Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa
File:                     3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa (raw, json)
Hash identifier:          YNzPLDNtqG8py5HPawGJT7+VPBmXv9SfGWU8xmkN5Po=
Subject key identifier:   07:2C:06:07:97:CC:A1:C4:D7:8F:BD:9D:35:2E:C3:07:75:C9:8C:CC
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       4D014E82A03EB71D7A97E88994E329B0DF00B161
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa
Signing time:             Tue 04 Feb 2025 20:04:01 +0000
ROA not before:           Tue 04 Feb 2025 19:59:01 +0000
ROA not after:            Tue 03 Feb 2026 20:04:01 +0000
asID:                     263815
IP address blocks:        167.249.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:01:4e:82:a0:3e:b7:1d:7a:97:e8:89:94:e3:29:b0:df:00:b1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Feb  4 19:59:01 2025 GMT
            Not After : Feb  3 20:04:01 2026 GMT
        Subject: CN=072C060797CCA1C4D78FBD9D352EC30775C98CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:83:a8:f1:3d:d1:3a:d6:7a:ae:41:fb:97:
                    d5:74:28:35:7e:a8:ec:9c:8f:78:8e:46:f0:f0:9b:
                    04:f1:76:e2:71:16:9a:70:3a:d7:52:f8:33:e1:bb:
                    3c:22:2f:7e:c3:b4:eb:3c:49:5e:62:b0:52:8e:43:
                    2c:fd:09:a7:2b:66:19:3c:39:85:a3:45:0f:7d:66:
                    c6:7e:9b:d8:90:f5:01:c1:cd:45:40:1e:99:94:2e:
                    9a:98:d6:42:2b:f8:f1:34:b5:13:23:5f:76:43:dc:
                    fe:88:34:df:d6:e9:e0:80:00:e4:2f:ed:6e:df:38:
                    0a:08:0e:8d:9c:1f:6d:72:fb:2c:e9:d4:06:58:48:
                    2b:e3:a5:bc:df:19:d7:91:98:1e:9a:ca:56:77:62:
                    d8:18:19:a9:77:13:8f:f1:e7:0c:62:51:be:7b:08:
                    9d:14:0a:f9:48:d0:ec:14:ab:99:b0:87:cb:94:21:
                    79:9a:71:d6:fa:e7:26:1f:b4:7e:f5:29:a6:b2:c5:
                    2a:9f:80:50:0e:10:1f:82:24:82:51:4c:1c:5f:55:
                    0d:69:58:49:4d:4f:d6:28:41:47:fe:8b:40:c4:81:
                    9c:97:9a:88:76:f5:30:42:d2:75:b3:30:17:08:8c:
                    e4:5c:e1:89:36:a5:7b:24:8b:21:ea:1b:71:6d:a8:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:06:07:97:CC:A1:C4:D7:8F:BD:9D:35:2E:C3:07:75:C9:8C:CC
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:8e:f0:b3:cf:b0:c7:0d:70:a3:01:6a:5e:11:08:5a:c8:
         c8:54:27:e1:02:e4:81:1b:34:74:c6:dd:9b:39:0a:31:35:dd:
         2b:d5:20:43:df:c0:da:57:31:2a:27:8d:d5:b5:49:38:2f:7b:
         fc:b8:68:36:49:ae:d0:12:33:c7:f9:13:ce:8d:00:ef:2b:13:
         c8:87:84:5a:8b:ba:d4:f4:d1:d6:64:ee:a3:7b:db:7a:5b:da:
         84:f9:cc:68:b1:47:a6:41:fe:78:f0:04:ba:9c:c4:8a:38:11:
         1d:a8:b2:a9:9b:c7:38:37:0d:18:14:fa:0b:bc:6b:b6:40:fe:
         a7:4b:3b:15:47:79:0f:d6:7c:d2:fa:41:45:43:ca:c9:00:7a:
         90:49:24:50:81:e7:88:84:61:48:ac:df:20:13:1b:67:ff:ff:
         14:f9:79:9d:cf:78:27:87:3a:04:f5:f6:0b:77:21:ca:00:21:
         76:e4:91:66:09:e4:ad:22:6d:be:f9:14:e3:fd:e6:4b:3b:d3:
         49:4f:ef:49:16:e1:4b:0a:52:14:f3:f1:0f:fc:24:f9:79:fd:
         fa:ad:da:83:b0:f8:f8:b5:2d:ed:84:fe:28:1c:80:e5:18:13:
         45:bb:c9:8f:ae:05:cd:83:e1:fa:db:5a:e6:4e:31:07:b9:76:
         82:1e:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:32 2025 by rpki-client