Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3136382e3230352e39322e302f32322d3234203d3e203631343933.roa
File:                     3136382e3230352e39322e302f32322d3234203d3e203631343933.roa (raw, json)
Hash identifier:          7BvM2g99FeJeeRScU87xv7Sn1DleOKxaxgNfRxd6OQo=
Subject key identifier:   BF:86:6A:16:CC:D1:27:F1:C2:DF:A7:F7:8E:73:7F:0A:68:91:E2:8B
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       0A3055D3E95088E86E9AE525BEDD93D8607D5E9D
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3136382e3230352e39322e302f32322d3234203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:43 +0000
ROA not before:           Tue 04 Feb 2025 18:45:43 +0000
ROA not after:            Tue 03 Feb 2026 18:50:43 +0000
asID:                     61493
IP address blocks:        168.205.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:30:55:d3:e9:50:88:e8:6e:9a:e5:25:be:dd:93:d8:60:7d:5e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:43 2025 GMT
            Not After : Feb  3 18:50:43 2026 GMT
        Subject: CN=BF866A16CCD127F1C2DFA7F78E737F0A6891E28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:55:6f:dd:d4:bb:61:f1:55:f3:85:62:63:
                    3c:2c:6c:59:14:0b:c5:b9:9e:19:49:6a:fb:39:9d:
                    bc:c4:ed:e0:0e:ea:9b:c9:53:23:25:f4:68:3d:52:
                    01:92:b3:15:4d:1f:e0:bd:17:e1:24:27:0e:1f:3a:
                    18:4b:b4:5c:50:ef:6d:88:67:88:2a:1d:ab:5b:cf:
                    b0:9d:1a:cd:34:e3:08:e3:4d:98:3a:d7:8d:7d:5c:
                    31:c6:3d:9e:f4:63:72:83:f0:b3:f3:c3:2a:08:51:
                    8c:33:f6:5b:76:4d:d3:1f:5d:e8:b1:c0:12:10:0e:
                    df:3d:ad:d2:c6:7a:d4:ca:1e:67:0a:ba:23:50:13:
                    5e:ce:0c:c3:b0:33:36:c2:f7:fc:24:5c:db:9d:a1:
                    92:40:25:f8:63:73:7f:84:e3:c0:65:ea:93:e2:da:
                    29:98:e4:42:e1:42:2d:fa:40:82:41:98:61:12:67:
                    a2:79:1d:cd:20:5b:97:8b:c6:d8:ed:ee:f7:18:fc:
                    1f:aa:90:d0:1b:40:bb:d6:8c:50:2a:61:c2:70:d4:
                    a2:16:20:a9:61:eb:ea:a1:0f:10:0c:28:a0:55:f1:
                    16:91:c6:84:b9:24:ee:ab:01:f6:16:6a:20:dc:2f:
                    ce:22:7e:e0:75:18:73:55:35:cc:99:15:63:a0:39:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:6A:16:CC:D1:27:F1:C2:DF:A7:F7:8E:73:7F:0A:68:91:E2:8B
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3136382e3230352e39322e302f32322d3234203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:2f:5b:1b:98:2b:cb:9d:e0:56:5f:fb:87:47:81:3b:3f:8e:
         de:bb:3b:2c:4f:3e:e4:02:44:7b:80:e9:ab:fd:73:62:45:10:
         ff:19:67:a2:61:ac:24:36:96:bf:db:50:a4:61:eb:fd:3a:9b:
         44:09:25:78:eb:09:f9:07:2f:28:6a:a2:3b:e6:95:d3:09:93:
         d8:03:ed:51:6c:b0:cb:6c:e8:c6:4a:18:5b:0c:29:23:22:12:
         ca:82:f9:2f:e1:8e:c0:cf:45:5c:91:d7:95:12:f7:d3:4e:32:
         c4:98:6a:68:ac:9e:f2:c5:23:05:f4:73:25:65:b0:70:1b:a8:
         bf:9f:41:6b:69:24:54:83:38:b1:7f:0f:f2:2d:38:1f:ca:89:
         93:56:8f:10:fa:99:1b:58:c0:55:47:d5:fc:ac:a8:1e:c3:90:
         9a:b3:e4:85:1b:97:36:a0:41:80:75:06:c3:8d:1c:46:c0:ea:
         07:d8:aa:0e:b2:97:f2:18:96:2d:7b:cc:92:76:91:89:bd:40:
         0b:3a:5a:3d:1e:55:5c:ac:96:5d:d2:24:c7:09:83:0f:9c:17:
         f4:df:34:65:91:c0:19:c6:d2:b9:01:7c:55:9a:48:79:38:b0:
         ad:49:a3:07:06:48:a7:1c:a6:31:9e:97:d6:43:72:90:49:3d:
         1d:28:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client