Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e33342e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          m/I9ilCE0ovGcUM2nKfiUbsIaAISVr7t8lNMn6lkvoU=
Subject key identifier:   02:B4:44:2D:60:80:06:93:00:5A:E2:5D:D6:7B:EB:28:3E:05:50:D8
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2D39189C29CA65BB522ACA559D11C129AFF75F0D
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa
Signing time:             Fri 14 Mar 2025 02:10:00 +0000
ROA not before:           Fri 14 Mar 2025 02:05:00 +0000
ROA not after:            Fri 13 Mar 2026 02:10:00 +0000
asID:                     267797
IP address blocks:        165.98.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:39:18:9c:29:ca:65:bb:52:2a:ca:55:9d:11:c1:29:af:f7:5f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 14 02:05:00 2025 GMT
            Not After : Mar 13 02:10:00 2026 GMT
        Subject: CN=02B4442D60800693005AE25DD67BEB283E0550D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:6b:07:d2:f1:70:bf:97:63:d7:d4:c0:20:
                    ac:b6:55:1e:a0:8c:45:10:e1:3c:20:23:7a:a2:9f:
                    c1:79:4d:8f:d3:06:03:bd:44:f1:08:f5:2f:81:54:
                    46:d7:76:6b:55:2d:61:de:05:04:55:45:3e:71:fe:
                    52:8e:83:a3:8e:88:cc:b2:36:2b:0f:95:62:c2:f8:
                    b9:15:88:52:cf:4b:92:5f:97:82:cc:80:cf:52:cc:
                    54:d0:1e:7e:d5:ea:50:68:07:7d:69:1c:6f:24:78:
                    a8:fa:91:a8:88:5a:72:47:46:f2:5c:fd:f7:8b:0c:
                    0a:c1:4a:ba:67:76:82:f5:70:de:47:48:75:98:0f:
                    26:a0:cd:f0:ef:ea:64:22:4b:d8:d8:f1:4e:a3:a9:
                    1c:c9:68:e6:68:53:c7:5d:b7:7e:fb:bc:bf:73:27:
                    c2:4c:24:7a:37:e7:a0:d3:ef:46:21:8c:c0:97:5d:
                    99:d0:bf:76:be:5d:4f:44:af:26:ba:f8:5c:57:00:
                    09:b3:89:de:6f:34:f3:42:d5:9d:11:85:66:55:10:
                    2a:fc:e8:c3:66:fb:16:b7:75:6b:df:bd:b0:b1:e1:
                    07:e6:33:5d:fc:76:06:bd:cb:c1:05:e7:af:66:d1:
                    73:62:9f:f5:d9:55:01:04:75:ba:e6:3f:3b:49:9c:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:44:2D:60:80:06:93:00:5A:E2:5D:D6:7B:EB:28:3E:05:50:D8
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:23:73:0d:67:5d:15:1a:c3:09:24:9c:99:42:ee:43:f7:1a:
         d7:4a:bf:a3:34:b8:8b:d7:66:4e:1a:e5:fb:14:5c:50:5b:ac:
         4c:75:5d:bf:28:ac:a8:56:55:6c:af:66:19:85:bb:bf:ce:a0:
         99:1e:c5:96:07:e9:11:f4:47:45:2f:48:eb:1e:8f:d5:a1:c2:
         2c:2f:df:4f:f0:8a:bf:58:2e:a3:9a:bf:7c:98:87:c2:7f:13:
         80:dd:9b:b2:04:1c:40:73:e0:91:8f:df:76:bd:e9:e9:d1:5a:
         c0:99:43:0b:61:7a:f1:a8:3f:61:17:05:db:35:ee:e1:15:32:
         06:3f:71:d1:d5:bf:70:77:df:a6:e1:8b:54:7c:e1:da:a4:8b:
         58:ab:20:31:41:3f:c6:02:31:a2:ea:8d:5c:61:55:48:56:7b:
         89:d1:ea:8e:8e:e1:8d:a8:0f:42:27:74:e7:b6:f9:b9:49:25:
         c7:6b:27:03:12:53:9e:0b:51:e0:2f:c1:ec:77:84:01:30:2a:
         2e:a7:d6:8b:64:44:fc:c0:a5:46:6f:8a:f6:c9:07:a9:68:f8:
         fb:e4:0f:fa:f1:a6:e9:bf:44:c7:92:be:ed:64:e1:9f:1c:c8:
         a7:d7:ee:37:6a:42:d2:95:4b:07:97:6e:5b:b8:23:05:fe:01:
         e5:ce:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:18 2025 by rpki-client