Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa
File:                     3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa (raw, json)
Hash identifier:          hDl56HYVrWsIN7szCfssrv4Mr+AbI5jkoDYlUbp127g=
Subject key identifier:   93:CD:C9:8A:63:0F:5D:6A:D7:2D:C5:07:F3:73:56:19:7E:2C:23:65
Certificate issuer:       /CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
Certificate serial:       0D734392F958F0D024953DE8D0DA98D40F573F1B
Authority key identifier: C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa
Signing time:             Tue 04 Feb 2025 18:03:44 +0000
ROA not before:           Tue 04 Feb 2025 17:58:44 +0000
ROA not after:            Tue 03 Feb 2026 18:03:44 +0000
asID:                     265823
IP address blocks:        192.141.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:73:43:92:f9:58:f0:d0:24:95:3d:e8:d0:da:98:d4:0f:57:3f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
        Validity
            Not Before: Feb  4 17:58:44 2025 GMT
            Not After : Feb  3 18:03:44 2026 GMT
        Subject: CN=93CDC98A630F5D6AD72DC507F37356197E2C2365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:e0:11:41:6d:0b:9e:f7:d7:2c:37:22:a6:
                    21:08:49:19:2c:b2:83:8c:ac:95:96:3d:b3:fa:53:
                    01:86:bf:53:5c:41:ef:7e:b2:74:8d:35:19:2c:b6:
                    76:ab:14:e5:c3:79:f5:42:ee:3f:78:8b:97:e3:1e:
                    3e:9c:ba:2a:8d:ae:75:be:0a:b7:54:ee:26:c5:14:
                    95:d2:68:62:20:f0:74:a9:9d:dc:ac:01:a8:7a:19:
                    77:fa:53:7c:b3:f6:e5:65:81:ff:f7:25:bf:cc:46:
                    ef:87:86:ef:48:0c:bc:8c:96:e7:6e:7c:72:6c:f0:
                    f9:00:02:8e:14:9e:b9:c6:ce:d7:53:85:0b:7b:62:
                    a8:c7:c9:96:c6:2a:a5:16:54:1e:67:93:6c:7c:59:
                    30:6f:16:e3:2e:0f:66:83:a3:20:91:ac:d4:3d:23:
                    8b:19:d3:07:ad:68:01:d6:eb:76:f6:aa:6a:63:b2:
                    67:6b:23:cf:68:f2:35:55:71:ee:41:4c:df:e2:fc:
                    29:57:3a:b8:1a:b0:94:6f:55:cd:91:eb:f6:83:06:
                    8e:2c:2c:ea:a9:47:ad:1e:d8:20:01:f8:66:60:88:
                    1e:15:9e:44:13:2b:ca:0c:08:06:c8:bb:76:ee:49:
                    be:cd:a6:76:ec:c3:08:6f:1e:38:5a:2b:8d:3f:d3:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:C9:8A:63:0F:5D:6A:D7:2D:C5:07:F3:73:56:19:7E:2C:23:65
            X509v3 Authority Key Identifier:
                keyid:C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:27:e4:23:79:47:a8:2c:c3:0e:69:cd:9f:40:68:a4:81:
         94:c9:ea:eb:09:eb:96:73:9d:74:58:9f:4b:e7:d5:0c:04:c5:
         ce:b9:1c:6b:3c:80:98:7d:0f:3b:b3:52:b8:ca:dc:8d:9e:90:
         fe:06:89:e8:cd:f7:6c:73:d5:fd:5a:e5:1e:5a:4c:da:64:06:
         7d:44:6f:55:fa:01:da:bd:ce:de:99:e5:39:9c:96:27:8a:88:
         88:40:05:bf:f8:16:8e:4e:0e:95:2e:ae:ee:b1:a9:01:bf:b2:
         2e:0f:64:d0:ec:2b:30:bb:4d:d0:2f:1a:58:02:47:da:b0:b8:
         36:a5:d5:50:2c:dd:d7:3c:50:65:a2:7b:35:47:41:1a:46:c1:
         ba:6d:e2:92:50:d7:c6:5c:ef:42:98:3f:69:e3:3e:5a:c0:28:
         b6:69:03:e2:e7:5e:3a:8d:34:ef:65:30:02:3c:c4:a6:52:1f:
         b0:09:d7:6a:4f:15:ed:37:0e:d6:56:10:27:26:62:5b:8c:a2:
         0d:c2:a2:2f:3a:ce:6e:e1:bb:7e:ef:67:b6:00:7c:cd:fb:11:
         3b:3e:43:72:c2:8f:1a:31:2f:23:34:0e:40:9e:80:9e:3d:c7:
         7a:b6:35:41:cf:ab:8b:48:fc:23:c9:65:bd:e4:7e:ae:89:30:
         a1:df:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:46 2025 by rpki-client