Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa
File:                     3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          B2k9F2T0qxP1k3dNIhT0IcTaKs4Kh5DWHRvEhecy83k=
Subject key identifier:   2C:CC:B0:FE:1A:9D:08:DE:39:7F:8E:56:1C:69:5E:7C:D5:13:27:7D
Certificate issuer:       /CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Certificate serial:       25C6648AECAA7980B581CAEC3528B44F3BA40F07
Authority key identifier: 8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa
Signing time:             Tue 04 Feb 2025 19:59:07 +0000
ROA not before:           Tue 04 Feb 2025 19:54:07 +0000
ROA not after:            Tue 03 Feb 2026 19:59:07 +0000
asID:                     262256
IP address blocks:        192.140.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:64:8a:ec:aa:79:80:b5:81:ca:ec:35:28:b4:4f:3b:a4:0f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
        Validity
            Not Before: Feb  4 19:54:07 2025 GMT
            Not After : Feb  3 19:59:07 2026 GMT
        Subject: CN=2CCCB0FE1A9D08DE397F8E561C695E7CD513277D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:ec:e2:27:bd:87:e7:cb:ae:9b:47:93:24:
                    59:8e:89:cb:b0:df:c7:99:97:60:30:d3:c5:12:c2:
                    a9:6d:96:66:79:48:22:dd:c9:a9:80:fb:52:0a:b2:
                    ac:1e:c4:80:d7:09:e8:17:9f:2e:5b:0f:91:7d:2e:
                    0f:ef:4a:eb:45:59:85:03:5c:86:83:1b:6f:fb:e5:
                    10:7b:b7:7e:4e:59:e8:86:fe:a6:51:c6:dd:56:c4:
                    f4:39:37:19:b3:f5:0f:9e:29:81:4e:de:e2:3a:87:
                    35:0f:68:ef:e1:c6:26:b1:08:45:a6:9f:0e:fd:4a:
                    0e:65:1e:0b:3c:49:d5:89:0c:89:40:59:ef:c6:fc:
                    cf:06:de:35:d0:30:38:a8:9f:f0:77:2a:14:9f:9c:
                    ee:26:35:ca:24:29:e4:46:05:c2:a1:d5:f8:bf:99:
                    ef:1f:fb:c8:c9:8b:33:39:66:a6:b5:cf:65:50:59:
                    72:fa:1f:92:02:44:aa:9a:2d:92:7d:16:8e:e0:c1:
                    f5:14:4e:62:67:a2:78:23:ca:f0:43:30:1a:2a:a0:
                    d6:6a:c5:12:6b:c3:21:62:81:c6:2b:6e:7e:c3:1c:
                    24:73:dd:63:87:94:34:4b:7b:0c:d9:1d:9e:14:9d:
                    b7:73:fb:f0:fb:fa:57:57:d2:67:50:11:33:66:7e:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:B0:FE:1A:9D:08:DE:39:7F:8E:56:1C:69:5E:7C:D5:13:27:7D
            X509v3 Authority Key Identifier:
                keyid:8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:3e:fe:ee:f9:3e:eb:8f:34:25:cf:e7:47:17:a5:cd:87:
         59:50:a1:9c:96:ad:28:f2:73:72:3e:91:00:a2:3b:47:77:49:
         1e:1d:12:54:34:78:86:fc:67:3e:7f:91:e6:03:86:b0:1d:5b:
         c9:b2:d1:c9:f8:e7:93:75:1f:00:c9:88:62:c3:7b:cc:10:3d:
         bc:b2:a6:e2:0d:2b:d2:7e:f5:b7:57:7f:5f:51:38:af:8c:ec:
         4a:b3:f7:b5:8b:60:72:9b:9f:14:53:e9:db:25:da:ed:79:77:
         02:9b:b7:b2:3c:39:78:1e:f1:cd:94:ba:86:2e:92:d5:4f:bc:
         c9:2f:4f:49:a8:0f:ce:bb:e4:99:41:3e:22:a5:c3:fb:5a:fa:
         47:4d:79:68:7a:8a:14:bf:81:7f:f3:63:92:be:a3:60:23:40:
         bf:61:b9:5b:8b:3e:7f:a8:b0:b5:a8:68:ef:ec:31:c0:34:44:
         d4:bb:94:de:9e:fb:75:ec:46:ea:58:bb:7f:02:77:dc:dc:b1:
         97:f0:c3:24:27:1d:5b:7b:f1:82:3a:3a:ce:8c:be:ea:fd:bf:
         51:62:d9:b6:12:a1:c2:d7:0b:35:d2:9d:b0:09:0a:eb:a0:aa:
         46:c5:78:62:f2:51:40:95:98:be:e4:41:6e:3b:a0:06:cb:34:
         32:80:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:01 2025 by rpki-client