Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa
File:                     3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa (raw, json)
Hash identifier:          LD4N6qmIZVX5bigUgEoRVF8XbE0gMDa1AWOGsIIPfUY=
Subject key identifier:   A3:09:9B:86:D3:E5:24:2F:43:99:39:4E:EE:F8:E9:D4:39:15:37:F3
Certificate issuer:       /CN=A413277193F800AD8F3643B0DA690C9B51693FCC
Certificate serial:       1A6ACF67C5E13EF94C7009A7C21C74A129682607
Authority key identifier: A4:13:27:71:93:F8:00:AD:8F:36:43:B0:DA:69:0C:9B:51:69:3F:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A413277193F800AD8F3643B0DA690C9B51693FCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa
Signing time:             Tue 04 Feb 2025 18:26:38 +0000
ROA not before:           Tue 04 Feb 2025 18:21:38 +0000
ROA not after:            Tue 03 Feb 2026 18:26:38 +0000
asID:                     264622
IP address blocks:        143.137.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:cf:67:c5:e1:3e:f9:4c:70:09:a7:c2:1c:74:a1:29:68:26:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A413277193F800AD8F3643B0DA690C9B51693FCC
        Validity
            Not Before: Feb  4 18:21:38 2025 GMT
            Not After : Feb  3 18:26:38 2026 GMT
        Subject: CN=A3099B86D3E5242F4399394EEEF8E9D4391537F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:fd:ec:e8:bc:e8:93:8b:fd:32:36:1f:e0:
                    e0:53:af:1d:ef:ef:dd:36:17:8d:8e:a7:d4:a3:ba:
                    aa:18:72:a1:96:7e:d0:6d:d5:7f:fa:1d:66:e9:3e:
                    9f:70:a5:8d:e3:8c:69:11:1c:ee:a9:c0:1b:c3:48:
                    77:6b:6a:96:8f:54:db:7b:ed:82:79:70:02:b2:ac:
                    b2:3f:6c:93:b7:6e:43:f8:e9:b3:88:00:d7:96:03:
                    3e:68:df:a0:60:a4:c5:5d:69:69:4a:c3:51:fd:73:
                    5e:e4:d7:02:b2:6e:87:7b:eb:a0:ce:10:04:62:d2:
                    25:e1:97:55:ab:bf:d0:b1:54:a1:ec:ec:c6:64:03:
                    c5:dc:5d:01:58:0c:d1:66:9c:c0:c0:6c:97:42:f1:
                    76:51:9d:2a:c3:12:63:10:12:28:18:ee:ca:46:13:
                    81:96:8f:5a:8a:50:23:4e:7e:35:71:05:64:99:05:
                    9f:59:94:d7:16:3d:d1:11:cd:a6:af:41:1b:b5:9c:
                    e2:23:4e:1e:21:fb:82:c8:c1:f5:58:84:3d:f5:d9:
                    76:b5:60:03:5a:3c:c2:cf:cc:80:ee:41:33:b3:fb:
                    0e:44:bf:58:ea:1b:65:bb:43:3d:38:50:0d:30:c5:
                    d7:35:26:24:4b:24:2a:cc:fe:f3:52:44:8c:be:cc:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:9B:86:D3:E5:24:2F:43:99:39:4E:EE:F8:E9:D4:39:15:37:F3
            X509v3 Authority Key Identifier:
                keyid:A4:13:27:71:93:F8:00:AD:8F:36:43:B0:DA:69:0C:9B:51:69:3F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/A413277193F800AD8F3643B0DA690C9B51693FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A413277193F800AD8F3643B0DA690C9B51693FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:15:1e:30:cc:89:13:de:bc:92:b7:fe:22:19:c6:bb:21:
         2a:a6:46:96:bd:d4:92:88:fc:da:0a:2a:29:77:64:07:7a:60:
         42:fd:bf:3c:24:1c:2d:0f:93:95:a1:4a:53:4d:30:4e:32:19:
         b1:11:56:21:47:db:e7:a0:11:f9:5c:34:9e:45:56:8a:72:0a:
         b1:94:c0:cc:77:78:53:a7:ac:de:5e:02:38:dc:50:d5:96:d1:
         25:97:16:f7:23:0e:15:f3:21:36:44:59:05:85:82:bd:94:7a:
         cb:2b:2c:53:49:3d:f8:4b:a3:18:92:c2:f8:30:d9:59:73:47:
         68:77:53:75:4b:d0:10:c9:48:31:9c:cf:cb:f2:2b:5a:7a:2b:
         ea:98:45:a7:8f:d5:e9:dd:e5:8c:69:fc:df:a1:48:c5:77:97:
         54:53:da:56:33:cd:a1:81:3d:90:20:d2:20:af:10:3a:47:ef:
         36:d9:28:dd:db:81:81:f5:ea:14:49:4d:59:f2:d0:b4:22:04:
         40:51:35:e5:49:ff:5b:be:7b:b4:4d:44:6d:29:0b:d9:3c:80:
         23:88:0b:35:fd:7b:ca:07:d7:26:01:14:d8:bb:e7:13:b9:f6:
         d1:6f:f9:ca:d5:c9:89:42:05:8f:74:a2:6a:40:ce:a6:7e:a0:
         d2:20:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:34 2025 by rpki-client