Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa
File:                     3139322e37352e342e302f32342d3234203d3e20323636383539.roa (raw, json)
Hash identifier:          JZ+Pp/CmSqgMwuqMRPDBYdq1H3rbZNI5dVq0edVlGnQ=
Subject key identifier:   8F:A7:05:81:89:A5:A9:31:DA:05:6B:B8:CD:9D:C9:7B:E7:94:17:D7
Certificate issuer:       /CN=6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6
Certificate serial:       5C90083F5BA5A30DF5A8B881C8D2A1F9032F1FC5
Authority key identifier: 6D:03:8F:54:D0:F5:25:0B:E4:6D:0A:6B:BD:77:EA:18:13:E7:EB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa
Signing time:             Tue 04 Feb 2025 18:00:03 +0000
ROA not before:           Tue 04 Feb 2025 17:55:03 +0000
ROA not after:            Tue 03 Feb 2026 18:00:03 +0000
asID:                     266859
IP address blocks:        192.75.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:90:08:3f:5b:a5:a3:0d:f5:a8:b8:81:c8:d2:a1:f9:03:2f:1f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6
        Validity
            Not Before: Feb  4 17:55:03 2025 GMT
            Not After : Feb  3 18:00:03 2026 GMT
        Subject: CN=8FA7058189A5A931DA056BB8CD9DC97BE79417D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:7f:d2:a6:65:70:9a:5c:67:55:3b:a3:30:
                    1e:c5:f9:72:dc:a1:e0:eb:98:a4:40:24:84:39:a5:
                    b6:3b:54:ab:2d:41:2a:26:ee:85:14:d8:7a:b4:fa:
                    a0:cd:42:d1:cc:e8:70:4a:c6:b8:87:b0:c7:8a:cc:
                    63:9b:d8:85:54:27:50:7d:63:5a:f8:cd:3b:6a:a4:
                    3d:d1:c0:bc:91:12:9d:a3:a6:39:ed:f4:ef:88:19:
                    0c:fd:4a:2b:0e:6b:52:ae:fb:ae:8f:d9:10:ca:37:
                    c5:09:b9:2c:75:c7:14:dc:8a:5a:91:b2:d0:10:cb:
                    17:74:65:78:d9:73:a6:8f:d4:d1:c0:8f:3f:05:d1:
                    d5:bd:01:14:e9:d3:8a:61:e7:10:6c:15:6f:75:53:
                    12:25:12:37:6d:a7:0e:1e:8c:84:17:51:61:17:f1:
                    80:c4:fd:c2:61:cc:92:28:5c:96:3c:28:88:c7:2c:
                    6a:07:cc:e0:9b:e8:e7:a6:85:62:55:c2:ee:71:ee:
                    6a:73:88:10:c4:97:1a:ca:7a:09:59:cf:af:28:aa:
                    d0:01:04:ce:cc:98:fb:d6:d1:bb:41:90:bc:a5:8c:
                    c9:75:3c:7d:df:43:f6:52:0a:16:57:7d:cc:52:96:
                    08:fd:9f:9e:01:0c:96:b1:7b:b9:87:51:43:f0:13:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:05:81:89:A5:A9:31:DA:05:6B:B8:CD:9D:C9:7B:E7:94:17:D7
            X509v3 Authority Key Identifier:
                keyid:6D:03:8F:54:D0:F5:25:0B:E4:6D:0A:6B:BD:77:EA:18:13:E7:EB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:39:33:24:f2:24:ae:08:93:1b:d5:f7:aa:a6:99:a1:ab:
         74:e0:91:a4:f1:4f:61:c6:04:ef:44:32:7f:b8:81:5f:62:c7:
         ce:d0:70:ad:53:ce:2f:07:5b:39:fd:08:5f:27:ab:de:75:60:
         40:f0:35:27:73:dd:93:0d:b5:6a:5a:54:06:57:98:7d:0d:a9:
         df:1b:70:a2:2a:f3:e5:38:a4:b3:24:5a:fc:31:4b:2e:33:2a:
         33:71:35:32:00:a7:82:7c:54:2f:3d:c6:d4:a7:90:2d:21:98:
         28:66:ac:2a:ca:cf:e2:55:11:9a:72:b2:e1:95:32:c4:94:bd:
         44:85:e2:dc:ea:2b:77:88:75:6c:22:e7:c0:d6:99:90:86:e1:
         9d:7a:de:4f:15:3b:d2:1b:69:cd:d2:24:0f:b1:39:3c:63:a1:
         c7:a2:df:34:72:0d:13:79:61:ed:81:54:35:73:64:21:de:47:
         77:c1:44:09:f0:eb:24:96:a9:9d:c4:3e:d1:72:31:39:bb:79:
         f0:ba:87:3e:93:50:49:f4:d1:94:b6:e1:2d:f1:cc:2e:c0:6b:
         45:80:32:01:be:eb:cd:61:cd:72:d1:35:7b:e0:b7:7e:13:60:
         7b:73:90:14:47:fb:b8:85:c4:79:52:f5:ce:e9:97:58:47:d6:
         8f:84:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:14 2025 by rpki-client