Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa
File:                     AS263733.roa (raw, json)
Hash identifier:          8YI65Y6Gj+91PKGgtaajnM3+sg2PTErVK3M9Wpnc4lc=
Subject key identifier:   E0:2C:E0:D8:AD:CA:99:3A:D0:19:DB:7A:12:44:93:4A:46:C5:5F:1E
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       5741CF5C83C61C0538D8F36B0C6B6586B8F9D271
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa
Signing time:             Tue 04 Feb 2025 18:02:40 +0000
ROA not before:           Tue 04 Feb 2025 17:57:40 +0000
ROA not after:            Tue 03 Feb 2026 18:02:40 +0000
asID:                     263733
IP address blocks:        200.46.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:41:cf:5c:83:c6:1c:05:38:d8:f3:6b:0c:6b:65:86:b8:f9:d2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:40 2025 GMT
            Not After : Feb  3 18:02:40 2026 GMT
        Subject: CN=E02CE0D8ADCA993AD019DB7A1244934A46C55F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:5c:29:a4:e1:aa:56:f5:6c:4b:7e:8a:75:
                    17:ff:e7:52:ee:b7:d6:ed:f1:07:9d:55:14:33:3d:
                    8f:92:f5:19:d1:6c:ee:a9:2f:05:75:1a:52:7d:0e:
                    f4:d8:80:78:ff:fd:5a:f0:40:4b:60:68:2c:85:5e:
                    a3:b8:ef:60:49:50:86:da:ef:3c:94:c5:3d:18:28:
                    b2:32:67:b1:3a:47:31:66:09:17:89:9a:5a:ac:f3:
                    ee:e1:de:47:97:a1:a6:9c:65:08:5a:98:49:c5:6e:
                    69:f5:87:55:03:f8:4b:73:f9:51:1e:06:74:c2:11:
                    b8:eb:7f:4c:2c:d2:b8:f5:d9:1a:0f:a7:1d:1c:04:
                    9c:92:90:9b:70:f1:bc:88:ce:4b:7a:69:fd:ce:59:
                    65:af:2d:97:99:66:ad:cf:4e:95:04:be:2f:a0:d8:
                    1f:03:ce:de:3f:8c:26:a5:88:8a:8e:e4:77:17:ef:
                    2e:ee:bf:9d:8b:d6:db:de:e3:10:ca:ca:4f:1d:e2:
                    bf:af:ea:ec:93:5b:95:b6:33:3b:73:53:29:c9:e9:
                    34:fe:b6:41:c6:e1:32:8b:55:f6:d2:dd:15:55:91:
                    0e:87:50:dd:23:60:c9:2a:17:1e:62:8f:5b:94:44:
                    a9:97:9e:3a:c5:63:36:0a:a3:15:c5:bc:e4:a9:30:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:E0:D8:AD:CA:99:3A:D0:19:DB:7A:12:44:93:4A:46:C5:5F:1E
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:c6:7c:77:78:f0:e9:43:b9:4c:00:b9:b2:3c:fc:60:9f:
         4a:42:6e:97:c8:03:5c:a4:68:1a:c4:3b:16:d3:2c:53:81:2f:
         7f:00:45:a1:93:d2:16:c6:09:6a:c9:5e:3d:a5:7c:41:38:fe:
         32:dc:ce:b2:10:90:9b:58:58:82:70:0f:13:4d:f0:04:d1:bb:
         9d:7d:b3:5a:78:08:0e:45:65:52:4a:27:68:7d:d6:4d:28:b8:
         8b:1a:a3:42:1c:4f:02:3f:94:54:be:3f:3b:97:e2:58:0d:61:
         09:84:b3:f4:e1:95:2f:f3:95:5b:be:29:69:2d:bf:4b:e0:6c:
         60:13:dd:76:33:58:b5:73:0c:ef:a4:36:07:ce:21:e5:63:91:
         be:6c:91:bb:d6:7e:33:d3:07:9a:91:24:eb:c1:72:4f:a9:7b:
         81:5e:85:23:dc:69:c8:a2:09:98:88:fe:7f:38:ea:7e:15:78:
         96:f2:f5:bb:f0:fe:0a:eb:80:8b:48:f3:3c:e1:04:c6:ba:ba:
         8e:5c:14:96:a7:2f:73:b1:f0:02:8e:53:5b:4a:df:88:af:64:
         fd:12:a1:a5:8d:3a:e8:71:9f:06:e8:81:45:f7:2f:f1:bc:01:
         fe:6e:63:58:89:7d:20:2f:60:5d:29:44:fa:1e:3a:1a:5d:7f:
         5c:ce:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:34 2025 by rpki-client