Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa
File:                     3231362e3234312e332e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          00lVfCi9XlKVImn6e1zl+UBHNtnWm5wcqvcDlwVJRxE=
Subject key identifier:   4D:7F:41:0B:EA:91:01:EB:5C:A4:91:D2:C4:4C:F9:E1:73:31:FC:48
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4B84A8C3F08DB34BFF09196EB0EF53F53CA30823
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:23:52 +0000
ROA not before:           Tue 04 Feb 2025 18:18:52 +0000
ROA not after:            Tue 03 Feb 2026 18:23:52 +0000
asID:                     20015
IP address blocks:        216.241.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:84:a8:c3:f0:8d:b3:4b:ff:09:19:6e:b0:ef:53:f5:3c:a3:08:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:52 2025 GMT
            Not After : Feb  3 18:23:52 2026 GMT
        Subject: CN=4D7F410BEA9101EB5CA491D2C44CF9E17331FC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:11:f3:a0:92:68:22:e8:15:76:a7:60:35:
                    7b:46:bf:9d:ed:2e:c3:45:3f:94:b2:a9:28:b3:8d:
                    df:5e:ab:55:06:c1:34:f8:bb:aa:cc:d7:2d:48:b0:
                    2f:bf:95:9f:b6:92:c2:95:d1:da:e1:f4:62:49:a5:
                    62:36:73:62:c0:71:c7:23:76:b3:ea:5f:57:33:1f:
                    bb:48:ca:e4:74:d5:9e:f6:7f:18:37:65:9b:f8:dc:
                    fb:74:fe:f4:10:6c:cd:b2:46:46:35:c8:34:1b:12:
                    86:41:a8:71:3e:9f:70:50:1a:a3:44:12:5c:2b:a2:
                    d3:bc:cd:85:18:13:5d:6c:a5:66:3e:ad:92:2d:47:
                    28:39:b7:50:51:37:9b:97:d1:87:c1:a4:07:7e:dc:
                    93:87:e6:d1:f3:85:a1:8b:ed:a1:8a:73:5e:83:15:
                    d2:63:ed:7f:1e:e4:53:70:f3:f5:c3:29:a3:c8:41:
                    ac:1d:03:d0:3b:ea:0a:07:0f:ce:cf:3e:d9:82:af:
                    de:b6:db:3f:27:5b:ab:35:66:45:12:2c:c4:e7:de:
                    a6:0d:00:d2:7e:87:ee:3d:51:b8:79:9d:cb:cc:2a:
                    62:7d:ea:d2:91:10:b9:2d:87:5d:38:ac:fa:ca:f5:
                    fd:c9:54:56:a3:1b:95:30:92:99:e5:d0:a8:5e:19:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:41:0B:EA:91:01:EB:5C:A4:91:D2:C4:4C:F9:E1:73:31:FC:48
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:af:53:4c:0d:67:43:ae:c6:b4:56:a2:f4:71:7d:15:8e:
         16:25:11:f5:86:90:e6:ac:28:31:70:50:32:f1:5a:f0:ec:eb:
         fe:a6:c1:06:d3:18:97:76:a2:97:78:d8:6c:80:bc:d5:49:f9:
         42:e3:56:30:0d:fe:f4:00:03:2a:a8:e2:10:11:5b:08:ca:c1:
         a0:f6:3c:0b:e6:f2:9e:c6:56:d1:37:fc:83:f4:b5:27:8b:b7:
         69:ff:1d:ce:04:1c:98:8b:e9:d0:b5:66:2c:14:5b:da:6d:41:
         03:ec:ac:e9:c3:96:75:57:9e:e5:32:56:ab:e3:1c:bc:a0:5c:
         e9:cf:ad:31:b8:fe:e1:e0:3e:21:59:de:08:e4:2a:a8:d3:d9:
         5d:e9:da:03:4e:2c:8a:99:9d:65:11:0b:b4:1a:c1:8a:09:2c:
         8c:db:b8:8c:03:33:8c:7f:33:88:54:50:ec:25:84:57:7a:b8:
         80:02:53:87:12:e5:84:b5:4c:25:cf:7f:81:32:df:24:91:20:
         73:9c:48:c7:6d:9b:9f:73:b1:f2:e5:9f:0c:e7:70:0e:fd:6b:
         63:de:d3:51:57:0c:be:86:bb:c7:5a:77:0e:cd:9c:4c:4c:b5:
         47:99:5c:53:7e:6e:f6:4c:50:0b:0f:95:3a:11:7b:ae:51:9c:
         34:39:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:59 2025 by rpki-client