Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233382e302f32342d3234203d3e20323633373533.roa
File:                     3133312e37322e3233382e302f32342d3234203d3e20323633373533.roa (raw, json)
Hash identifier:          Dcc3dcIteqRcNidhMMrjd2l5EunvDv2+ep/s0ZBwLOo=
Subject key identifier:   26:7B:E3:E5:1B:66:FF:4A:54:18:F8:75:DA:2D:32:44:B0:5E:90:3C
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       2180C6105846B0E9DA44BAF6AD384FFAE56A3A74
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233382e302f32342d3234203d3e20323633373533.roa
Signing time:             Tue 04 Feb 2025 18:13:12 +0000
ROA not before:           Tue 04 Feb 2025 18:08:12 +0000
ROA not after:            Tue 03 Feb 2026 18:13:12 +0000
asID:                     263753
IP address blocks:        131.72.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:80:c6:10:58:46:b0:e9:da:44:ba:f6:ad:38:4f:fa:e5:6a:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Feb  4 18:08:12 2025 GMT
            Not After : Feb  3 18:13:12 2026 GMT
        Subject: CN=267BE3E51B66FF4A5418F875DA2D3244B05E903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:43:17:5d:2f:31:0a:62:a3:48:39:7c:ca:
                    c2:a2:49:7f:f0:df:92:13:63:1e:31:5f:cd:62:7c:
                    da:4e:67:9a:d3:d2:bf:62:d6:db:2f:63:5c:40:da:
                    c6:4c:33:32:05:4a:59:bb:11:7e:c4:62:6c:98:b8:
                    8c:1b:a7:f1:17:2b:27:9d:80:bd:d4:29:80:87:a2:
                    da:6a:a2:74:66:53:4a:9a:f0:43:9a:66:ab:19:9c:
                    fb:66:6b:1b:4e:fd:c2:8c:f9:13:73:ae:fc:76:50:
                    fd:1e:07:6d:d2:5d:3c:7d:ce:2f:1d:55:14:e6:75:
                    ab:d0:2c:df:70:0f:c4:a4:39:79:3e:92:10:af:96:
                    09:03:ee:83:87:e3:b6:27:0d:d2:71:e0:3b:d9:24:
                    75:0b:2b:56:ad:59:ac:10:01:e0:0d:02:6d:18:48:
                    a4:5f:6a:be:8e:2a:63:24:82:62:8a:79:74:44:f6:
                    3d:90:0d:a4:2c:d0:b3:22:75:7d:ed:3a:0e:17:23:
                    37:2f:eb:31:ea:99:fd:3c:00:52:d2:8b:d0:4a:ae:
                    f8:24:79:e8:5a:aa:45:2b:d8:82:2d:f1:8c:f1:ef:
                    fc:f8:de:c8:1f:59:5a:9b:dc:b8:06:54:a6:7b:6e:
                    5b:49:e5:84:ec:03:e6:35:15:5d:1d:4d:d3:d2:30:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:E3:E5:1B:66:FF:4A:54:18:F8:75:DA:2D:32:44:B0:5E:90:3C
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233382e302f32342d3234203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:83:09:3c:43:0b:04:9b:97:9b:1c:06:f6:18:4a:51:cc:
         1a:af:43:fa:a3:11:44:82:3e:12:80:03:f9:fb:70:f1:c8:41:
         4a:db:eb:44:fd:0b:83:4d:5f:60:10:1c:77:75:ec:5c:01:9d:
         39:88:71:a8:b7:39:16:02:26:de:93:22:24:e9:9c:cf:74:c7:
         3b:94:95:25:68:15:f9:40:22:a8:6b:a0:3e:5e:96:25:d9:aa:
         07:72:c2:7a:3f:8e:a9:d5:bf:12:da:94:7a:0f:e1:b5:50:31:
         a7:4e:e3:05:8f:1c:89:08:bd:98:30:07:f6:32:1f:2a:d1:46:
         a5:e2:5e:6b:e4:2b:d5:91:71:5f:73:d1:b9:3d:1a:76:bc:6c:
         c0:e6:c4:04:23:8e:12:8c:37:e2:8b:9d:aa:71:85:61:50:02:
         d9:b2:7a:1a:4c:9b:7b:7f:6e:34:57:91:f2:d5:1b:7a:de:c7:
         c7:e3:7e:80:79:fa:c4:42:b9:bb:06:50:73:81:92:16:78:41:
         f5:31:96:d0:8e:25:51:b1:03:8f:76:a0:ff:f2:8f:79:d0:c9:
         ac:b1:fe:37:48:6b:6d:3a:b7:36:c6:28:48:8c:1d:37:7f:a7:
         e0:32:7b:2a:1e:73:fe:50:13:16:8c:f0:4f:fe:a5:49:c3:f4:
         14:fb:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:16 2025 by rpki-client