Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2038303438.roa
File:                     3230312e3133302e38322e302f32332d3234203d3e2038303438.roa (raw, json)
Hash identifier:          S//LHcc7wojKGG4NTPYvS5eEtGhj9EIbUUvWAygR4iY=
Subject key identifier:   69:CC:1B:63:E9:6E:1B:AA:76:2C:80:D5:C2:3F:1C:A9:39:C5:C2:FD
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       799FBB24C072A0DC898BEC4E540E9900C5879C2D
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2038303438.roa
Signing time:             Tue 04 Feb 2025 18:29:24 +0000
ROA not before:           Tue 04 Feb 2025 18:24:24 +0000
ROA not after:            Tue 03 Feb 2026 18:29:24 +0000
asID:                     8048
IP address blocks:        201.130.82.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9f:bb:24:c0:72:a0:dc:89:8b:ec:4e:54:0e:99:00:c5:87:9c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Feb  4 18:24:24 2025 GMT
            Not After : Feb  3 18:29:24 2026 GMT
        Subject: CN=69CC1B63E96E1BAA762C80D5C23F1CA939C5C2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:a4:38:c8:71:ca:48:8f:51:51:96:57:ea:
                    fd:33:c5:26:01:cf:11:d1:da:f2:6c:06:53:29:1c:
                    6f:26:d4:45:d5:64:72:a1:5e:8f:a3:49:5f:2b:1c:
                    9d:b1:42:02:4e:5c:f3:b1:5f:1e:7d:f0:e2:ac:9d:
                    fc:25:2e:a4:62:d2:4b:95:c9:54:d9:f3:9e:0e:bb:
                    30:95:00:49:3a:fc:3c:2b:cd:3c:3a:16:fe:67:8c:
                    55:72:e2:eb:69:92:df:91:6f:36:6c:3f:32:c9:14:
                    cd:3a:e8:da:8e:81:37:4c:fd:c4:5d:2a:32:14:ff:
                    c4:c0:45:9a:de:cc:99:52:8d:9e:91:53:ba:35:c0:
                    6f:09:b2:68:39:b6:2e:38:d5:1d:1f:a2:99:9b:2a:
                    88:01:a0:0e:fa:c9:1b:d2:8c:0d:88:e1:f4:2e:16:
                    39:5c:6c:01:2e:7b:0f:e2:96:00:63:c9:e3:1a:20:
                    22:56:59:c7:e1:4c:5d:eb:af:da:fa:46:22:36:1e:
                    10:f3:e1:60:b9:49:40:11:d2:79:23:16:0a:0e:ca:
                    0e:a3:65:da:76:74:09:fe:26:ff:28:56:28:e4:b0:
                    25:66:69:79:b1:ca:fb:2b:29:02:be:78:62:47:26:
                    b2:2f:0c:70:2b:0a:87:2d:0d:3b:52:d0:92:b5:d6:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:1B:63:E9:6E:1B:AA:76:2C:80:D5:C2:3F:1C:A9:39:C5:C2:FD
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:05:e9:cb:95:85:ef:f0:5a:ef:b4:ef:12:e1:7e:d6:98:
         5d:ec:95:84:98:09:84:a1:4e:ce:a7:0b:1d:78:b6:13:2b:bc:
         e7:ca:3e:7e:bc:f4:30:36:ba:2c:f4:21:1c:40:4f:6f:91:9a:
         a2:b6:67:3a:e6:5c:7e:04:ba:1c:e6:96:8d:8d:bb:dc:55:17:
         bb:12:e8:b6:99:69:33:76:69:25:bc:4e:7a:4d:4f:2c:68:b1:
         c0:e0:42:e4:d5:2d:85:9e:6e:9f:99:a2:c4:57:44:6c:7b:26:
         fc:c6:38:d7:14:3a:e0:68:62:81:42:51:4d:bb:1f:5e:28:4c:
         57:3e:50:37:75:58:7c:85:c1:48:68:cf:90:ce:37:3d:e0:42:
         56:61:36:9c:3b:75:d6:38:85:ba:92:e9:b0:26:c4:81:53:00:
         d6:c6:ae:9a:63:a5:fe:75:c5:d5:a9:41:42:0e:a0:23:77:7f:
         3d:bc:03:61:2f:2a:76:8f:a1:85:03:b6:4a:15:60:a1:76:1b:
         ff:35:9d:22:a4:ff:25:72:64:4f:d3:f9:49:c7:dd:ed:3c:74:
         62:ae:1b:05:d6:27:09:8a:8a:e8:f9:64:97:7a:a9:76:b2:6a:
         4e:3d:da:7d:c3:c7:07:78:ea:ea:8c:04:73:79:17:6a:f5:13:
         a5:6f:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client