Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa
File:                     3230312e3136382e302e302f31362d3234203d3e203139333332.roa (raw, json)
Hash identifier:          aDVREVvOwsvSodMGpn6oA0+Bm/OMdLR4C0pqBy3mvg8=
Subject key identifier:   7D:A4:2C:70:E0:67:6C:D3:45:46:B2:DD:81:8E:B3:B9:26:9E:36:8B
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       02380381B7BAC40FA3CD0C6053D75E4426806F52
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa
Signing time:             Tue 04 Feb 2025 18:10:52 +0000
ROA not before:           Tue 04 Feb 2025 18:05:52 +0000
ROA not after:            Tue 03 Feb 2026 18:10:52 +0000
asID:                     19332
IP address blocks:        201.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:03:81:b7:ba:c4:0f:a3:cd:0c:60:53:d7:5e:44:26:80:6f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Feb  4 18:05:52 2025 GMT
            Not After : Feb  3 18:10:52 2026 GMT
        Subject: CN=7DA42C70E0676CD34546B2DD818EB3B9269E368B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:0f:64:11:05:8c:86:87:eb:a0:e9:d6:0b:
                    78:63:60:1a:74:68:85:0a:12:75:21:ba:7b:55:89:
                    06:50:7b:89:93:49:97:db:ec:a6:aa:b2:d8:cb:3f:
                    46:45:59:a6:42:54:9d:71:8d:c5:67:7d:aa:44:f0:
                    d2:46:a4:62:ee:23:aa:56:64:cb:a4:cc:68:eb:05:
                    8e:17:be:5e:45:0e:f7:15:fc:e7:31:e3:56:07:16:
                    76:41:1e:e1:1a:f6:32:b0:6d:45:2f:48:52:18:19:
                    54:4b:49:49:c1:7a:56:f3:98:69:0a:93:5f:f4:3c:
                    5b:57:b7:6b:67:99:82:ca:fa:ab:84:1f:93:97:d9:
                    42:41:f8:12:32:db:af:ec:66:a8:aa:ad:dd:5d:dc:
                    a6:e7:54:3f:72:38:68:af:ac:56:5f:dd:4a:f3:81:
                    d8:c7:1b:99:41:1e:3d:d1:e9:d4:d7:04:b4:90:4d:
                    4c:96:99:90:c9:b5:5b:29:15:6b:d1:19:42:16:e0:
                    21:bd:86:55:8c:54:23:42:b6:e4:9d:07:4b:52:45:
                    fc:92:63:4d:07:0d:cf:3f:a8:97:f3:55:d6:77:c3:
                    e9:9e:af:c9:10:35:6d:d5:d4:e7:47:10:c1:93:7d:
                    3b:0a:d9:81:3d:a2:6d:1f:19:c5:cc:1e:84:62:2b:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:2C:70:E0:67:6C:D3:45:46:B2:DD:81:8E:B3:B9:26:9E:36:8B
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:77:f9:48:24:0f:eb:f2:bb:7c:95:25:4b:2a:07:98:87:b4:
         20:06:df:4c:a6:e6:e4:b1:60:37:40:a2:94:d3:71:84:bf:e6:
         ac:cb:23:7d:92:6d:25:6e:9a:65:97:f7:6d:56:d0:83:9a:6e:
         92:81:2e:5f:e9:87:c1:09:2c:9d:ea:2f:34:0a:1e:da:05:db:
         06:82:8b:d8:35:29:09:a8:12:f6:ed:37:81:32:2f:c6:49:85:
         21:bd:12:fe:3b:92:5d:74:81:fb:c6:bc:b7:db:95:13:fd:89:
         c1:f4:4e:94:d1:e3:b9:a6:5b:84:92:42:5b:9e:72:03:f4:78:
         6f:1d:fb:09:f1:f7:61:15:87:4d:f4:62:52:b4:59:0f:19:b8:
         7b:2d:d6:89:d6:66:1d:48:e2:be:a0:05:9e:38:cd:04:c1:2e:
         a7:a5:48:8e:4e:6e:ca:0d:ed:27:7e:72:fc:f0:82:39:25:16:
         5a:b8:c3:3a:cb:85:72:a2:93:85:09:5b:01:b7:52:1e:4a:1e:
         cf:ae:c1:26:70:4c:cf:8c:92:5b:9f:fa:a5:08:e9:6e:c5:2d:
         28:83:e8:38:c6:f5:72:43:df:fc:c4:46:ff:39:5b:99:0c:25:
         d4:09:a2:b2:44:aa:c0:6c:f0:d9:be:33:6e:1e:61:f1:34:5d:
         db:40:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:54 2025 by rpki-client