Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e2036353033.roa
File:                     3230372e3234382e3232342e302f31392d3234203d3e2036353033.roa (raw, json)
Hash identifier:          QJHSlRYgjOILgmd3H9xPVTLKJkeqh0zb1YKe81vk5E8=
Subject key identifier:   B6:87:86:60:29:2D:7F:BF:15:0D:53:1C:DD:09:9C:C4:3A:CB:B3:74
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       0D133B8B5BD296A8BBEF846596F6869C2B0EA884
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:52:45 +0000
ROA not before:           Tue 04 Feb 2025 18:47:45 +0000
ROA not after:            Tue 03 Feb 2026 18:52:45 +0000
asID:                     6503
IP address blocks:        207.248.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:13:3b:8b:5b:d2:96:a8:bb:ef:84:65:96:f6:86:9c:2b:0e:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:45 2025 GMT
            Not After : Feb  3 18:52:45 2026 GMT
        Subject: CN=B6878660292D7FBF150D531CDD099CC43ACBB374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:16:23:42:42:4c:87:16:c5:59:7d:0f:ab:
                    11:30:54:9d:eb:ee:32:ae:a4:4e:56:86:21:1f:d8:
                    21:09:16:00:03:ea:e2:4e:68:14:33:69:27:20:7c:
                    42:ca:c5:0d:ec:ca:ff:d6:8b:8a:36:97:00:62:b9:
                    8c:33:ce:d6:6b:8b:c9:61:b8:05:86:d0:9b:9d:87:
                    b0:5a:b3:21:be:7d:04:72:3d:e0:5d:01:be:c1:6b:
                    55:85:6c:0b:0e:03:01:4d:de:05:99:e0:d4:b5:98:
                    95:68:ca:24:d4:25:13:d0:5e:70:07:26:8b:d8:e1:
                    65:97:1a:b7:20:1b:64:42:fb:67:9b:92:eb:3f:cf:
                    23:36:12:08:90:94:79:72:22:ea:1d:e8:86:ad:2b:
                    97:a6:0f:70:10:7b:60:97:76:ef:c4:f6:b7:bf:85:
                    08:ad:f0:89:f0:2b:49:a4:ef:c2:f3:f3:4a:cc:6c:
                    1a:50:45:63:9c:8e:3f:c7:ff:e9:97:61:56:61:69:
                    09:77:5a:c7:1f:22:fd:29:38:ad:ef:e7:a2:10:5e:
                    e4:e0:2b:4c:d6:41:21:ce:ae:16:47:02:f5:71:e6:
                    1c:9b:a7:74:07:97:a4:51:0e:a0:cd:ed:01:88:36:
                    38:3a:bb:92:0a:28:e2:b3:e9:24:2a:06:ae:1b:44:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:86:60:29:2D:7F:BF:15:0D:53:1C:DD:09:9C:C4:3A:CB:B3:74
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:9f:f0:62:ee:24:a4:27:71:31:2d:6c:06:ad:f7:75:da:
         3b:04:87:8d:08:ca:71:f3:6e:ea:4f:49:25:a9:6b:d5:01:e7:
         fc:fc:b4:51:1f:0c:03:eb:7b:ea:12:7c:52:43:ad:92:81:76:
         c5:02:81:17:7c:ee:22:82:c8:3c:b3:ef:ec:f6:d5:b2:7e:5d:
         c5:8a:8e:c3:1c:07:9c:6e:b5:a7:f7:9b:72:5f:e2:3e:04:4d:
         db:84:af:da:1c:8b:85:ff:3a:0d:83:8d:36:ab:5a:b9:14:a5:
         2d:e8:cd:54:fc:44:bf:0c:86:e6:4a:9d:69:e5:23:a3:38:fe:
         bd:39:06:26:2f:9c:2e:12:79:1a:e1:e7:a6:81:7a:43:b2:02:
         39:c8:d2:85:7f:e4:f5:0f:61:77:a6:6d:92:5f:a0:54:43:ac:
         b7:32:08:74:76:81:4b:39:93:70:84:24:48:0c:73:43:bd:e4:
         da:31:3e:fe:47:db:a0:bf:a7:2e:67:91:af:5f:d3:7d:27:39:
         51:28:48:d4:8d:56:50:85:14:9f:f6:b0:fb:18:a1:d1:be:e1:
         5b:d1:b3:00:bc:15:e6:52:9c:65:c2:9f:17:29:9f:0b:07:85:
         91:ec:34:1e:63:6f:f2:dd:d8:7a:db:81:8c:6d:83:21:dc:2d:
         83:41:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:02 2025 by rpki-client