Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa
File:                     3136372e3234392e32382e302f32332d3234203d3e203634313339.roa (raw, json)
Hash identifier:          tu1gzpEHqXp9dhczEi0hlpqDvUTobbtxxXBxUuZjo3A=
Subject key identifier:   98:8A:33:3E:65:7B:9E:61:1D:91:42:47:29:6A:C8:09:85:E2:7B:26
Certificate issuer:       /CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
Certificate serial:       0C32D5780E60F71F784E332957CC469AFDEC5453
Authority key identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa
Signing time:             Tue 04 Feb 2025 18:18:24 +0000
ROA not before:           Tue 04 Feb 2025 18:13:24 +0000
ROA not after:            Tue 03 Feb 2026 18:18:24 +0000
asID:                     64139
IP address blocks:        167.249.28.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:32:d5:78:0e:60:f7:1f:78:4e:33:29:57:cc:46:9a:fd:ec:54:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
        Validity
            Not Before: Feb  4 18:13:24 2025 GMT
            Not After : Feb  3 18:18:24 2026 GMT
        Subject: CN=988A333E657B9E611D914247296AC80985E27B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:f1:d6:98:8f:40:fc:7a:9f:43:91:79:5a:
                    50:b2:3f:85:f7:17:6a:46:14:74:fd:2f:f5:50:6b:
                    18:bb:0e:6c:89:fa:b1:67:ae:9a:3d:1f:44:13:50:
                    30:f8:3f:c2:42:ae:c8:4a:40:2a:14:e5:db:8f:a7:
                    51:ac:ef:64:4d:8e:0e:39:df:62:20:73:68:c1:7b:
                    bc:5e:4a:f0:7b:2b:e5:5e:d5:db:67:8f:a3:a3:61:
                    32:ce:17:5b:de:af:df:f0:7c:e0:84:f2:db:5d:9e:
                    12:eb:8b:11:1e:50:e7:31:f2:aa:85:df:1d:0e:8e:
                    00:6d:01:41:11:eb:9e:7b:d0:c4:cb:53:97:15:a0:
                    a1:3d:f1:ee:0f:f6:f5:41:13:cc:de:15:c3:9e:23:
                    1d:0e:29:f2:80:ed:ba:26:9c:58:85:1d:22:5f:1b:
                    94:6f:e2:55:ce:2b:71:f0:9b:fa:0b:01:d4:b7:dc:
                    f1:12:0f:f0:29:0b:1d:34:ac:d7:df:9a:44:18:6d:
                    1d:54:4e:20:35:68:a6:b4:c1:ee:6a:c0:5e:47:ca:
                    e3:0d:30:68:2c:be:83:60:2e:87:03:d9:4d:84:05:
                    66:3b:8f:b4:c0:31:b7:2d:a7:85:68:9a:61:13:d5:
                    1b:f1:24:d5:8e:d7:2f:83:02:08:b6:f8:83:1a:65:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:33:3E:65:7B:9E:61:1D:91:42:47:29:6A:C8:09:85:E2:7B:26
            X509v3 Authority Key Identifier:
                keyid:E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:5b:01:43:c4:39:0a:95:db:df:b7:48:aa:c1:49:ce:15:
         10:63:63:55:cf:6f:c8:43:f9:6c:7d:10:d8:f8:5f:80:bc:aa:
         4c:68:13:c0:5d:28:0a:50:f9:38:30:51:d5:1e:d4:33:52:a7:
         31:d8:2e:a1:28:a9:40:b3:f3:ce:fc:f5:93:c8:6b:02:66:0d:
         74:36:c6:d5:76:96:2e:cf:17:80:48:ed:e2:3b:4f:fd:4f:6f:
         7b:8f:49:57:70:b2:49:af:a3:15:9e:bf:0e:c9:96:2a:7a:ed:
         80:19:5a:bd:ab:a4:21:1c:fc:01:72:08:5b:cc:06:b2:22:ee:
         50:19:e4:98:8c:e5:12:2e:7c:fb:ae:61:3c:78:55:4f:00:09:
         43:be:59:2b:6d:96:d0:be:dd:ed:1d:a1:60:2d:14:be:14:b3:
         26:f5:f1:cd:a2:18:64:3a:1e:32:eb:b5:8b:b8:d6:25:d2:d6:
         a5:43:db:a0:f1:5c:d2:61:88:32:86:e1:56:ab:d0:c2:44:6b:
         a2:9c:b7:a9:01:d3:12:b5:03:92:9d:15:ae:df:51:ba:66:09:
         61:00:42:ce:23:34:02:01:8d:8d:e7:97:29:62:a2:16:af:a4:
         6b:ec:69:57:df:df:e9:d0:51:f7:37:d2:b2:46:95:59:4b:d3:
         ca:4f:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client