Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e31302e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e31302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          VCGwNc6ZAz0McKkcF8vfDJLMoPowTa8b+pQBKIGB2mU=
Subject key identifier:   6E:72:96:57:F0:E8:A6:39:1B:BB:7F:74:C1:DE:B8:A0:80:5F:5E:64
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       09EA899A00EBDA3F874D48A3599F027512FA456C
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e31302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:38:24 +0000
ROA not before:           Tue 04 Feb 2025 18:33:24 +0000
ROA not after:            Tue 03 Feb 2026 18:38:24 +0000
asID:                     264836
IP address blocks:        192.141.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ea:89:9a:00:eb:da:3f:87:4d:48:a3:59:9f:02:75:12:fa:45:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Feb  4 18:33:24 2025 GMT
            Not After : Feb  3 18:38:24 2026 GMT
        Subject: CN=6E729657F0E8A6391BBB7F74C1DEB8A0805F5E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:f7:9f:86:39:16:3d:d0:f8:f1:56:c4:16:
                    a1:92:ef:ec:01:47:cb:a6:a7:d8:3c:a3:d8:17:b5:
                    5c:0a:58:56:60:b3:36:8a:42:13:38:9f:30:90:e5:
                    6d:77:3f:36:e7:71:15:c5:0b:78:75:a2:1a:87:23:
                    fb:73:a9:d0:1f:c6:3a:07:52:8c:55:a3:d9:b3:54:
                    f2:0b:f2:a1:6f:3c:8a:4e:94:80:b6:f3:8f:ce:3a:
                    cb:84:18:fc:b4:ff:4c:87:d9:c7:c4:90:9b:d4:e8:
                    24:d2:4e:58:c2:a0:6e:ab:05:87:c1:28:ee:2f:7a:
                    05:fc:1e:7c:9a:c9:90:04:4b:fc:fd:4c:05:94:ad:
                    02:71:01:66:35:d7:33:76:e5:bf:9d:3d:55:54:a0:
                    aa:1e:92:ce:b0:13:c9:12:e2:fe:e7:5a:e1:eb:3d:
                    3f:88:4c:7c:01:54:56:0f:e0:da:cd:00:20:55:ea:
                    db:e8:d9:bf:d3:66:b0:75:17:a2:06:f9:bf:9c:9a:
                    43:9f:33:66:19:22:3c:15:e9:31:c9:df:5a:de:1c:
                    e4:b8:48:b3:cf:d0:20:3d:29:3b:8f:d1:02:e4:6c:
                    86:38:09:a4:3d:05:2d:b5:f2:b8:b4:c3:75:d8:6e:
                    71:64:96:ee:b3:fc:68:dd:02:82:5e:24:c0:07:68:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:96:57:F0:E8:A6:39:1B:BB:7F:74:C1:DE:B8:A0:80:5F:5E:64
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e31302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:be:3e:8c:bf:32:c7:d9:d5:c8:46:e9:3e:4a:ed:28:dd:2d:
         2f:79:02:fc:81:e6:85:21:6e:46:06:d8:db:24:f0:a7:95:0b:
         46:b9:ff:10:d3:24:66:f1:52:4c:e1:4f:28:52:06:df:11:98:
         e1:37:b1:f3:00:d9:52:50:a5:01:3d:67:73:69:7c:32:b2:3b:
         06:a4:90:62:3d:19:24:bb:52:f5:91:b3:26:76:ce:a6:1d:b4:
         d7:57:6a:6e:9d:59:07:f4:48:f5:4e:3c:6a:d7:cc:73:e7:50:
         31:86:c4:12:12:ee:ce:8a:41:a2:88:72:01:f0:d9:94:d8:9b:
         50:61:8a:3b:3f:59:55:a3:55:38:0a:8c:73:8f:c5:28:39:bf:
         ad:2b:7c:5f:67:1f:c7:78:75:d6:de:13:9d:3a:8c:0c:a7:a0:
         f2:ab:03:96:1d:37:e1:b8:db:76:04:c4:77:33:a4:8f:33:05:
         78:33:89:bb:e4:8c:3e:ac:11:cc:64:51:26:b4:39:73:a1:64:
         ed:2a:0d:93:62:7f:37:83:2c:c1:6a:05:24:51:87:b8:27:d1:
         b3:0c:6e:7b:dd:ec:f2:6b:9a:a7:15:14:16:62:a6:81:0f:d0:
         9a:25:f3:45:eb:e4:40:18:c1:12:91:63:7e:63:f6:94:0f:5f:
         90:9e:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:32 2025 by rpki-client