Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa
File:                     3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa (raw, json)
Hash identifier:          1UkqDaRe6CnyIUn426gEiHgINd/PAOXtG0oVXwNb8ik=
Subject key identifier:   1E:88:C2:DA:E1:5E:F3:A7:93:86:16:6C:79:5F:3D:61:7D:9A:70:47
Certificate issuer:       /CN=6F2E85684756BECBED992F0B17433B71F691DBB2
Certificate serial:       1213BBFED85C845480155548465265ACDAA87B4D
Authority key identifier: 6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa
Signing time:             Fri 14 Mar 2025 21:11:53 +0000
ROA not before:           Fri 14 Mar 2025 21:06:53 +0000
ROA not after:            Fri 13 Mar 2026 21:11:53 +0000
asID:                     265770
IP address blocks:        164.163.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:13:bb:fe:d8:5c:84:54:80:15:55:48:46:52:65:ac:da:a8:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2E85684756BECBED992F0B17433B71F691DBB2
        Validity
            Not Before: Mar 14 21:06:53 2025 GMT
            Not After : Mar 13 21:11:53 2026 GMT
        Subject: CN=1E88C2DAE15EF3A79386166C795F3D617D9A7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:f7:54:c0:43:c7:0d:8b:39:84:4b:e3:2a:
                    39:df:b6:13:dc:1d:d7:08:da:e9:3e:ed:63:d5:54:
                    fd:4f:d4:f0:0b:9d:3f:e9:ff:e2:ab:e8:32:45:e3:
                    9a:0e:92:93:57:28:88:db:f1:68:86:96:1e:df:8e:
                    df:81:03:a0:00:44:75:09:b0:d8:fb:0a:94:c6:14:
                    c9:bb:00:23:53:3f:57:3a:c7:60:05:99:3b:06:1c:
                    d5:e5:9d:cd:2e:3b:19:95:40:35:d4:c2:45:a3:2f:
                    20:56:4e:71:be:f9:ef:22:d3:66:d8:b4:73:07:f3:
                    c2:9c:e0:1d:08:1a:13:32:e1:c7:3c:5e:2f:24:16:
                    a9:84:28:a2:49:99:79:73:01:02:66:b2:a0:94:f6:
                    60:a9:5b:48:2b:8b:41:76:5c:14:a4:a2:22:61:89:
                    39:58:52:f5:ba:a0:0c:78:06:b4:4a:51:95:96:4b:
                    93:4d:fb:69:c3:60:b6:dd:f4:48:ec:fb:38:95:37:
                    f7:23:ae:45:6b:59:3e:3b:21:37:aa:2e:1e:2f:82:
                    06:6f:c1:e3:01:b4:65:c6:12:c7:4a:2f:1b:4e:42:
                    0f:c1:f4:94:c1:39:2d:fd:91:2d:5a:c5:1a:e5:38:
                    6f:bd:89:a1:a6:88:7d:2b:9b:c7:8a:c5:76:94:1f:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:C2:DA:E1:5E:F3:A7:93:86:16:6C:79:5F:3D:61:7D:9A:70:47
            X509v3 Authority Key Identifier:
                keyid:6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:d9:fd:26:b1:8a:4a:41:ae:2a:4a:24:a1:d1:07:92:5b:
         46:26:93:12:23:38:03:d6:72:e8:7c:a7:98:2b:23:96:5a:d3:
         e9:ac:8b:4c:3a:1b:ab:c7:31:36:93:ae:cf:d1:1a:b3:08:46:
         65:30:14:ca:35:91:99:af:9e:85:b0:da:6e:b3:48:31:d7:51:
         78:f0:c7:51:81:d3:69:71:fd:ce:94:4d:68:8f:5c:4b:f3:71:
         4b:e5:fc:19:39:b3:c7:50:3c:3a:93:88:50:6b:a1:fc:c3:d7:
         c2:97:41:c8:de:92:4f:66:52:5d:ec:25:68:42:bb:84:32:31:
         62:de:70:44:b6:94:ce:a7:6d:ec:c7:8d:85:92:58:c2:5f:1e:
         a6:83:89:f9:2e:cc:32:d1:2b:38:d6:cc:fb:b2:a3:79:38:e2:
         ab:40:c6:0c:23:cc:96:1e:2e:45:4d:61:9c:e0:c6:24:ff:65:
         24:52:70:5c:90:be:23:83:93:eb:b9:c4:58:de:86:7f:4e:6e:
         39:73:75:72:52:c4:d5:49:10:e8:64:d9:1b:84:3f:57:3d:40:
         3a:ef:72:68:dc:63:3a:cc:81:bf:d9:c5:c0:cc:f1:83:e4:7c:
         35:a3:db:88:b9:a3:bd:e4:23:b4:48:cf:cc:d7:cb:9c:86:0c:
         b1:ef:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:26 2025 by rpki-client