Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3134332e3230382e35362e302f32322d3234203d3e203232383639.roa
File:                     3134332e3230382e35362e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          YkfxCabSXcwWAu87zM2i5oP8hm3wPHZuSe+7rYBGPwA=
Subject key identifier:   75:84:FA:38:18:9B:79:0B:A3:DB:6E:5B:8A:8E:0B:56:49:B6:B2:D1
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       6517BA4CDA76C874D7EFCBA1EFA86A9DB1F6E419
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3134332e3230382e35362e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 04 Feb 2025 18:24:03 +0000
ROA not before:           Tue 04 Feb 2025 18:19:03 +0000
ROA not after:            Tue 03 Feb 2026 18:24:03 +0000
asID:                     22869
IP address blocks:        143.208.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:17:ba:4c:da:76:c8:74:d7:ef:cb:a1:ef:a8:6a:9d:b1:f6:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Feb  4 18:19:03 2025 GMT
            Not After : Feb  3 18:24:03 2026 GMT
        Subject: CN=7584FA38189B790BA3DB6E5B8A8E0B5649B6B2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:45:0e:18:c5:a6:a4:f1:88:38:b9:59:4a:
                    16:37:d4:51:57:57:03:06:67:ae:03:29:80:a6:69:
                    c6:e9:19:d4:11:c3:4c:00:16:5a:4f:12:af:f4:cc:
                    07:8d:c2:f3:1f:5b:c7:14:e0:a2:3b:fe:fb:26:0f:
                    12:59:97:9e:a1:67:e6:6f:0a:79:0a:2c:7c:ed:20:
                    cc:5e:d4:5c:20:fd:d7:37:4f:35:b0:0a:45:ca:5f:
                    f0:66:9c:12:2c:77:03:21:ff:4c:4a:90:1e:c0:15:
                    6f:27:64:d5:a6:9b:0e:4f:d8:a1:8a:7d:df:bf:c5:
                    d0:91:86:e8:85:a5:74:8d:3f:ce:85:0e:2f:2f:56:
                    f6:03:e5:73:94:19:4d:b3:bd:ac:01:08:c2:55:89:
                    db:9d:ad:42:cf:89:1e:1c:34:da:3e:76:40:bd:bb:
                    f8:75:6e:f6:5d:ec:56:ff:50:fb:48:74:a6:a1:8a:
                    96:f3:c2:b6:fb:67:27:45:3d:37:74:cc:b4:94:98:
                    66:c2:ba:91:23:26:c1:88:f7:63:ec:2f:92:4c:35:
                    23:ae:bc:a4:66:c2:07:3e:9a:88:80:a4:0a:aa:1b:
                    c8:34:67:39:fb:75:d2:31:4d:2b:9c:12:f7:c8:72:
                    22:91:70:3f:06:d4:04:fe:9d:fa:0c:5c:cd:38:65:
                    be:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:FA:38:18:9B:79:0B:A3:DB:6E:5B:8A:8E:0B:56:49:B6:B2:D1
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3134332e3230382e35362e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:59:87:2b:04:82:f7:6c:c5:80:cc:4a:08:8b:61:0f:9a:a3:
         9a:82:91:63:d3:1f:2d:e0:26:cc:59:03:f4:92:37:68:aa:ac:
         ac:b4:01:8b:cb:1e:32:a0:c8:07:03:8c:80:3f:fe:17:2c:8c:
         fa:a7:4e:c4:14:2a:61:8b:a4:d6:b7:35:58:e9:cd:21:53:dc:
         3c:c8:df:a8:21:d3:fb:1f:92:5d:b1:79:65:eb:20:b1:02:53:
         88:5d:5f:59:b4:af:9e:3e:59:8f:cf:43:af:ff:31:51:d3:6b:
         b6:39:d2:0c:cb:2b:04:c9:da:cc:02:3e:5d:62:f8:5f:c4:ea:
         a0:1e:30:f1:c2:69:15:06:ab:2d:d7:5c:a5:6d:85:59:96:10:
         33:19:a4:4a:45:f7:a2:6c:58:01:a9:54:f3:8f:ac:62:1d:e8:
         01:4f:5e:86:45:af:e9:79:a2:8b:08:ae:04:2d:af:c7:a4:f0:
         31:5d:0e:9e:a8:ba:eb:0b:20:68:57:1d:17:68:81:cd:3e:9e:
         9b:e2:28:15:12:46:09:4a:00:92:82:79:75:12:78:ee:45:87:
         97:86:70:55:6b:4c:9f:df:05:67:a4:de:32:dc:8a:1c:8f:d5:
         30:81:dc:d9:4f:bb:65:f7:8d:43:fc:9e:7d:24:58:ec:ff:3f:
         43:82:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:57 2025 by rpki-client