Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa
File:                     3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa (raw, json)
Hash identifier:          DWV5IYF+CgPhUxo1ps8cD5zuA/HzwlCKU425M2+BIhs=
Subject key identifier:   B8:BC:0D:F7:05:00:61:86:B0:F9:50:5E:6D:31:0C:22:1E:3E:E0:35
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       1CA1FA1BF0C29CC3AE5776314DD915826C51E3FC
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa
Signing time:             Tue 04 Feb 2025 20:04:00 +0000
ROA not before:           Tue 04 Feb 2025 19:59:00 +0000
ROA not after:            Tue 03 Feb 2026 20:04:00 +0000
asID:                     263815
IP address blocks:        167.249.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a1:fa:1b:f0:c2:9c:c3:ae:57:76:31:4d:d9:15:82:6c:51:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Feb  4 19:59:00 2025 GMT
            Not After : Feb  3 20:04:00 2026 GMT
        Subject: CN=B8BC0DF705006186B0F9505E6D310C221E3EE035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:e2:8c:56:31:43:74:68:aa:e1:a4:3f:f8:
                    3a:c1:bd:54:70:f1:3b:12:bb:dc:9f:04:00:3f:a5:
                    52:79:06:25:39:a6:c5:f3:7c:b4:56:18:3b:e4:08:
                    45:b7:99:3c:6a:be:fb:de:1b:77:28:a5:f9:e2:f6:
                    b8:aa:e2:da:9c:39:22:de:4c:2a:de:62:bf:93:42:
                    e2:86:1c:1c:55:01:28:31:61:b6:96:f0:0c:36:78:
                    5a:19:18:3c:69:3e:09:16:5d:da:9c:83:7b:b6:61:
                    7f:fe:45:03:b8:b5:3e:95:93:4a:75:64:c5:4b:50:
                    72:a2:a3:98:5e:fa:94:fb:5e:88:35:b6:da:ff:65:
                    b8:5a:e8:53:f2:fc:9e:20:9a:7a:d9:0a:1e:97:8f:
                    b8:c0:58:92:95:c3:8c:9c:86:fe:b6:27:9c:02:d8:
                    3b:8a:a9:4a:ce:6b:79:aa:a3:a2:bf:7c:e7:a5:a2:
                    aa:ff:ca:0b:8b:e2:b5:1e:ad:46:28:1e:4c:cd:d4:
                    85:92:5c:b5:f7:a9:5a:e5:7d:35:31:10:56:24:11:
                    31:60:3c:e7:8c:2d:7c:75:26:13:04:f2:6a:76:70:
                    db:5b:2e:36:4a:68:09:e4:73:df:1b:84:d8:ee:ba:
                    61:fe:f7:13:a8:17:c9:1f:99:8c:0e:f9:52:f9:47:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:0D:F7:05:00:61:86:B0:F9:50:5E:6D:31:0C:22:1E:3E:E0:35
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:92:05:ee:d1:10:1d:db:00:fb:3e:fb:b5:db:aa:de:e2:f7:
         c7:8f:5a:1e:9b:af:96:6e:3d:80:2b:70:5b:9c:e8:66:bd:ac:
         35:2c:41:02:35:b4:c5:36:10:30:13:11:f0:59:84:5c:24:db:
         5c:de:4a:4e:8d:b9:d3:b2:93:95:75:64:6a:42:86:92:f9:35:
         59:b9:58:73:db:99:e6:f6:78:53:63:d5:7d:c9:cb:5a:e3:5a:
         04:97:80:da:8a:24:43:76:e9:40:8a:ec:78:8c:9a:7a:44:35:
         25:fc:d6:36:23:28:1c:7c:93:73:8a:62:4f:57:ff:c8:04:c7:
         46:6b:d9:53:4f:37:6c:dd:9c:56:96:71:2f:94:5b:84:90:80:
         fa:a8:7e:3c:3f:08:09:6b:ba:14:f1:fe:1e:eb:b9:34:27:4b:
         dc:14:f7:08:d5:bd:fa:50:1f:ab:1a:b7:21:1c:2f:ea:55:d1:
         57:e5:d1:67:ee:54:bb:a0:9c:4b:3e:f5:bc:b0:08:78:e5:e7:
         93:ea:f9:48:63:2f:f8:3c:38:a2:17:b2:68:cd:45:be:a1:2b:
         0e:bf:f0:03:88:28:cd:42:bc:76:70:88:d5:59:f2:5c:5c:f5:
         9b:f2:9d:2d:b7:4a:b8:c6:35:ee:c3:0c:ab:5c:e8:51:ae:3d:
         61:1b:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:08 2025 by rpki-client