9:bc:97:7c:55:68:eb:72:06:6c:b7:1c:5e:e7:
                    c4:a0:79:78:59:ef:4c:8d:10:b7:ef:a6:3c:b5:43:
                    e9:a9:27:f9:d6:00:ba:6c:36:38:92:56:f3:db:a3:
                    bb:07:26:3a:04:39:00:8a:b9:2e:62:d7:2d:24:db:
                    16:8c:67:38:88:89:53:bc:b6:35:a4:68:5e:1a:3b:
                    9e:eb:8e:c4:47:a7:9b:8b:87:6d:1c:2b:79:bf:4c:
                    26:8b:60:b2:e4:81:4f:44:8c:28:45:e4:10:2a:c2:
                    e9:82:c2:ed:83:a8:c4:24:86:aa:76:b7:84:c1:d0:
                    23:e3:3a:2f:6c:eb:7e:40:61:e3:13:e0:1f:a0:62:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:34:1A:B9:DF:B9:90:9F:4E:C9:07:B1:8D:96:1C:6E:AF:73:27
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e372e3133352e302f32342d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:7e:87:93:69:89:35:33:e1:60:99:27:65:b3:df:58:32:
         2f:35:cc:95:cc:06:7b:bf:e3:6c:72:09:c4:77:1b:24:45:5c:
         97:32:fc:e9:ca:34:74:b8:9d:f6:75:9e:2e:47:07:d8:5f:66:
         d7:59:e6:49:91:bd:31:92:00:b0:5c:3c:47:71:a9:5b:9c:73:
         a0:70:3e:8c:32:a4:0a:54:28:41:5c:cd:49:f1:59:fe:fc:e8:
         50:de:4a:ca:89:71:e3:7c:ec:98:bf:24:93:3a:50:66:4e:29:
         e6:64:04:86:7f:5f:e1:75:e4:bb:a5:f6:0e:e0:63:47:f0:5e:
         0c:a0:ef:56:11:8e:df:b1:12:8e:a5:c8:b9:61:b8:cf:45:b6:
         52:ba:50:4b:51:24:8d:18:71:79:66:75:4a:26:3f:4c:ee:53:
         a0:a0:d9:b0:7b:d6:b8:9a:1a:fa:0d:df:24:60:a8:bb:3d:eb:
         f4:4a:e1:fa:4b:19:8c:6b:9b:56:da:c7:b2:76:ea:b6:0d:91:
         62:c9:91:7c:ca:42:f3:ea:d5:14:af:9e:7f:e7:d4:b3:c7:f2:
         90:85:9d:e1:aa:cc:d2:1b:27:0b:31:8a:c2:e4:a4:10:f0:6f:
         29:29:a6:a6:51:be:1e:d6:32:77:e2:87:bc:9b:9f:1f:eb:63:
         da:10:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:27 2025 by rpki-client