Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32342d3234203d3e20323635363838.roa
File:                     3133382e3131372e38342e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier:          fmB+IONf+PwGSpBTP0HCMOKumTZdS0udq1RHEza852Y=
Subject key identifier:   CD:F5:0D:34:90:8B:8B:6E:BF:4A:1C:29:A1:A5:E0:E9:25:6F:6B:7B
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       0352B9F5822EA309BA284968AB6E47CEB76BE4BE
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32342d3234203d3e20323635363838.roa
Signing time:             Fri 07 Mar 2025 16:11:25 +0000
ROA not before:           Fri 07 Mar 2025 16:06:25 +0000
ROA not after:            Fri 06 Mar 2026 16:11:25 +0000
asID:                     265688
IP address blocks:        138.117.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:b9:f5:82:2e:a3:09:ba:28:49:68:ab:6e:47:ce:b7:6b:e4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Mar  7 16:06:25 2025 GMT
            Not After : Mar  6 16:11:25 2026 GMT
        Subject: CN=CDF50D34908B8B6EBF4A1C29A1A5E0E9256F6B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:98:e5:c5:4f:e2:1d:db:7d:10:1b:de:88:
                    ad:cf:54:d1:0c:27:94:15:b0:ce:9e:32:e5:51:27:
                    63:8e:16:91:b7:7b:eb:e6:d0:b4:21:68:3d:e8:7a:
                    01:5f:4e:5a:b4:2b:94:d8:e2:1c:2c:49:c7:63:f6:
                    ee:42:e6:f6:b1:82:d2:94:cc:3b:07:ec:de:be:84:
                    b6:9e:cd:c2:50:91:42:3c:e6:be:cf:91:87:a8:a0:
                    a7:0b:47:a1:9d:0b:2f:57:71:6b:a3:fc:1c:b7:3d:
                    29:b1:c0:e9:b4:e5:9e:3b:b9:8e:91:59:df:f4:5f:
                    20:89:c1:a9:27:b4:95:4e:3d:14:8d:a4:6e:f5:30:
                    1f:03:81:ea:57:61:07:e0:85:56:04:c7:f5:d1:7d:
                    60:59:31:29:53:ec:29:cb:52:1f:81:17:7f:b5:6f:
                    ca:a8:85:ce:73:44:d5:aa:59:4c:7b:3b:e2:ac:c5:
                    0e:cd:7c:8f:b7:cf:24:23:ad:54:d2:18:c9:19:05:
                    c3:45:d8:e3:33:32:fa:ff:65:f2:61:ef:d0:76:77:
                    d9:76:bc:40:46:55:68:7b:1b:ba:c2:c8:72:e6:89:
                    4e:8e:10:3e:9c:ff:81:32:18:7a:96:8e:e5:ca:23:
                    d4:4e:b2:5a:5d:46:b9:0d:32:21:47:9a:aa:f8:58:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:0D:34:90:8B:8B:6E:BF:4A:1C:29:A1:A5:E0:E9:25:6F:6B:7B
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32342d3234203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:55:98:02:5c:23:94:b1:86:84:bf:0f:bc:a6:b1:2a:aa:01:
         c0:8d:b3:f4:1f:10:ba:f2:3a:13:35:27:3b:4c:9b:36:cc:02:
         b3:29:aa:d3:d7:70:f7:73:f2:c8:ef:be:3d:60:cc:c6:17:ab:
         ba:66:57:5a:0b:6a:bf:1b:ff:41:2b:11:34:f8:15:5d:89:a7:
         3d:a3:7d:d3:b2:ff:b3:27:f3:bc:f0:4f:fe:d6:82:59:47:b5:
         aa:51:bf:83:6d:f5:a8:af:84:22:1f:9e:00:c4:7f:7f:85:f4:
         81:4b:4f:90:14:94:9b:30:58:78:17:2f:ba:e8:3f:de:8e:ab:
         76:9a:4c:a2:0d:d1:b6:cd:62:de:7c:2a:0f:58:2b:05:a6:5d:
         96:17:76:a5:7f:28:57:9e:22:7c:42:db:7e:3f:51:89:88:2a:
         21:d6:17:66:5f:c4:96:11:ff:4b:e5:d7:de:84:39:a7:7d:97:
         46:93:e0:d4:0e:31:14:4b:fd:bf:14:9f:65:f5:cd:25:ad:9a:
         9b:8b:4a:41:05:1b:65:e8:71:99:52:e6:cc:65:39:b5:e5:c6:
         50:b6:92:12:9f:7a:c3:37:a5:a4:45:b1:9c:1f:41:f3:a5:97:
         3c:45:9c:56:fc:86:4a:0b:bd:76:ad:e6:1c:09:cf:72:8c:2c:
         7c:4e:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:03 2025 by rpki-client