Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa
File:                     3130332e382e39322e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          Cid2yrwyedJIGGxWPKOsVSEWOpaZh1CHj9QmcOqb++E=
Subject key identifier:   B1:AA:BC:B4:AC:E9:F8:B0:86:19:FA:4C:14:1C:1A:F8:E2:EE:F8:6E
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       33B9AC88113841B068154AA15FF7790770D190CC
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 18:17:09 +0000
ROA not before:           Tue 04 Feb 2025 18:12:09 +0000
ROA not after:            Tue 03 Feb 2026 18:17:09 +0000
asID:                     52471
IP address blocks:        103.8.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:ac:88:11:38:41:b0:68:15:4a:a1:5f:f7:79:07:70:d1:90:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Feb  4 18:12:09 2025 GMT
            Not After : Feb  3 18:17:09 2026 GMT
        Subject: CN=B1AABCB4ACE9F8B08619FA4C141C1AF8E2EEF86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:fa:fd:24:e5:24:19:24:55:c3:93:6b:6e:
                    48:97:2f:a1:d3:98:ac:5e:7f:67:4f:89:6b:7d:7c:
                    57:f4:eb:bb:a3:e8:78:23:6b:ba:52:b1:e0:cb:88:
                    61:48:d8:5c:61:fb:c7:38:d0:ad:57:ce:a0:48:0e:
                    55:fd:02:77:de:68:60:fc:6e:cf:fc:4d:27:86:0d:
                    b5:6a:10:1c:2f:d4:48:27:68:05:fd:67:bc:8c:ae:
                    76:01:fa:d5:98:f7:0e:b6:4c:47:5d:d3:57:74:68:
                    b7:d2:fc:6a:89:0f:b6:6e:0f:7d:6a:2c:4a:1c:02:
                    9c:e0:67:fd:68:cf:2d:09:4d:d6:1b:df:4e:38:fb:
                    5a:92:21:7d:16:b8:11:d3:dc:cf:62:ad:74:18:dd:
                    ed:d7:c5:e3:2c:c8:d1:41:95:77:ad:fa:40:79:6c:
                    3c:18:d0:13:e8:ba:22:8e:a0:0f:bc:1b:9e:1d:6d:
                    91:7f:32:38:d5:5a:aa:b4:6b:88:cc:58:da:a8:00:
                    dd:d7:ec:17:5d:e6:d6:00:f2:17:10:68:88:af:44:
                    ec:43:e6:b4:f1:8f:25:12:79:9f:93:1b:a5:82:da:
                    1d:c4:47:6f:63:5d:a2:01:44:a7:ca:17:2e:c4:2f:
                    cd:ca:73:00:c7:b6:b0:6d:f1:53:49:da:48:cf:96:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:BC:B4:AC:E9:F8:B0:86:19:FA:4C:14:1C:1A:F8:E2:EE:F8:6E
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:a6:92:aa:2c:ce:1a:34:21:41:7a:7b:4c:fd:f4:52:58:
         30:c7:69:90:48:0a:83:48:08:3d:eb:72:f3:9a:1f:9f:62:0c:
         8b:6c:f1:29:50:dc:b7:bc:06:64:6f:07:2e:86:49:4f:19:2d:
         83:6e:90:3b:52:df:26:60:42:76:bf:e9:de:5d:b2:f0:09:7d:
         45:96:f2:5e:2c:9e:2e:6e:02:8d:9a:e1:49:3b:b9:3e:f3:c3:
         03:81:98:4a:82:3f:2d:25:5f:f6:a0:a5:39:84:20:0d:b1:84:
         1c:2f:7b:ed:c6:34:77:5b:f1:05:a1:d6:5a:44:ea:88:46:6c:
         ab:f3:b8:99:3c:fd:09:b4:f0:ea:d6:4a:3c:3f:9d:4c:ec:01:
         3f:21:98:b0:08:27:b6:a3:95:98:bd:ce:eb:db:d4:9f:c6:6a:
         db:4c:66:7d:15:ea:0d:91:c7:e5:e5:b0:e6:3f:21:42:66:dd:
         55:21:f1:8c:96:41:f3:87:4e:fc:9d:2c:eb:8f:bd:a8:73:58:
         cf:59:d6:5c:24:c1:f5:4f:21:f3:ff:d4:5b:83:0e:3f:17:63:
         05:42:84:5d:c4:ce:9b:11:28:b9:17:ac:ab:5f:25:1c:9a:97:
         76:ca:61:38:4f:15:26:4b:a7:c0:53:e4:72:f2:12:bc:3e:4a:
         89:d3:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:09 2025 by rpki-client