Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
File:                     3136312e302e302e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          szdwIKMvcbdHcjPbDGJ3GB6fa/yNXlNEYrNWXeE0rJ8=
Subject key identifier:   F6:3E:83:C9:73:CF:8E:11:21:C2:76:9C:B5:52:F7:A5:54:57:46:2A
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       31E1ACAE791FE58D5206FE1D171D0889E64F68FE
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 04 Feb 2025 18:49:25 +0000
ROA not before:           Tue 04 Feb 2025 18:44:25 +0000
ROA not after:            Tue 03 Feb 2026 18:49:25 +0000
asID:                     263740
IP address blocks:        161.0.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:ac:ae:79:1f:e5:8d:52:06:fe:1d:17:1d:08:89:e6:4f:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Feb  4 18:44:25 2025 GMT
            Not After : Feb  3 18:49:25 2026 GMT
        Subject: CN=F63E83C973CF8E1121C2769CB552F7A55457462A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:b5:08:ba:43:39:b4:ed:72:31:f7:83:f1:
                    2e:e5:6b:08:a1:bb:14:07:ef:54:76:65:1e:71:b4:
                    3d:40:fa:2d:26:4f:b6:a3:80:24:6a:7d:12:b0:5e:
                    02:70:96:82:e5:79:d1:44:98:95:1e:fd:96:5b:df:
                    cd:a9:a2:de:5b:12:8e:c6:68:02:5e:68:da:ec:0f:
                    74:18:bf:5c:51:e6:f3:48:bb:26:9e:c6:81:78:3f:
                    09:0f:3f:24:e2:eb:5c:06:47:89:a4:b5:07:6a:a8:
                    f2:51:81:ca:e2:35:7f:49:6b:ac:17:22:63:cc:0c:
                    0d:8f:ea:60:9b:9f:2d:85:d4:6a:a9:92:fc:fa:ae:
                    22:51:9d:82:15:d8:ed:a6:cc:7e:ae:90:2f:fb:1a:
                    4f:69:ff:20:d0:12:80:ed:cc:57:53:e5:88:d4:a5:
                    86:39:37:b7:33:7b:9c:44:1a:03:28:3d:26:f8:3f:
                    f6:b4:6b:1c:17:7a:75:4c:b6:5e:d5:67:ca:58:2b:
                    d5:02:49:e1:8c:36:5d:0b:19:96:c3:b1:75:a8:6a:
                    05:d1:ac:40:18:a7:64:93:67:be:f2:e4:4d:8f:a9:
                    24:5b:10:d5:92:7c:b0:55:05:1b:b6:f3:cd:ae:e4:
                    80:21:8e:37:78:49:bd:d7:1e:0f:26:1c:15:18:b2:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:83:C9:73:CF:8E:11:21:C2:76:9C:B5:52:F7:A5:54:57:46:2A
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:21:34:df:e0:83:1e:f7:8b:e5:7b:cb:c7:48:f6:f2:9c:40:
         bd:24:68:37:11:91:b1:c2:f1:56:33:10:02:80:df:e5:a8:80:
         00:81:29:63:b7:74:21:c8:a7:04:51:d5:4d:41:0c:14:09:dd:
         17:48:3f:37:8b:01:e0:4d:96:5c:79:67:24:cf:f5:5c:7d:df:
         39:e3:52:ac:ae:bc:ac:3e:c8:0c:ee:a9:5e:19:dc:17:21:f7:
         17:53:65:c9:68:a3:da:22:2e:83:14:11:af:51:f2:c6:08:db:
         de:af:42:c3:08:8d:55:09:f0:11:b9:95:af:e2:dd:4d:62:a0:
         3d:24:ad:2e:ac:30:7b:ba:96:70:09:97:f9:f3:21:ee:a2:8a:
         21:27:b4:05:c2:f1:bd:f0:14:5d:b8:a3:37:e6:94:c8:28:d5:
         2a:16:16:fc:7b:da:ee:47:0e:bd:63:17:8c:a3:49:b9:22:78:
         4a:94:8e:c7:97:35:30:dd:88:df:bd:95:4b:e3:24:19:14:d4:
         a2:88:2b:da:9a:49:df:6d:23:ce:bd:65:2f:7e:40:f8:e2:a0:
         08:5a:25:e0:81:aa:ea:49:7e:b8:76:a9:e5:e3:fe:a8:3d:76:
         32:f6:f1:c8:2c:e6:b2:6d:c1:62:c0:b9:f4:1e:bf:fc:7a:dd:
         f3:68:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----