Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e38312e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          ErjxyxYQ0Wfv5/qe2eRHg+V7bG6Qwc4XMLupza9t+OQ=
Subject key identifier:   A4:51:EA:64:CA:70:C4:AC:7D:83:8D:8E:0E:20:59:4F:41:D2:0B:3D
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       1D23945BD556B63DE4AE763E25AB7521F55DAB6F
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa
Signing time:             Wed 19 Mar 2025 21:25:00 +0000
ROA not before:           Wed 19 Mar 2025 21:20:00 +0000
ROA not after:            Wed 18 Mar 2026 21:25:00 +0000
asID:                     267797
IP address blocks:        165.98.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:23:94:5b:d5:56:b6:3d:e4:ae:76:3e:25:ab:75:21:f5:5d:ab:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 19 21:20:00 2025 GMT
            Not After : Mar 18 21:25:00 2026 GMT
        Subject: CN=A451EA64CA70C4AC7D838D8E0E20594F41D20B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:ce:47:30:21:50:dc:53:c4:75:d1:b8:9d:
                    0a:8a:ab:93:76:4f:d6:5b:33:5b:00:eb:e6:94:f9:
                    c6:e0:84:43:d4:20:ee:3a:6a:c8:72:14:92:f0:19:
                    56:27:57:fa:23:7f:d9:3f:60:48:69:1b:b7:01:8b:
                    81:77:59:2d:0c:40:d9:35:18:77:f9:50:34:7c:70:
                    f6:31:a8:83:0b:54:17:68:b7:7e:5e:46:43:2c:5f:
                    9c:1c:9b:4f:dc:08:05:73:53:3c:76:5a:e1:bb:18:
                    0b:ad:59:2f:17:8a:1d:22:ce:02:31:25:6d:32:d6:
                    68:d5:87:41:e9:eb:51:28:67:94:85:e7:11:4f:00:
                    3c:d7:49:ea:3d:9a:b9:8b:02:d9:13:34:d0:78:00:
                    14:60:b8:60:54:a9:54:1c:55:c5:29:f2:03:b6:aa:
                    e6:b5:50:ef:cf:20:4b:79:23:f8:66:44:b7:d9:b0:
                    3f:25:d6:e5:78:27:fe:b9:f8:c8:de:34:2e:02:c0:
                    78:80:e7:af:5a:6a:6f:34:1d:f0:c3:87:8c:cc:5a:
                    a2:1e:be:5c:df:59:9e:e6:c9:c3:4a:4e:ef:a5:79:
                    e0:e4:98:bf:49:70:84:94:4d:6e:13:26:76:93:eb:
                    34:c5:ca:75:e4:98:45:d3:01:77:62:97:d3:fe:18:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:51:EA:64:CA:70:C4:AC:7D:83:8D:8E:0E:20:59:4F:41:D2:0B:3D
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:26:7d:e6:58:db:1d:c1:9b:a8:0d:9e:0a:e6:db:e5:9a:ce:
         d8:96:93:f3:c1:0f:b3:8d:ec:81:40:cc:90:09:e1:81:cf:f8:
         f1:0e:a0:fd:3e:0b:75:96:e7:80:a0:27:a1:02:a5:fb:1f:48:
         b7:27:06:a8:15:6d:76:a0:60:21:cf:e8:8b:3c:eb:c4:f9:a7:
         02:d1:bc:c3:db:f6:08:d3:95:e4:23:90:04:d8:23:cb:17:19:
         a2:80:e7:c9:85:3f:f0:3d:11:c4:00:5a:ad:a9:85:da:a0:99:
         3d:e4:2c:1e:61:20:fc:b7:1a:d8:7c:86:4b:59:81:bf:f6:7f:
         50:e0:ec:b3:93:60:5c:a5:f7:8e:cc:7a:5b:a0:79:1e:66:45:
         c1:99:13:c7:3a:63:2f:d9:cf:ce:35:d6:55:74:bd:ce:5e:ef:
         e7:7e:c1:47:83:e7:3f:c7:c6:a2:80:13:54:75:44:d8:6f:56:
         69:e2:d4:ee:92:17:c8:d5:85:23:ab:f7:b1:86:4c:70:46:f1:
         0d:38:63:90:47:7f:2e:18:a7:8a:6a:d3:38:80:ac:37:1f:da:
         57:e4:8f:06:3a:49:7b:ec:cb:86:3a:4f:6d:a6:8d:9c:fd:fa:
         81:0d:15:89:80:fc:7e:64:f8:e5:09:88:ac:7a:45:3e:75:71:
         54:11:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:08 2025 by rpki-client