Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa
File:                     3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa (raw, json)
Hash identifier:          iLUCK8IX6JnQsJaQ4w3hm3r4EmTuNDxkdXcmqZp+qYU=
Subject key identifier:   A2:73:3E:21:4F:21:4D:F9:EE:1C:CF:82:DB:EE:2A:D2:BF:C0:2C:0C
Certificate issuer:       /CN=EFC95BAC1123D189B92EBD678C7CCE09083397C2
Certificate serial:       76141C790F23CC957C6739560209573196067D1D
Authority key identifier: EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa
Signing time:             Tue 14 Jan 2025 19:45:00 +0000
ROA not before:           Tue 14 Jan 2025 19:40:00 +0000
ROA not after:            Tue 13 Jan 2026 19:45:00 +0000
asID:                     267748
IP address blocks:        167.250.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:1c:79:0f:23:cc:95:7c:67:39:56:02:09:57:31:96:06:7d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC95BAC1123D189B92EBD678C7CCE09083397C2
        Validity
            Not Before: Jan 14 19:40:00 2025 GMT
            Not After : Jan 13 19:45:00 2026 GMT
        Subject: CN=A2733E214F214DF9EE1CCF82DBEE2AD2BFC02C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:b8:15:33:c7:d9:d4:7b:d7:26:d9:d6:f9:
                    10:3a:01:0d:ab:6a:23:2e:13:cc:c2:08:35:7d:16:
                    22:66:43:90:08:bd:89:26:2e:8b:ff:d9:5a:3f:2e:
                    1e:a5:da:37:39:d7:67:47:2e:81:ae:2f:0e:55:1a:
                    64:c2:a8:bb:29:80:8d:07:9a:34:66:d2:fe:b5:b0:
                    9e:a7:4d:e9:b5:a7:a6:ac:3e:e0:de:94:fe:66:0a:
                    47:6d:87:9e:3c:f6:3f:99:81:ef:8f:56:ad:e8:b7:
                    5f:b1:a3:b8:b1:55:5d:10:72:55:9c:83:50:6e:57:
                    0e:16:a6:ac:24:52:23:32:85:2d:c8:70:76:25:ba:
                    e6:15:38:e6:68:22:74:7f:27:26:a2:86:28:8d:40:
                    8b:05:f3:62:13:8a:32:6f:e3:bb:05:aa:9c:e9:2b:
                    d7:0f:02:81:c0:22:e6:f8:88:be:4d:25:43:fa:01:
                    6b:77:14:73:ce:ea:73:dc:54:f1:19:f2:8c:7a:f2:
                    ad:66:41:e1:6e:cb:1d:cb:e1:71:5a:09:7e:15:a8:
                    79:91:b4:fb:85:94:29:2c:2b:5e:ff:aa:61:cd:83:
                    0d:71:4b:72:84:06:ae:9e:c0:0c:38:dd:7d:c4:ba:
                    4b:87:83:5c:43:30:3f:b5:19:09:0f:96:e1:cf:b3:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:3E:21:4F:21:4D:F9:EE:1C:CF:82:DB:EE:2A:D2:BF:C0:2C:0C
            X509v3 Authority Key Identifier:
                keyid:EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:33:d6:8d:a8:c3:9c:32:fa:93:67:df:da:a8:14:2c:52:
         20:04:48:0c:23:5f:b1:d0:d7:63:bb:f5:a8:7a:8a:78:ff:7b:
         4d:aa:9a:df:eb:e2:b5:1b:ff:5b:0f:4d:e1:1e:b3:4b:79:2f:
         18:e2:55:60:fe:f0:79:a1:90:0f:4d:de:6b:cb:ec:40:98:a4:
         f6:52:ae:23:bb:de:c0:e6:6b:be:28:02:3d:52:59:e1:ed:91:
         87:ce:81:c2:45:8d:60:bc:61:50:50:11:da:be:89:ef:cb:dc:
         d6:34:bb:dc:c9:a3:ff:60:ba:99:f8:9e:06:dd:5c:e5:96:24:
         27:07:5b:e5:4d:8c:8b:d7:91:0e:b4:bf:df:9c:c0:e1:84:2d:
         2d:f2:b1:60:62:fa:6f:e0:4d:76:86:b8:7c:0a:c7:e6:a6:ea:
         b3:8a:82:8d:3d:b8:ec:72:3e:08:a6:f8:88:d4:62:6c:14:87:
         75:44:3a:13:75:4f:57:18:42:9e:92:e9:6b:5c:a6:45:34:f6:
         f7:7f:3f:8d:64:e3:43:27:6d:83:13:13:49:98:4d:64:06:1e:
         a3:d7:a9:4b:57:76:eb:aa:a1:10:f1:4c:1f:bb:77:9c:71:51:
         35:91:6a:ec:a0:d5:fb:c0:03:0a:c6:64:8b:e7:dc:90:b6:2b:
         f2:5b:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:20 2025 by rpki-client