Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3133312e3235352e342e302f32322d3234203d3e203631343933.roa
File:                     3133312e3235352e342e302f32322d3234203d3e203631343933.roa (raw, json)
Hash identifier:          fdJtCLOo83Jb6K+6vrQ+3DvBR2q9P8IcLDSb+NZUixo=
Subject key identifier:   60:0E:44:7B:7B:B9:7B:91:45:7F:3C:55:4B:89:1A:1A:EA:F2:C8:30
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       65F431709FEB9F46BDE1685E5A2D81129AA6C1B4
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3133312e3235352e342e302f32322d3234203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:44 +0000
ROA not before:           Tue 04 Feb 2025 18:45:44 +0000
ROA not after:            Tue 03 Feb 2026 18:50:44 +0000
asID:                     61493
IP address blocks:        131.255.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f4:31:70:9f:eb:9f:46:bd:e1:68:5e:5a:2d:81:12:9a:a6:c1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:44 2025 GMT
            Not After : Feb  3 18:50:44 2026 GMT
        Subject: CN=600E447B7BB97B91457F3C554B891A1AEAF2C830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:17:33:0c:3f:ee:8a:91:e5:fe:69:63:72:
                    72:dd:22:13:f8:4b:24:73:b8:d8:2a:36:3a:92:6e:
                    d5:bc:14:92:72:6c:ec:23:d3:25:83:b0:91:6f:e1:
                    b1:30:31:bd:25:5f:b4:f3:b9:7b:57:71:ec:63:df:
                    16:57:5a:ec:6b:d3:33:8c:d8:21:c6:60:04:1f:93:
                    2e:bf:c8:bb:21:82:a6:80:04:4f:d2:f7:1a:14:8f:
                    4b:d6:e3:dd:5d:4c:9f:a5:a8:22:a1:f0:e6:54:18:
                    3d:10:1d:c5:5e:1b:55:ea:96:ad:07:2e:95:1e:7e:
                    0d:23:e0:1a:5f:ce:1f:29:12:ee:e0:04:06:6e:b0:
                    34:f1:02:23:03:9f:83:36:e3:7b:e0:d4:16:b3:dc:
                    9b:b6:3c:54:8a:26:14:4b:d5:25:e2:84:fb:e8:d3:
                    8e:bc:e6:c2:e5:b9:3d:b2:38:e3:d9:1b:fd:15:a4:
                    b5:8b:ac:65:f7:f4:15:d0:ba:b1:2a:4d:49:dc:05:
                    36:1c:b7:03:ce:3a:45:dd:10:7f:db:7f:d3:14:f6:
                    a3:b3:fa:6b:2e:f3:95:1a:22:73:7a:cf:58:cf:3e:
                    4c:2a:5f:54:76:69:bc:20:d7:eb:88:9c:c3:24:fb:
                    56:40:5b:8e:ef:c7:0c:8f:78:17:d6:1d:f3:fd:40:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:44:7B:7B:B9:7B:91:45:7F:3C:55:4B:89:1A:1A:EA:F2:C8:30
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3133312e3235352e342e302f32322d3234203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:1a:6f:37:ba:f4:3a:67:ec:26:2a:b0:8d:b9:f4:00:e4:
         eb:44:32:1c:0f:c1:ab:82:e0:d6:07:a8:46:1a:5c:4d:ba:55:
         88:1a:7e:d9:6f:61:70:df:9b:5b:40:06:d8:ad:21:44:44:d9:
         98:73:fa:6e:fd:b4:bd:f2:84:3a:4f:ac:70:61:20:bb:ff:2b:
         32:43:6d:8b:bd:e1:55:45:4e:b7:2f:0a:e3:a1:6b:f7:eb:27:
         dd:9c:d6:08:20:e5:d8:d2:1d:23:d5:52:45:71:75:14:b5:b8:
         16:e4:06:f0:ff:24:f9:95:90:08:d7:50:f8:82:fa:16:fd:c9:
         a2:68:36:1a:00:ac:2f:28:aa:bb:c9:84:48:c5:1c:03:e2:d5:
         c6:f4:03:74:53:94:5d:10:52:6a:3e:6f:80:c3:cd:12:de:94:
         c0:eb:60:f3:8e:47:2e:09:a1:93:81:7a:4a:f0:1b:9c:3c:22:
         d5:11:4d:32:c2:0d:d3:67:af:dd:bd:dd:96:5f:43:d3:43:ff:
         51:06:f0:e4:88:84:f3:2e:15:71:38:e6:cc:5a:37:f3:34:44:
         9a:ca:52:c7:c1:6b:84:87:c6:b1:56:da:cd:81:d6:54:7f:97:
         7f:52:82:2f:52:4d:66:f9:71:5b:ac:5a:90:fe:20:bd:e5:b7:
         4d:cf:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:25 2025 by rpki-client