Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32342d3234203d3e20323636373437.roa
File:                     3133382e3132322e3230302e302f32342d3234203d3e20323636373437.roa (raw, json)
Hash identifier:          us63cVQLR8zRFwkyjyfXTFM46PXmH4uiCqE46DRUPoU=
Subject key identifier:   40:1D:80:60:22:D1:8D:EB:7F:57:96:15:B9:03:10:B5:13:DD:E3:27
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       18DA5C46A34B6EC24D4DAC495F674BA2CFE0968C
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32342d3234203d3e20323636373437.roa
Signing time:             Tue 04 Feb 2025 18:03:14 +0000
ROA not before:           Tue 04 Feb 2025 17:58:14 +0000
ROA not after:            Tue 03 Feb 2026 18:03:14 +0000
asID:                     266747
IP address blocks:        138.122.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:5c:46:a3:4b:6e:c2:4d:4d:ac:49:5f:67:4b:a2:cf:e0:96:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:14 2025 GMT
            Not After : Feb  3 18:03:14 2026 GMT
        Subject: CN=401D806022D18DEB7F579615B90310B513DDE327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:51:9d:3e:21:d9:6c:3a:82:fd:06:f2:ea:
                    c6:50:92:3c:0f:f8:e6:59:b7:d6:09:34:07:02:80:
                    82:61:6f:c8:b2:6d:1b:15:04:01:e7:d5:7c:c2:8a:
                    1c:f9:b3:57:2e:81:d1:70:da:d0:59:01:31:c7:a0:
                    80:6e:1b:45:e6:9e:12:8d:f9:a9:76:3f:0e:dc:e8:
                    33:4b:59:eb:e6:34:e9:37:18:97:6a:81:e7:4f:b0:
                    8c:2b:bf:5e:8f:f7:ec:17:1e:96:f0:34:fa:9f:86:
                    89:4a:f2:52:10:d4:a7:55:34:6e:08:eb:50:18:00:
                    0f:74:6f:f8:4a:fd:4f:f4:5f:a1:6a:46:6a:8a:22:
                    57:5f:ab:6c:21:5d:0e:17:64:26:6d:6c:52:bc:4d:
                    53:88:f4:7a:80:f9:5f:09:7d:d5:97:b2:16:58:78:
                    58:84:a6:07:ed:eb:61:00:5f:c0:e1:ce:2c:5d:0f:
                    a3:8d:91:bc:40:13:3f:f0:52:df:d8:d7:77:b7:eb:
                    4b:37:92:c3:b8:98:19:10:08:f9:9a:61:35:69:32:
                    d2:73:df:3b:87:88:63:98:9a:68:b8:d8:dd:bd:3b:
                    56:72:d9:22:59:07:97:c4:3f:db:1f:9d:60:12:24:
                    bd:09:34:47:8a:23:ef:e4:38:f9:61:10:97:cd:c3:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:80:60:22:D1:8D:EB:7F:57:96:15:B9:03:10:B5:13:DD:E3:27
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32342d3234203d3e20323636373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:54:e3:5f:a6:a4:61:f4:c9:08:b6:e6:bd:a1:34:8d:c8:8a:
         fc:58:0f:e8:23:5e:fb:2d:94:8d:ad:cf:26:e3:7a:45:60:87:
         42:ad:02:48:70:ab:09:13:14:94:9c:34:d5:12:6e:8e:f2:b3:
         da:a6:8f:b4:b7:f4:42:ec:d0:3d:2d:c2:ed:a9:50:10:eb:cf:
         4f:5e:09:54:d3:bd:7a:62:89:46:49:6c:5e:31:b2:0f:0c:95:
         71:a7:f9:bc:2a:9b:0b:c8:36:63:6e:d6:08:ea:43:a1:e5:c3:
         76:84:55:a2:03:f6:2c:68:bd:94:42:c2:2c:cc:35:e2:43:4a:
         74:db:be:4a:96:8f:ac:83:dc:36:d7:2c:f5:41:35:0f:f0:79:
         ce:22:6d:a0:8a:5b:52:80:2f:86:55:e4:2c:59:f0:da:c2:28:
         02:38:ad:fd:c2:ba:7d:3c:c6:13:62:27:e4:4d:e0:e1:d0:10:
         bd:60:95:33:ea:ec:b0:aa:7e:2c:69:b2:79:b8:69:53:80:0a:
         b4:bd:09:3d:fb:07:56:9b:94:fc:cb:38:9d:8e:8f:20:31:f8:
         9c:60:9f:4f:41:e1:42:53:9e:ae:9a:d3:33:70:13:b4:a9:0c:
         0d:69:19:94:32:97:d1:40:da:55:d0:43:b9:99:7f:9d:a6:db:
         69:61:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:01 2025 by rpki-client