Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e31322e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          F8NIu9XkZJ1ezYOJqhbTEtQvypqc7yizaf906Xa6zSA=
Subject key identifier:   B4:98:30:EE:36:04:A4:33:96:3E:75:E1:E0:E0:14:B2:F8:3A:11:5C
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       5D7E291E5808798F59DFB25A5950965C6F2693FC
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:21 +0000
ROA not before:           Tue 04 Feb 2025 18:26:21 +0000
ROA not after:            Tue 03 Feb 2026 18:31:21 +0000
asID:                     27866
IP address blocks:        201.217.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7e:29:1e:58:08:79:8f:59:df:b2:5a:59:50:96:5c:6f:26:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:21 2025 GMT
            Not After : Feb  3 18:31:21 2026 GMT
        Subject: CN=B49830EE3604A433963E75E1E0E014B2F83A115C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:f2:ee:d3:3d:fd:33:42:c8:aa:1d:44:44:
                    c6:e5:55:c6:f8:bd:17:33:8e:b4:5e:aa:44:e7:1f:
                    34:52:8e:2e:19:fe:1b:51:cd:da:a4:4f:a9:14:b0:
                    03:af:1f:9a:19:61:f1:44:fb:6e:49:2a:e4:ff:db:
                    db:68:2c:52:6e:3d:cb:b1:fe:1c:d2:c2:8e:d4:07:
                    c0:0d:ed:f3:fa:59:a2:4d:87:d0:85:5b:f4:96:99:
                    b6:0d:3f:df:af:a0:27:02:fa:51:09:af:df:1c:05:
                    7f:88:21:33:c8:f9:dd:75:5c:1c:b7:dd:03:a1:e2:
                    ac:98:66:2c:b2:38:a4:55:65:7a:17:f1:f7:e9:03:
                    15:8e:d1:28:60:56:80:7d:15:e3:bc:5d:5f:33:34:
                    0b:cd:62:72:62:be:00:2c:ab:50:77:9a:ff:fd:91:
                    d1:ac:78:f1:6e:eb:96:a0:ad:60:36:ad:12:91:e5:
                    ce:23:6a:db:97:c9:2a:5d:cf:69:54:b3:8f:4a:60:
                    b5:29:40:1b:6f:b7:19:e0:05:4a:9f:57:87:40:8a:
                    3d:c8:b3:5d:91:c7:4a:9b:b1:c3:71:5b:33:25:6f:
                    d2:b1:65:49:96:f4:10:9e:a7:4e:77:97:f4:53:0d:
                    1e:0f:fc:2d:7c:bd:6a:26:bb:21:6b:2c:ac:6f:e0:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:30:EE:36:04:A4:33:96:3E:75:E1:E0:E0:14:B2:F8:3A:11:5C
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:46:93:46:6b:c0:dd:69:3b:cc:14:9e:b8:ee:44:cb:ad:7a:
         61:17:41:58:10:0c:51:99:15:c2:0a:8f:83:9c:82:08:5b:18:
         05:b0:d9:09:da:77:75:34:18:4b:f6:9d:55:62:34:09:16:1e:
         d5:c2:29:f1:18:0f:1e:78:8e:c3:f9:92:b6:a5:83:63:99:fc:
         b5:e0:bc:08:08:8f:4e:d6:d0:13:41:32:5e:b5:19:94:fb:be:
         fc:90:ef:cd:06:cd:5d:c2:6f:0b:b3:b9:fe:af:b7:a7:85:c8:
         0d:50:53:e1:a1:70:e8:c4:0d:3b:cf:16:31:02:5f:ea:c7:31:
         f3:df:75:23:69:d2:c0:a1:4b:f3:e2:4b:22:e6:f1:03:b9:87:
         25:19:9d:4b:21:74:4a:32:8a:15:df:43:0a:94:2c:3a:9b:f4:
         7d:04:08:c5:0d:08:87:7a:6c:34:ab:65:30:c1:44:9b:e1:8f:
         86:6b:2e:59:ef:ff:eb:1a:42:42:69:5a:f0:5a:16:a3:7e:91:
         93:52:49:fa:84:33:14:50:51:71:9d:4b:0f:5b:e7:42:82:cc:
         0c:a5:65:59:83:76:78:73:79:87:d8:ae:36:99:8a:31:d8:8c:
         e5:0c:06:46:18:93:8b:f0:18:bc:bd:e6:f3:87:2c:9f:77:c5:
         fb:3a:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:54 2025 by rpki-client