Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34382e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34382e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          FdKFB4pGjf+fgwNY0QRmOLf315rNdomaEndlbc+lR1Q=
Subject key identifier:   10:9B:A1:5C:63:7B:AC:84:11:AD:20:D7:99:08:12:F2:2B:6C:57:D3
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       12A808C70CEEDDD9E404E79C95C8DD846C29185A
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34382e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:04 +0000
ROA not before:           Tue 04 Feb 2025 18:21:04 +0000
ROA not after:            Tue 03 Feb 2026 18:26:04 +0000
asID:                     17147
IP address blocks:        163.247.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a8:08:c7:0c:ee:dd:d9:e4:04:e7:9c:95:c8:dd:84:6c:29:18:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:04 2025 GMT
            Not After : Feb  3 18:26:04 2026 GMT
        Subject: CN=109BA15C637BAC8411AD20D7990812F22B6C57D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:f1:1a:b2:c8:e5:79:9c:ae:5f:b1:d5:fa:
                    80:8d:99:8d:2d:22:f4:a0:cf:cd:8b:95:33:8e:38:
                    4e:55:40:b0:32:c2:5e:29:e4:2f:9d:aa:76:8a:42:
                    a5:48:f2:ea:a8:60:77:4c:3e:4c:fc:39:74:6b:8b:
                    7a:92:2f:64:66:91:6d:c1:f9:d3:84:69:e1:24:e0:
                    c8:14:c5:4a:7e:6c:f7:97:64:85:b7:ab:13:ed:7d:
                    d3:ba:8f:2c:f6:5a:9c:7e:15:05:68:16:9d:be:c3:
                    84:e9:7a:c2:e2:7c:9e:92:7e:f1:7f:4b:7d:0e:5f:
                    87:7b:9c:71:1f:f3:b8:45:81:ca:c4:28:7d:fb:9b:
                    90:0f:74:e4:83:e4:6f:1f:cf:15:75:65:67:20:3e:
                    4d:29:ca:0e:76:52:14:53:13:80:f5:c5:94:60:ea:
                    3b:cd:75:1f:16:5e:ce:b2:a1:ec:79:97:9b:ce:12:
                    83:a4:76:a6:9b:ed:2e:56:45:1b:67:2d:a4:e3:2c:
                    53:3e:be:6c:60:cc:52:b1:ec:c4:99:82:f0:c0:7d:
                    d2:41:2f:19:39:1b:d1:c2:23:0a:e9:83:cd:d4:a8:
                    46:8f:40:b2:37:d1:e8:ac:2d:47:f7:de:0a:b0:bb:
                    37:67:5e:df:64:57:05:cf:e7:1e:cf:7b:85:25:e3:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:A1:5C:63:7B:AC:84:11:AD:20:D7:99:08:12:F2:2B:6C:57:D3
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34382e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:79:61:f0:4d:48:69:65:97:c4:35:fb:c8:b9:e8:dd:d7:01:
         f7:f5:14:7f:72:7e:bb:d1:35:b9:36:93:0e:c9:30:b3:2d:45:
         44:2b:b6:1e:71:55:d7:b7:ae:bd:03:9b:41:2b:34:f4:ea:02:
         4f:b1:8e:b8:99:51:53:36:03:ae:32:92:b2:ad:97:22:e0:7a:
         da:c5:a1:52:83:63:57:59:6b:4a:64:15:3a:25:5d:70:a4:8d:
         fb:14:4b:7f:98:dd:3c:14:75:4e:ae:f8:1d:eb:6e:be:13:67:
         f9:fb:b4:5c:e3:82:09:54:1f:f1:ce:28:c7:f9:57:74:59:ce:
         da:de:15:87:5b:14:f1:cc:ba:92:1d:8b:55:85:34:e7:7c:2f:
         e9:18:d4:ff:98:a5:cc:7a:4f:2f:b8:56:05:81:48:4d:fe:ad:
         46:57:fc:28:7e:db:90:9e:c9:50:3d:3e:0b:a8:55:2c:04:7c:
         02:28:6e:52:35:59:9c:fa:9c:5a:01:74:dc:20:91:a3:de:a1:
         ab:74:9f:3d:c3:62:d5:ec:b1:5f:9e:48:95:28:7a:b0:ee:e6:
         3b:10:b2:53:b6:66:9a:c5:de:5a:e5:5b:b6:f3:f2:5c:66:c0:
         04:82:c1:43:a2:34:e0:32:8d:a8:9e:85:1c:86:62:3e:84:22:
         f3:07:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:19 2025 by rpki-client