Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/3230372e3234382e3131362e302f32332d3234203d3e20323732333535.roa
File:                     3230372e3234382e3131362e302f32332d3234203d3e20323732333535.roa (raw, json)
Hash identifier:          27Rh4i3/+36AfOmtnZd/C5MpnWcfG7AaHwMcFJEj6eo=
Subject key identifier:   F7:54:48:12:BA:7E:DB:DF:4F:E9:42:6A:A0:AE:5E:45:95:05:D4:8C
Certificate issuer:       /CN=7F987726AC571A418EC2B028452F4201605F6575
Certificate serial:       13E8F9AFE3869530E79361393C27B3E29560CBCA
Authority key identifier: 7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/3230372e3234382e3131362e302f32332d3234203d3e20323732333535.roa
Signing time:             Wed 21 Oct 2026 18:30:00 +0000
ROA not before:           Wed 21 Oct 2026 18:25:00 +0000
ROA not after:            Wed 20 Oct 2027 18:30:00 +0000
asID:                     272355
IP address blocks:        207.248.116.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e8:f9:af:e3:86:95:30:e7:93:61:39:3c:27:b3:e2:95:60:cb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F987726AC571A418EC2B028452F4201605F6575
        Validity
            Not Before: Oct 21 18:25:00 2026 GMT
            Not After : Oct 20 18:30:00 2027 GMT
        Subject: CN=F7544812BA7EDBDF4FE9426AA0AE5E459505D48C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:40:2e:87:30:61:10:1d:f3:69:4b:1b:26:
                    14:0a:b3:78:0d:49:59:43:6c:89:f1:c6:eb:c8:50:
                    62:44:41:b0:e7:da:7f:d2:d6:af:4b:2c:e2:1b:6c:
                    f6:a5:55:e0:56:40:d9:71:94:f4:0d:52:a4:d7:64:
                    c9:c2:3b:a4:eb:3e:26:1c:7f:26:3f:5b:5f:c8:55:
                    2b:90:a7:4d:31:f8:b2:26:3b:a8:40:0b:4e:30:91:
                    7e:69:19:3a:c3:b9:a6:2d:b3:4e:12:ce:bf:06:bd:
                    fc:15:11:b5:b5:07:c7:1f:9a:8b:5e:23:69:3f:09:
                    cd:63:17:cc:09:c8:f2:ee:81:a6:5d:59:25:00:53:
                    0a:d9:0a:15:ee:82:23:68:8c:57:c0:df:8e:19:5e:
                    19:c1:75:57:1a:c8:3c:94:b9:1e:1e:67:e8:94:2c:
                    fb:fc:91:4b:d6:57:61:79:34:bf:6c:f8:70:48:c6:
                    b4:3e:16:bf:72:51:38:7d:45:f2:61:7a:08:8a:be:
                    2b:d2:a1:2e:bb:16:ac:47:6d:f1:d4:bc:60:60:0b:
                    25:e5:34:8d:35:35:93:1a:87:a9:27:68:fd:a5:60:
                    a9:8f:0b:64:51:64:18:5c:f2:6e:b7:1c:99:b5:83:
                    90:b4:ee:84:e1:e4:03:bb:7a:4d:14:fb:5a:96:13:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:48:12:BA:7E:DB:DF:4F:E9:42:6A:A0:AE:5E:45:95:05:D4:8C
            X509v3 Authority Key Identifier:
                keyid:7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/7F987726AC571A418EC2B028452F4201605F6575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/3230372e3234382e3131362e302f32332d3234203d3e20323732333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:04:53:df:fb:44:4e:14:db:15:97:6a:3f:07:e7:86:29:01:
         f5:9f:69:e4:b6:b5:ba:1a:3a:1c:e0:fd:3a:e0:98:a8:6b:42:
         64:02:04:bd:b6:72:b3:7b:84:c6:ed:72:73:cb:ed:2b:6d:2c:
         04:1e:aa:fa:12:b6:83:a4:bb:a0:92:e0:ee:5e:6e:f2:51:01:
         b0:25:6e:29:5b:05:fa:ad:97:23:0b:bc:e1:39:62:95:87:b7:
         0a:98:a7:40:59:c1:6d:a2:d1:e4:bd:39:d2:3a:d3:21:3a:b3:
         74:37:f4:0d:d5:62:7d:c7:f7:00:b8:68:2f:44:d4:b7:bb:cf:
         df:80:27:bb:da:03:63:20:0b:47:86:30:f6:8b:3a:3b:3a:12:
         a1:16:dd:70:a1:f3:23:5b:59:e5:75:8a:8e:4b:3b:09:e3:24:
         3e:16:27:a9:32:d1:c3:b3:9a:22:ab:2b:a7:24:30:b4:29:80:
         7c:60:d0:46:0b:2f:ec:58:f0:37:0d:e8:30:6e:58:38:f1:53:
         c8:0a:a9:5f:54:be:fd:34:66:12:2c:b0:7e:ee:0c:1c:17:fc:
         70:a6:64:6f:ed:4d:75:83:36:0c:d8:ad:e5:96:f6:7b:85:b2:
         1d:41:92:0d:e1:19:6e:05:ba:72:67:bb:24:3a:4f:21:46:6a:
         ba:49:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----