Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/3139322e3134312e3137362e302f32322d3234203d3e20323635373931.roa
File:                     3139322e3134312e3137362e302f32322d3234203d3e20323635373931.roa (raw, json)
Hash identifier:          hTCcYKvW2SB3hyXTxzOMEzanWvYVYIJETVAxRpMBeR4=
Subject key identifier:   8B:96:60:86:DD:B4:10:79:2A:95:49:D6:C7:D1:EF:20:24:A4:7B:71
Certificate issuer:       /CN=C6791FEEF06E36CD47B24F50BE75204A96766A57
Certificate serial:       1A5AE696B349025BFB37FE829386BBAE42DB8C81
Authority key identifier: C6:79:1F:EE:F0:6E:36:CD:47:B2:4F:50:BE:75:20:4A:96:76:6A:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/3139322e3134312e3137362e302f32322d3234203d3e20323635373931.roa
Signing time:             Tue 04 Feb 2025 18:00:27 +0000
ROA not before:           Tue 04 Feb 2025 17:55:27 +0000
ROA not after:            Tue 03 Feb 2026 18:00:27 +0000
asID:                     265791
IP address blocks:        192.141.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5a:e6:96:b3:49:02:5b:fb:37:fe:82:93:86:bb:ae:42:db:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6791FEEF06E36CD47B24F50BE75204A96766A57
        Validity
            Not Before: Feb  4 17:55:27 2025 GMT
            Not After : Feb  3 18:00:27 2026 GMT
        Subject: CN=8B966086DDB410792A9549D6C7D1EF2024A47B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:b7:a0:45:00:0b:f0:90:c1:69:a8:11:31:
                    71:43:15:62:ed:c6:fa:b5:4f:df:2a:86:eb:93:0e:
                    79:ca:4c:ea:3f:da:4e:e4:5f:47:cc:c1:08:e4:7f:
                    a0:97:e5:91:fb:85:43:14:c0:66:91:12:0b:e2:20:
                    66:dd:b6:58:98:11:54:26:a0:e7:a6:b1:8d:90:13:
                    12:03:98:99:b2:81:00:7f:08:4b:84:60:7d:65:d5:
                    18:5a:be:2e:ab:39:a9:ab:6a:b9:9c:9d:0e:42:67:
                    64:df:c6:26:f6:65:fa:95:e5:f7:ef:d3:29:08:55:
                    80:3a:87:ed:5b:81:b4:74:2d:cb:40:85:4b:83:32:
                    7a:42:c1:ba:dd:e2:f2:d4:14:81:f0:92:43:06:f8:
                    d6:85:c2:bf:80:ac:90:2c:51:c9:49:b8:df:f1:96:
                    0c:47:d4:38:12:56:b2:47:3a:6e:9b:45:34:02:1e:
                    98:5c:d0:3b:70:4e:bb:67:d7:1b:68:dd:28:83:0e:
                    12:a2:f1:e3:44:7b:c9:96:95:d3:e2:d1:56:94:e5:
                    34:25:ce:b0:e0:61:69:65:2e:d9:d1:12:cb:fa:15:
                    fa:83:40:3e:31:21:1d:0a:7a:c9:e7:94:db:b1:84:
                    85:ae:a4:c8:d1:47:5d:f0:1d:41:de:0d:1a:5f:d9:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:60:86:DD:B4:10:79:2A:95:49:D6:C7:D1:EF:20:24:A4:7B:71
            X509v3 Authority Key Identifier:
                keyid:C6:79:1F:EE:F0:6E:36:CD:47:B2:4F:50:BE:75:20:4A:96:76:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/3139322e3134312e3137362e302f32322d3234203d3e20323635373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:6e:31:b6:be:81:f7:ce:5c:a1:04:b8:76:58:50:1c:e0:
         d3:8c:38:f1:42:05:22:c6:ea:ee:4b:9a:cd:98:d4:ef:9a:f9:
         b5:b3:cd:3b:8a:39:f0:0f:b3:7b:c8:9d:6e:df:de:dd:e8:33:
         cb:4f:f0:b4:0d:30:27:4f:4a:f5:50:b8:e3:3f:91:37:c9:6e:
         17:45:11:3b:e5:e3:db:21:c2:b2:6e:76:b1:7e:01:47:69:b8:
         ff:4d:64:6a:d6:59:86:96:9a:44:99:11:8b:55:e9:10:31:8b:
         4c:b8:65:27:25:4a:ef:90:ef:10:99:97:6d:a3:db:b6:c2:20:
         f0:de:13:b2:9e:d7:e3:5d:c3:eb:df:bd:20:b2:b7:6c:c4:be:
         70:2a:c6:26:6b:43:35:b8:bd:d1:d4:53:5f:89:dc:0b:d4:65:
         8d:f9:ff:d6:f1:40:99:e1:23:d3:77:d4:d1:11:0a:e5:55:2b:
         ed:b2:e5:28:6c:4d:b3:ab:ca:6d:72:2c:25:3e:ff:83:2d:7c:
         c9:a3:2c:b4:e2:b4:83:a1:6b:12:4f:27:13:e1:76:ce:3c:e7:
         6b:9b:55:93:c0:fb:c2:a5:77:07:67:ec:47:f9:be:d2:92:52:
         51:48:0c:af:28:97:ff:3f:5a:79:c4:d4:c5:bd:1e:41:d2:62:
         5c:18:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:26:17 2025 by rpki-client