Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa
File:                     3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa (raw, json)
Hash identifier:          rH5pyknVc4fp40Dkz9nQFS+WH1Qxr7DxuWJxMjLyVqc=
Subject key identifier:   E0:0E:48:C8:AE:B8:31:DF:31:0C:02:44:40:66:0B:68:7E:A8:16:91
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       7C13D671B4584A613B05D67F2DB504AEEC1956FD
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa
Signing time:             Tue 04 Feb 2025 18:23:07 +0000
ROA not before:           Tue 04 Feb 2025 18:18:07 +0000
ROA not after:            Tue 03 Feb 2026 18:23:07 +0000
asID:                     262931
IP address blocks:        191.102.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:13:d6:71:b4:58:4a:61:3b:05:d6:7f:2d:b5:04:ae:ec:19:56:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Feb  4 18:18:07 2025 GMT
            Not After : Feb  3 18:23:07 2026 GMT
        Subject: CN=E00E48C8AEB831DF310C024440660B687EA81691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:5e:08:02:2c:75:ee:79:30:69:f8:d8:3e:
                    df:e2:10:e1:7b:f3:45:68:1b:1c:fe:87:5b:12:66:
                    b5:92:0d:07:d0:ee:ba:82:76:23:1d:f4:77:20:27:
                    52:48:bd:9f:d1:36:49:33:72:ee:93:6c:9f:d6:47:
                    68:a3:dd:61:79:67:9b:7f:33:1e:29:c8:0b:b6:0b:
                    af:54:1b:08:ca:c8:86:83:a7:45:a6:94:c9:f8:b0:
                    b4:8b:d2:50:ae:01:20:7a:c9:c3:04:0b:16:df:a1:
                    85:66:b4:bf:c6:f3:85:d9:8f:17:cc:cf:6c:4d:d9:
                    31:36:22:7b:67:ba:a4:ab:ae:00:f8:f2:a1:cf:87:
                    7f:ab:5c:20:60:d8:43:a9:b9:e3:bf:68:00:78:18:
                    57:fe:da:6c:75:1a:60:cc:1f:26:69:39:a6:f2:1b:
                    05:d9:d6:cf:3a:bf:ba:1e:d7:db:20:a6:7d:8b:70:
                    20:81:f0:b9:0b:19:3b:ba:a8:e7:90:4c:2a:a8:e4:
                    78:cd:34:e9:73:27:37:cc:0e:89:b5:ef:c5:3a:72:
                    b8:e3:44:70:32:3d:eb:b4:74:a6:cf:85:75:d1:8b:
                    fa:37:05:00:6d:03:93:0f:e7:50:9e:dc:22:1a:85:
                    cf:a7:5f:a3:28:90:c1:60:60:65:5c:2c:58:ef:65:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:48:C8:AE:B8:31:DF:31:0C:02:44:40:66:0B:68:7E:A8:16:91
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:41:09:87:42:3f:dd:47:5f:f4:0a:5f:40:79:9f:1e:b8:52:
         fb:2b:db:21:a0:40:fa:d0:d2:35:80:f4:a0:0b:bc:7d:c5:61:
         2b:4d:c2:87:c8:b7:2b:1d:71:ff:91:02:6a:a5:d3:cb:22:f1:
         61:ad:13:ba:75:94:43:20:ef:c3:5b:4d:93:ea:37:2f:2e:c9:
         79:a1:b0:90:a2:89:e7:67:75:d3:0b:96:8c:4a:71:66:6b:2a:
         b5:8b:53:97:41:f3:cd:55:23:7a:cd:4f:7c:ff:5a:16:b2:9d:
         77:a4:17:b5:fc:9e:d1:20:72:06:e1:60:28:78:f7:11:b9:91:
         36:08:6d:e2:ca:fb:7b:c2:bc:43:a7:2b:93:41:72:2d:d0:2d:
         4d:ad:a9:2a:15:2d:42:f2:3d:05:2d:50:24:48:ad:30:9a:36:
         f0:ee:75:81:19:3f:db:12:3c:51:f8:49:ea:85:ea:a0:d7:1b:
         6b:92:cc:8b:f3:cf:64:1f:53:4a:24:d9:26:74:0a:e8:db:b8:
         d2:0c:eb:77:72:dd:30:99:b2:aa:1e:a8:37:6c:87:1c:e8:a9:
         42:cb:43:4f:1d:8b:6d:75:3d:0a:c1:37:f9:f2:be:e1:b1:63:
         66:07:41:8b:a1:b0:d4:ce:52:20:ed:63:20:70:af:1e:d5:9e:
         eb:36:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:58 2025 by rpki-client