Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e382e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          R4SrrpaT9jq8yc6pUH4hPRedyJUkqvR1E94RRb6ef+Y=
Subject key identifier:   D0:B4:44:B0:E3:B7:A7:73:3D:96:15:84:E9:E8:CB:02:6B:EF:A7:2A
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       1C1ABAB75921603F3EEB30DDB799441315986671
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:38:26 +0000
ROA not before:           Tue 04 Feb 2025 18:33:26 +0000
ROA not after:            Tue 03 Feb 2026 18:38:26 +0000
asID:                     264836
IP address blocks:        192.141.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1a:ba:b7:59:21:60:3f:3e:eb:30:dd:b7:99:44:13:15:98:66:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Feb  4 18:33:26 2025 GMT
            Not After : Feb  3 18:38:26 2026 GMT
        Subject: CN=D0B444B0E3B7A7733D961584E9E8CB026BEFA72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:b3:32:36:99:8f:c4:f7:65:ef:77:01:06:
                    de:c2:9d:3c:97:45:21:ef:0f:cf:fc:3a:4b:c3:6b:
                    8e:7b:60:e6:8d:fa:68:e0:ca:08:9c:c5:b6:eb:bf:
                    42:74:4b:52:f8:d9:46:0a:49:6e:c3:c3:95:84:bd:
                    aa:92:e1:c6:90:a0:45:df:29:f8:e7:e8:5a:d9:69:
                    0b:09:ec:45:cc:8f:9d:e9:86:60:81:c2:b7:8b:96:
                    3b:de:80:ba:ee:04:dc:78:ef:1d:15:28:eb:e3:ad:
                    28:35:a7:0e:9e:91:07:91:dd:bf:20:cf:d4:db:88:
                    96:ae:a0:ec:c6:60:95:36:1e:57:99:c1:cd:f4:8c:
                    f0:c3:7e:82:58:b9:43:29:ef:74:52:5f:e7:a5:e1:
                    a0:6c:3e:cf:e9:e6:9e:bf:f5:81:7a:75:1f:9d:72:
                    c0:4e:ab:f0:9c:a8:c4:d6:8c:3a:05:96:3b:21:d9:
                    12:c2:0d:ad:7a:a1:42:3c:23:ec:91:70:12:00:9f:
                    2b:50:83:a4:a7:80:87:b3:43:05:84:b9:b2:40:d4:
                    1d:14:e4:c3:54:df:c2:18:ea:ed:28:83:89:81:c6:
                    ef:6d:1b:fa:c8:f4:0e:c0:cd:bf:12:09:79:5c:cd:
                    75:58:e7:aa:ac:f6:1b:48:0f:61:fe:6f:68:ad:1c:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B4:44:B0:E3:B7:A7:73:3D:96:15:84:E9:E8:CB:02:6B:EF:A7:2A
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:39:a4:3e:82:b4:be:61:3b:f4:29:31:83:52:0b:11:79:
         0e:d2:0d:1e:df:e3:43:14:09:e9:6e:c0:50:f1:ff:8d:8e:b1:
         2a:5b:1d:b3:52:f8:1a:fb:e5:21:6e:2c:34:0e:35:2f:e8:c2:
         31:a2:ff:5f:c2:2b:fc:64:73:bc:99:d3:7e:fa:3d:54:ef:88:
         87:82:8a:a1:39:1d:6a:9b:ba:c5:07:ee:bb:ce:9b:b6:4a:6f:
         d1:d0:21:a7:6b:29:43:e0:86:69:73:ad:62:d1:20:95:44:c4:
         c5:ce:06:28:98:3a:13:55:ae:15:2e:5f:9c:09:50:84:87:2b:
         57:01:7c:42:e4:76:ba:ac:4e:05:51:43:8e:f6:81:f2:50:65:
         d9:1c:ff:7a:88:f6:5c:06:c4:0a:84:e7:e0:bd:f5:0a:f2:0a:
         c9:fe:98:e8:82:9a:bd:49:0b:81:02:ae:b6:51:ae:62:5a:3c:
         9c:39:98:d1:b4:a9:12:2a:dc:9a:c6:1d:94:25:7c:b5:93:99:
         86:43:ca:d1:94:e6:95:9e:db:74:c5:ed:5e:d4:b4:99:94:7a:
         70:5e:70:0c:76:d8:62:d6:b5:30:6d:e5:e2:59:27:e8:99:f8:
         5b:39:79:57:e7:35:ab:dd:4b:73:11:f5:de:48:ea:d0:3e:9c:
         e7:03:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:32 2025 by rpki-client