Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
File:                     3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          /yohd7Rc6urnzTxYM6Kjwqvgf2Rro9NHUYdr8D8Bh68=
Subject key identifier:   9B:E9:E4:AF:A4:62:28:42:86:82:22:83:44:9F:BB:FF:B2:C8:77:8D
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       5E385DE73403B86185750F2E9459A8C57CDC3694
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:44 +0000
ROA not before:           Tue 04 Feb 2025 18:47:44 +0000
ROA not after:            Tue 03 Feb 2026 18:52:44 +0000
asID:                     11172
IP address blocks:        192.207.204.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:38:5d:e7:34:03:b8:61:85:75:0f:2e:94:59:a8:c5:7c:dc:36:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:44 2025 GMT
            Not After : Feb  3 18:52:44 2026 GMT
        Subject: CN=9BE9E4AFA462284286822283449FBBFFB2C8778D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:9e:eb:cb:cb:0a:cd:5b:5b:20:9c:75:ed:
                    74:1e:f8:07:3f:7a:30:40:00:cb:54:92:77:eb:5b:
                    74:b2:be:cc:0a:71:6a:98:c5:4b:4f:df:e4:83:48:
                    d6:a1:69:b9:84:65:3d:db:3c:09:78:9a:f3:d4:cf:
                    19:de:03:00:c6:c4:de:09:c1:01:e1:02:b0:8c:9e:
                    22:fb:6c:ed:3c:c8:3c:ad:2e:7f:a4:45:12:b4:0e:
                    78:af:ab:65:6f:f5:68:d1:13:a6:f9:cd:bd:ba:2d:
                    76:94:20:d6:4b:7c:11:aa:f0:63:8a:77:d6:c0:f3:
                    9a:4d:a9:75:76:e4:7d:b3:32:81:b3:8a:b2:28:c0:
                    4b:27:68:31:51:8f:8b:bc:2f:9b:ad:66:e0:74:fc:
                    91:00:25:40:56:0e:13:ad:e5:39:ea:e6:13:02:8c:
                    c2:70:8b:c8:d5:9c:57:79:42:b0:e7:07:29:6d:77:
                    c1:e3:1d:23:53:20:cc:2e:de:74:68:66:41:ca:05:
                    0c:7b:2a:fc:a8:a3:28:68:40:25:fa:76:88:b0:ac:
                    27:86:eb:ed:3d:ce:36:84:f5:5d:8f:89:f0:60:1b:
                    68:9c:4e:a6:4d:83:89:05:9a:d6:5a:c5:ce:4e:3d:
                    56:94:9e:5d:33:86:ee:64:10:90:1f:3f:e0:67:13:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:E4:AF:A4:62:28:42:86:82:22:83:44:9F:BB:FF:B2:C8:77:8D
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:06:26:a9:fb:bf:22:13:29:be:8e:98:82:57:3a:80:40:
         87:81:ba:b3:d7:ce:fc:7f:e2:73:d5:29:94:bc:34:cf:11:fa:
         31:dc:58:64:47:af:a0:47:d5:db:46:e4:7f:98:77:75:f5:40:
         d5:05:01:f3:48:9c:39:e8:c6:68:bd:8f:33:96:3b:97:35:75:
         25:39:47:5b:a2:5c:ad:bd:9f:29:03:3f:53:af:f9:c6:1b:ee:
         3d:d6:39:12:7c:5b:fe:d5:45:38:e3:74:74:e2:50:a4:ad:9c:
         57:75:29:44:b4:ce:ab:7f:75:95:fd:74:95:3d:6c:ab:d2:28:
         d6:33:a4:67:42:41:e3:b8:73:e4:ae:15:8e:5a:ba:57:c2:ad:
         52:53:1f:27:5e:e5:96:d8:0d:4a:5f:74:a1:7f:80:06:96:09:
         26:58:34:60:aa:fa:90:17:a4:91:f3:4a:d3:13:86:f4:ec:f1:
         f4:c8:44:d9:65:6d:81:0c:a7:2f:01:5d:3e:3a:ff:c0:9a:17:
         fe:e9:7b:e6:cc:e3:99:ca:db:7e:bc:56:fb:02:7c:6d:38:03:
         1f:59:96:10:16:34:41:f5:ed:d4:ba:30:71:d4:3c:8b:03:17:
         36:c7:62:19:f0:cc:b3:e0:01:71:96:87:4f:71:4a:bc:32:3c:
         e2:3a:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:23:39 2025 by rpki-client