Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133312e3130302e3134302e302f32322d3234203d3e203236363137.roa
File:                     3133312e3130302e3134302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          Hul2INwP7nuFK1CvuUpsRWTtZD4YCeKtlrLBdvxZ8Ig=
Subject key identifier:   5E:A3:49:16:C2:CB:A4:A2:6F:15:FC:99:3C:C9:DE:3B:18:6E:57:87
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       0D4F7758D21946F7A1C293B1F116D763A0E8BC61
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133312e3130302e3134302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:47:35 +0000
ROA not before:           Tue 04 Feb 2025 18:42:35 +0000
ROA not after:            Tue 03 Feb 2026 18:47:35 +0000
asID:                     26617
IP address blocks:        131.100.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:77:58:d2:19:46:f7:a1:c2:93:b1:f1:16:d7:63:a0:e8:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Feb  4 18:42:35 2025 GMT
            Not After : Feb  3 18:47:35 2026 GMT
        Subject: CN=5EA34916C2CBA4A26F15FC993CC9DE3B186E5787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:cd:3d:de:c4:48:b8:4b:d0:0c:dc:5b:53:
                    32:e1:9f:c7:66:18:aa:e5:b7:5f:5a:0a:4c:25:d5:
                    7b:db:1b:0f:10:7d:ad:d6:a5:3f:80:4e:2e:d2:78:
                    38:ca:10:bb:ac:ea:68:e8:c5:d6:d1:9d:be:20:61:
                    88:24:69:95:c9:18:3c:b2:b0:ee:ca:ad:42:85:66:
                    47:47:78:00:91:00:15:c1:ef:cc:e9:50:de:fa:59:
                    fb:35:54:70:9a:5e:e6:83:3c:a4:d2:61:44:f1:ea:
                    1e:30:63:25:cf:7a:bb:22:d5:dd:8c:78:6b:12:6f:
                    cf:d9:2a:2f:78:b3:d9:e8:8f:b8:90:de:8c:28:f2:
                    3e:d2:6e:63:0d:18:ad:7d:c4:a7:fc:0a:0a:03:7c:
                    6d:b2:ec:40:d6:f9:d2:21:69:65:e7:45:e4:46:1b:
                    72:73:70:5c:6d:4e:03:5b:a1:89:e3:f7:79:2b:98:
                    60:87:62:49:65:59:c9:d6:0d:9a:f6:1f:de:a8:b3:
                    82:b7:a1:cb:53:8d:3d:ce:c1:0b:6f:3e:7d:7a:89:
                    ab:ad:52:5d:c3:c4:f4:c7:c7:80:c0:80:f3:ab:7d:
                    27:b1:46:87:eb:45:d9:e7:e7:b7:e7:80:1b:cc:b6:
                    97:d9:88:8d:fa:59:f4:9f:22:90:5b:50:0a:42:61:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:49:16:C2:CB:A4:A2:6F:15:FC:99:3C:C9:DE:3B:18:6E:57:87
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133312e3130302e3134302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:16:62:30:1f:dd:93:c5:e6:78:dc:77:8e:88:8a:d3:8e:
         07:d2:84:e8:97:07:f2:52:25:a8:64:f6:c3:22:49:aa:27:bb:
         c4:9c:3d:76:d3:8a:01:b7:3d:73:d3:c3:80:85:43:f9:fc:40:
         b2:e2:a3:88:ef:b9:e0:75:87:2f:4c:dd:9c:a1:18:c0:98:3c:
         72:d3:f7:d7:90:aa:d4:3e:b7:c6:e2:64:54:bf:59:cc:02:be:
         bb:cb:30:f4:65:10:32:1e:0b:fa:5f:6b:94:f1:77:f3:3f:e1:
         88:2e:c0:6f:eb:54:e5:0c:ff:70:36:26:c3:32:eb:4d:62:9c:
         e3:67:1e:b5:e5:ac:c1:d0:3b:8b:85:50:7c:00:55:6a:6a:52:
         7f:4c:be:ef:53:e5:79:48:aa:71:de:55:da:d6:e4:c3:de:de:
         a3:25:96:d1:cb:be:31:47:14:c2:1c:71:43:76:e9:5a:79:60:
         c1:af:cd:32:dd:59:c4:42:25:7c:fa:24:37:53:27:79:f7:62:
         c4:05:cf:3c:14:18:30:eb:af:bb:63:19:8f:64:bb:55:8a:99:
         02:63:c2:c6:dc:64:91:95:6d:78:08:40:e4:98:65:e9:ed:f3:
         ae:d8:ec:dc:fe:61:5e:dd:14:a8:bb:73:a3:a6:7c:1b:55:8e:
         25:e7:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:50 2025 by rpki-client