Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134352e302f32342d3234203d3e203237373631.roa
File:                     3136352e39382e3134352e302f32342d3234203d3e203237373631.roa (raw, json)
Hash identifier:          ZgS5altcUgsYDh26QrApo0Zm+giVlkgjlmgQ452UtlQ=
Subject key identifier:   4C:54:B5:7A:55:D1:96:67:0E:93:C2:27:2D:EF:F2:08:A4:5C:19:29
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2001964B797D9B667A65AF9C084C9A0466DC15EA
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134352e302f32342d3234203d3e203237373631.roa
Signing time:             Fri 14 Mar 2025 17:25:56 +0000
ROA not before:           Fri 14 Mar 2025 17:20:56 +0000
ROA not after:            Fri 13 Mar 2026 17:25:56 +0000
asID:                     27761
IP address blocks:        165.98.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:01:96:4b:79:7d:9b:66:7a:65:af:9c:08:4c:9a:04:66:dc:15:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 14 17:20:56 2025 GMT
            Not After : Mar 13 17:25:56 2026 GMT
        Subject: CN=4C54B57A55D196670E93C2272DEFF208A45C1929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:00:5d:a3:83:f8:6a:be:f4:1f:75:fc:34:
                    fa:84:94:94:05:07:0c:f1:e1:0d:36:e6:0a:e4:99:
                    a4:2d:57:ae:4f:31:f1:9b:43:ad:21:18:dd:f9:6d:
                    40:53:fe:9c:6c:db:67:54:32:cf:ef:f9:d3:e1:d2:
                    6e:82:ed:d0:ca:6e:93:4f:0a:08:51:38:ea:92:68:
                    b1:0f:5f:56:12:d4:1e:91:e5:0a:02:46:fc:1b:64:
                    fd:82:ee:61:fd:88:b6:4d:dc:57:5d:81:55:88:cc:
                    c9:cc:49:f3:2a:39:c6:10:0c:fc:f4:40:2f:9d:6f:
                    5e:78:48:55:da:a4:2f:12:d5:5b:59:c5:13:d9:32:
                    bb:85:d3:2f:25:a1:9e:2a:6c:d5:73:ed:04:5e:b1:
                    13:99:b5:27:b9:3a:10:28:fb:87:e9:2c:e5:f7:64:
                    6c:58:3c:c6:0e:d0:37:6d:ff:ba:ce:65:e9:9e:0d:
                    d9:28:82:f1:2c:88:1b:91:70:73:8f:a7:14:90:44:
                    c5:30:45:70:f1:81:ce:76:13:14:0b:bc:ef:1d:18:
                    36:9a:98:08:59:44:27:0d:f1:b9:68:4c:32:e8:49:
                    5d:08:bd:4d:3e:7a:7b:5a:7b:c5:42:48:6c:9a:56:
                    60:fe:99:79:3f:33:1e:87:43:b4:7e:28:1e:3a:97:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:54:B5:7A:55:D1:96:67:0E:93:C2:27:2D:EF:F2:08:A4:5C:19:29
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134352e302f32342d3234203d3e203237373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:fd:a1:5e:39:ed:82:23:82:43:3f:7c:5a:f7:b5:59:e3:
         b0:10:80:36:70:48:82:ad:d5:e1:ab:36:80:e6:34:d1:10:75:
         40:c6:7d:2a:67:8f:f8:53:f2:e6:1e:ff:33:15:3b:85:d5:46:
         ce:10:5f:a8:9d:c8:8c:37:65:e8:e0:64:bd:17:cf:97:98:e6:
         80:74:f0:cd:fc:7a:6a:c5:b6:9d:d8:c5:74:f8:72:74:45:c1:
         87:be:57:d0:ac:5a:14:a3:c9:60:a8:3d:3d:6b:8d:ab:a5:c4:
         67:c8:11:d2:5b:bc:d0:17:be:1b:14:eb:39:ee:77:2b:f7:9e:
         a5:13:cf:14:ae:e6:7c:0e:43:7a:45:fd:90:61:61:ae:9a:a8:
         d2:1e:67:60:69:63:fd:bd:e8:08:2b:9a:99:62:e1:7a:88:74:
         1d:c3:b2:3e:d5:e4:3a:6b:1d:b6:e7:ec:3d:93:9e:de:71:1f:
         89:ce:bf:5c:cc:40:53:9c:17:4c:b1:66:23:0d:7e:7f:02:8a:
         de:70:86:49:b5:b5:37:a9:77:db:56:1c:88:1e:c7:dc:fb:9c:
         9a:85:81:b2:77:bb:15:0e:c0:e1:a3:5c:d0:ae:c2:6b:a0:3f:
         84:75:1e:a5:c9:66:a9:43:26:b1:80:13:90:0c:3e:93:45:7d:
         6b:87:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:14 2025 by rpki-client