Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa
File:                     3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          Vf/S7tyat1RMeoy2xZnrNE8Fa/sr1dj0zsm04+IkVHc=
Subject key identifier:   B9:9D:6D:CF:AF:A6:0C:3C:BE:0D:F0:8A:FA:61:D9:BC:A6:99:49:A4
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       3CFBDDCEF408A055F1A92D95C0EC7B0434850DFD
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 04 Feb 2025 18:50:03 +0000
ROA not before:           Tue 04 Feb 2025 18:45:03 +0000
ROA not after:            Tue 03 Feb 2026 18:50:03 +0000
asID:                     263725
IP address blocks:        168.228.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fb:dd:ce:f4:08:a0:55:f1:a9:2d:95:c0:ec:7b:04:34:85:0d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Feb  4 18:45:03 2025 GMT
            Not After : Feb  3 18:50:03 2026 GMT
        Subject: CN=B99D6DCFAFA60C3CBE0DF08AFA61D9BCA69949A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:1a:43:f9:52:89:44:5f:3f:da:a8:9a:9f:
                    7b:06:0b:cc:69:b3:5f:29:47:07:31:a0:9e:78:d0:
                    29:49:2a:41:bf:8b:3d:f4:58:5d:42:af:e4:22:18:
                    f9:f6:e2:ff:84:5f:96:53:da:2d:e2:00:16:9c:11:
                    d4:76:9b:58:74:06:fa:a1:61:fd:21:4c:b6:f4:2d:
                    3b:49:98:e0:a6:f7:35:40:fe:e2:5a:89:fb:5d:60:
                    4d:6e:ae:3f:c9:2e:ae:ae:7e:40:e4:81:9d:5b:61:
                    f9:3b:f3:db:4d:0e:db:c7:ef:c7:b9:bc:10:3a:62:
                    ac:e8:71:89:79:03:47:b0:72:f9:35:08:8c:d1:06:
                    e0:d1:18:dc:18:74:4f:88:7b:b2:11:d3:5a:a2:a6:
                    9e:fa:ae:89:9a:43:86:b3:00:71:90:50:54:eb:33:
                    d5:76:6f:20:60:18:58:60:3e:3e:a4:4f:4d:07:3b:
                    c8:6a:de:54:b7:2c:0d:ee:d5:7a:fc:fb:b0:35:8c:
                    9e:07:06:b0:05:fd:1b:d2:16:9f:bf:27:e2:0c:db:
                    5f:1a:1a:58:61:ed:4a:66:61:b9:82:b7:00:8b:33:
                    d7:0e:bd:e2:8f:ab:ae:ba:18:04:0d:60:07:4f:a6:
                    76:b5:9c:7a:28:f2:47:68:49:03:b0:1d:49:63:ca:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:6D:CF:AF:A6:0C:3C:BE:0D:F0:8A:FA:61:D9:BC:A6:99:49:A4
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:f0:f2:40:f3:8f:1b:cb:8b:ac:23:2e:46:53:c0:bf:4d:
         29:07:84:f7:bf:ab:d0:39:7d:e6:65:75:86:79:da:b4:bd:c5:
         49:36:23:0e:aa:5f:3e:03:0c:5d:07:03:28:af:32:ab:a6:2f:
         6c:47:25:24:9a:23:5b:9d:6b:2d:b7:35:0a:f5:db:79:9f:f7:
         03:60:ae:da:04:cb:ef:63:e7:5f:7b:ba:ce:bc:91:6c:7c:11:
         1b:09:f9:76:4d:42:a2:c0:08:c2:16:6d:98:d2:32:ba:99:ac:
         0e:c5:00:60:b3:0e:b2:29:07:6f:b9:1f:3a:f1:52:5d:d7:aa:
         4e:3d:e5:9f:9c:e7:87:c1:5f:fc:fd:37:0a:56:02:2b:32:9f:
         de:9f:06:2c:fa:9c:ba:a4:27:5b:c8:6e:f5:ea:1b:6c:c5:5b:
         9e:07:57:8a:83:39:ef:a5:35:67:30:e9:84:a5:b4:5e:45:c9:
         14:ae:e1:73:c6:a5:72:3a:66:a0:19:da:6a:48:08:16:37:f0:
         ef:c9:37:eb:33:6a:b3:78:06:f7:11:6e:d5:c7:d9:b3:d1:d3:
         47:7b:a5:7b:00:09:a9:77:8d:a0:3f:68:fa:db:2a:68:55:76:
         13:dc:a1:28:dd:12:8a:fd:8d:cc:da:74:85:a1:6a:1d:0c:e8:
         1b:44:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:26 2025 by rpki-client