Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          F4syjbRDOs6VkK/cGT13+9QtIn5CtHjhXdxl2uLQJUc=
Subject key identifier:   B5:41:B1:55:C3:BF:BA:AB:6A:FF:C9:43:20:08:9B:D2:6E:3D:7E:CB
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       64EECC0DFBB4C317D5750A316ABABEE46CFF6DA0
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:52:41 +0000
ROA not before:           Tue 04 Feb 2025 18:47:41 +0000
ROA not after:            Tue 03 Feb 2026 18:52:41 +0000
asID:                     265615
IP address blocks:        201.163.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ee:cc:0d:fb:b4:c3:17:d5:75:0a:31:6a:ba:be:e4:6c:ff:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:41 2025 GMT
            Not After : Feb  3 18:52:41 2026 GMT
        Subject: CN=B541B155C3BFBAAB6AFFC94320089BD26E3D7ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:10:0b:09:ec:ce:96:42:93:6f:83:23:a1:
                    05:a8:f7:a4:14:8e:3e:09:12:2d:d0:08:f4:01:8a:
                    90:33:a6:4b:09:0b:0a:7c:3d:a8:1b:1a:fe:73:a4:
                    e6:b4:38:74:1a:c3:41:14:a6:99:32:14:fe:02:60:
                    98:4e:84:07:19:4b:c5:89:07:d5:b3:94:d3:66:a5:
                    cc:56:80:5a:62:bd:84:6b:03:97:34:81:0b:2e:6c:
                    40:bd:7f:31:76:6e:cc:3f:e8:04:05:42:ee:71:19:
                    d4:a6:72:8f:23:41:e4:ef:a4:de:60:4c:db:b5:6a:
                    e6:4f:ab:3c:74:60:0e:e9:34:91:6c:7d:7d:ce:a4:
                    a5:a9:a3:7a:7e:45:37:70:77:ac:ce:64:60:b9:6c:
                    65:d4:13:24:e5:1e:43:f7:a7:99:66:c1:a4:dc:29:
                    a1:02:67:15:0b:45:27:db:b1:2c:53:37:cd:8d:1b:
                    2b:19:cb:88:bd:16:12:80:80:ee:d8:af:36:e8:fc:
                    a2:ab:a6:ae:c7:3c:a0:16:3e:78:75:94:05:9f:da:
                    a8:72:0e:9d:4f:3d:ee:72:be:6c:0c:a6:3c:35:79:
                    84:be:30:c9:9d:95:4e:d0:53:90:78:73:c8:44:af:
                    53:55:b5:36:82:8d:dd:7f:9e:3b:42:cf:b7:c7:85:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:41:B1:55:C3:BF:BA:AB:6A:FF:C9:43:20:08:9B:D2:6E:3D:7E:CB
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:14:1a:0f:d4:17:a5:cc:23:ee:24:dc:17:62:93:73:f7:02:
         ec:de:83:22:63:ae:a1:84:f2:d2:17:6f:c1:29:bb:0c:b6:0a:
         2c:cc:ab:ad:4d:97:61:72:5a:61:38:e9:39:d0:dd:96:ed:87:
         a6:24:3f:f2:8e:a0:f3:4d:12:7e:d2:b2:ed:23:22:f5:01:e9:
         fb:79:e3:50:09:7a:26:e0:1f:e0:af:8d:0f:e6:be:64:1a:8a:
         ca:64:7a:84:eb:a0:3f:a4:27:95:7d:fb:e1:04:cc:69:d3:7c:
         a3:49:ef:14:9b:de:ce:f7:9c:6f:ea:27:9b:2c:5d:bc:8d:02:
         87:a8:db:3d:02:99:ab:a2:72:fd:82:58:53:26:13:73:29:ef:
         2d:f1:ee:1a:25:54:41:4c:f5:fb:2b:80:0d:b7:36:29:23:16:
         e1:45:e5:e0:dd:65:60:fb:75:2f:23:bf:4b:4a:9b:b2:63:7d:
         0b:a2:d3:a7:85:14:0c:73:ef:c0:fb:29:19:2b:54:75:6c:17:
         37:6f:5d:ca:a1:63:da:3b:2b:a9:e5:8a:f8:4d:be:f1:70:fd:
         52:3e:82:0a:28:9b:a4:ae:f9:89:e5:cb:1b:fe:58:56:76:10:
         20:9c:7d:30:99:c0:1e:b1:6c:e9:f1:62:10:a5:56:3e:e9:bb:
         fa:af:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:07 2025 by rpki-client