Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233372e302f32342d3234203d3e20323633373533.roa
File:                     3133312e37322e3233372e302f32342d3234203d3e20323633373533.roa (raw, json)
Hash identifier:          gmfXOnhFUTkot7p7GEQCM6b3X2NJSu4F33ZE6QDwF4I=
Subject key identifier:   17:D2:AC:60:94:2F:A7:B8:91:B5:8B:28:F0:8D:5D:9C:C3:F4:BC:19
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       37CB6873489097F8B136304C2417730627656C4A
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233372e302f32342d3234203d3e20323633373533.roa
Signing time:             Tue 04 Feb 2025 18:13:12 +0000
ROA not before:           Tue 04 Feb 2025 18:08:12 +0000
ROA not after:            Tue 03 Feb 2026 18:13:12 +0000
asID:                     263753
IP address blocks:        131.72.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:68:73:48:90:97:f8:b1:36:30:4c:24:17:73:06:27:65:6c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Feb  4 18:08:12 2025 GMT
            Not After : Feb  3 18:13:12 2026 GMT
        Subject: CN=17D2AC60942FA7B891B58B28F08D5D9CC3F4BC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:7e:7d:93:1b:f6:ad:66:02:b5:f5:6b:84:
                    74:9c:a7:97:7b:76:be:46:46:37:99:a0:34:22:f2:
                    e5:74:31:e2:ee:d9:2f:49:ec:ba:06:7b:62:23:9f:
                    88:fd:65:b0:99:55:b8:9b:64:67:e6:f8:4f:78:a7:
                    ae:15:5d:06:26:f8:a7:6f:d0:1e:c5:8a:fc:91:da:
                    c7:f0:d5:65:2e:14:f0:0f:94:53:1c:ab:94:08:3b:
                    f1:0a:05:2c:c6:0b:75:64:3c:b9:ff:0a:ae:fb:f8:
                    3e:e7:dc:99:84:d1:48:03:98:c0:b3:d0:0b:a8:7e:
                    8b:67:69:19:88:38:d7:37:4f:3d:12:4f:98:f7:91:
                    39:39:78:3b:c0:9e:d9:c7:a3:22:9a:9b:13:36:a4:
                    33:31:97:06:1f:ac:06:f0:f7:c6:2a:43:47:1f:4c:
                    b0:e8:c8:21:c6:6a:2c:37:2d:48:bc:3c:60:1b:b8:
                    54:72:2f:c5:1a:ea:fe:12:d2:eb:d9:6a:cd:07:c3:
                    e7:18:d2:8f:68:0b:15:27:13:85:16:59:c8:97:f5:
                    46:d7:be:3b:f8:12:96:be:44:c2:c1:d2:9e:75:6a:
                    e4:02:6c:e0:84:0b:ed:44:14:57:70:22:13:70:67:
                    fc:6b:48:6b:f5:4a:2a:d8:ec:1b:38:ea:45:ed:c0:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D2:AC:60:94:2F:A7:B8:91:B5:8B:28:F0:8D:5D:9C:C3:F4:BC:19
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233372e302f32342d3234203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:59:02:44:3b:41:8b:82:9f:5f:bf:2e:d2:79:79:b9:f2:
         3f:96:66:e0:02:26:fc:f5:6d:3f:29:8b:24:b8:5a:b4:83:eb:
         9f:3e:52:7f:36:4d:97:2e:82:90:24:ba:bb:d7:6d:cb:69:61:
         b2:28:34:fc:c0:d0:3f:6f:05:0b:28:34:57:ca:ff:42:41:27:
         61:c5:01:89:35:64:48:48:73:f4:0f:a7:12:bd:db:c0:ff:e4:
         46:94:57:0e:c2:02:f0:98:9e:0f:3e:5e:e9:15:51:12:3f:10:
         0a:9c:36:a9:d7:27:44:11:ed:d1:82:76:c6:3c:dc:45:be:9d:
         39:30:3a:47:84:f5:92:84:e6:d2:fa:d6:15:e2:a2:65:ee:5d:
         0e:fa:d7:a2:b4:15:14:60:76:23:14:97:0b:7d:82:30:ab:cb:
         7a:50:52:ba:30:61:ed:c0:6a:c3:b0:b3:4c:b2:95:9f:6c:14:
         0f:27:f4:6d:6c:0a:e2:31:fb:be:c2:cc:45:b1:c1:9b:f2:8c:
         d7:55:6a:bf:21:c4:a9:4e:20:be:10:22:01:9c:f6:f7:4c:69:
         af:a1:58:6a:68:20:d6:98:10:a0:bc:64:c6:3a:65:40:89:ca:
         c4:1d:38:bc:1e:92:ad:99:b9:e1:0d:60:5c:e0:1b:2f:f8:79:
         06:1e:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:49 2025 by rpki-client