Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa
File:                     3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa (raw, json)
Hash identifier:          0D1+0RSLUNQ8TYKpEUMrljZSNaMCLhJ6dj5j5mY/UAM=
Subject key identifier:   EE:2E:07:C3:79:2C:90:DB:D3:0F:AF:DB:E5:A4:D3:E5:DF:9A:1F:BB
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       1E888DBE0E812FE2C9F16B7D65194E491306FAFA
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa
Signing time:             Tue 04 Feb 2025 18:23:06 +0000
ROA not before:           Tue 04 Feb 2025 18:18:06 +0000
ROA not after:            Tue 03 Feb 2026 18:23:06 +0000
asID:                     262931
IP address blocks:        191.102.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:88:8d:be:0e:81:2f:e2:c9:f1:6b:7d:65:19:4e:49:13:06:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Feb  4 18:18:06 2025 GMT
            Not After : Feb  3 18:23:06 2026 GMT
        Subject: CN=EE2E07C3792C90DBD30FAFDBE5A4D3E5DF9A1FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:9b:04:ae:0b:8f:35:cd:a4:e1:fb:88:0b:
                    79:eb:b2:fd:5a:de:d7:44:86:03:6b:3a:52:11:27:
                    41:7e:7a:06:0f:8d:67:09:bd:5a:e4:39:cf:06:5b:
                    66:1c:bf:e4:06:57:52:61:b7:e4:4a:1f:66:67:f2:
                    d9:ee:dd:43:b1:24:81:42:4a:c0:7b:f5:f3:91:3e:
                    4c:6c:63:5b:4b:d0:80:25:28:34:7c:c9:0b:fe:ee:
                    f8:c2:34:89:6f:fc:d2:03:e2:12:ba:bf:35:b0:df:
                    c1:e0:40:11:ec:eb:05:2e:ef:c6:a4:2b:f3:61:10:
                    f3:e7:ff:e9:1c:23:63:91:9f:20:a7:7a:09:b0:a1:
                    9a:92:4b:68:d2:bc:da:b7:d1:fe:16:8d:98:d6:df:
                    f8:95:11:17:56:df:08:44:ba:05:4e:aa:70:11:f2:
                    ab:fd:b7:0d:76:1a:ac:62:d2:a7:b0:38:25:aa:4c:
                    a0:7f:cf:5c:7f:5d:21:87:2f:22:ad:78:a0:e4:03:
                    52:d0:53:d4:71:93:f3:40:fb:46:2d:59:c6:70:89:
                    ff:2c:b1:81:24:b8:32:7c:6b:a2:3e:4a:a7:45:ba:
                    1e:c4:7f:b5:61:51:cd:ec:44:58:13:79:83:3c:03:
                    a7:a7:2f:9c:81:da:54:49:a5:2e:08:08:4b:19:e2:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:07:C3:79:2C:90:DB:D3:0F:AF:DB:E5:A4:D3:E5:DF:9A:1F:BB
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:74:b5:80:9a:89:70:3b:a4:78:4c:b1:1e:04:28:58:05:
         8f:29:82:d9:8f:bb:ed:9d:89:c7:7b:a0:71:5b:f3:71:60:e4:
         fd:b2:8f:e2:d6:f7:95:7a:86:9b:e7:62:42:de:b9:28:0e:5b:
         79:87:ac:ac:db:67:6b:ce:df:90:d3:54:c8:f2:71:d7:13:56:
         f1:f2:bc:2d:ee:45:c0:f1:17:ed:b8:7a:33:3d:eb:ea:b0:1b:
         fd:59:6a:f4:53:27:84:ff:79:01:55:7a:48:6c:1c:18:cd:d0:
         0c:c2:4c:5a:05:88:ce:d6:47:42:55:da:9f:a4:c5:ad:19:a6:
         e4:e5:0e:c1:d2:11:f1:97:70:ab:db:f4:36:47:3d:28:dd:9e:
         c4:20:f0:e9:ac:1c:21:58:e3:8d:31:a6:7c:a7:11:2e:ac:ff:
         89:c3:bc:6e:87:67:93:15:f0:48:67:17:51:7c:61:fd:95:8e:
         e0:9d:29:d8:4c:e1:d7:3f:f1:40:51:4a:38:c3:ef:f7:45:7a:
         62:d6:0e:d8:00:a5:5e:91:03:c6:58:80:71:31:a6:e5:eb:98:
         df:34:63:3b:35:93:58:be:f0:43:f4:43:4a:93:51:76:ba:35:
         89:22:ee:22:4f:ff:fb:05:52:81:96:b7:fa:11:02:1d:40:91:
         c1:da:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:52 2025 by rpki-client