Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32342d3234203d3e20323635363332.roa
File:                     3133312e3139362e382e302f32342d3234203d3e20323635363332.roa (raw, json)
Hash identifier:          dvhQaD5BkZ02/vXJoAFi1WetqLlg8mpvQ07kEc4nRAk=
Subject key identifier:   58:10:42:67:CC:0B:03:77:30:51:81:CA:DA:1A:74:48:AC:A3:68:92
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       304C0A74C2B7FF1FFFE93B15ED7BBA1015337A81
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32342d3234203d3e20323635363332.roa
Signing time:             Tue 04 Feb 2025 18:54:27 +0000
ROA not before:           Tue 04 Feb 2025 18:49:27 +0000
ROA not after:            Tue 03 Feb 2026 18:54:27 +0000
asID:                     265632
IP address blocks:        131.196.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4c:0a:74:c2:b7:ff:1f:ff:e9:3b:15:ed:7b:ba:10:15:33:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Feb  4 18:49:27 2025 GMT
            Not After : Feb  3 18:54:27 2026 GMT
        Subject: CN=58104267CC0B0377305181CADA1A7448ACA36892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:08:03:0d:82:6e:88:7a:0c:db:9f:07:7d:
                    cd:2b:c8:d7:97:ed:e1:42:ef:1e:88:97:c3:d6:19:
                    7b:bd:fb:e7:78:8a:a4:3d:44:05:d9:45:32:29:f2:
                    db:8d:a3:c3:8b:c7:a7:6d:d1:31:06:35:83:fd:2d:
                    e0:c2:18:93:e5:79:bd:e4:fc:f2:8c:a9:21:4f:a5:
                    a1:ff:4f:0b:bf:bb:4e:e5:e9:a3:c9:62:a4:5b:e1:
                    cf:c2:f0:35:8a:8c:52:b0:aa:08:17:d0:d3:c0:21:
                    55:3a:ff:37:37:3f:35:78:a2:93:d3:7f:9c:0b:4d:
                    9e:2d:03:7c:30:c6:1a:3b:c6:55:be:0b:6e:9d:7b:
                    ee:c5:4c:7f:05:87:be:f2:20:f2:1c:4d:c0:4e:b4:
                    8c:c0:02:d0:b9:0f:32:42:4b:49:34:70:c5:d4:ca:
                    19:7b:e6:85:b7:62:6c:1c:35:2b:62:b9:ed:48:29:
                    c9:d0:76:2f:f5:dc:92:0d:ea:65:9b:13:79:94:b2:
                    96:69:0d:4e:b5:96:ee:6a:ab:24:9e:fd:7c:05:ea:
                    ab:3d:43:f3:11:4a:b8:d5:83:72:1f:ba:33:46:e7:
                    49:60:cf:eb:02:c7:47:18:13:d7:a0:ae:f4:ba:06:
                    a1:79:1a:6b:97:4e:10:f4:e6:8b:db:9b:85:cb:48:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:42:67:CC:0B:03:77:30:51:81:CA:DA:1A:74:48:AC:A3:68:92
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32342d3234203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:52:4b:d8:ae:5e:ea:8a:36:a5:39:70:25:c5:58:d4:34:
         a7:d1:9c:92:ef:e9:2c:c5:a2:c6:8f:04:f4:58:e1:ce:71:ea:
         34:a6:cd:f0:83:7c:ec:ad:37:2e:b1:26:4d:09:c6:ee:fe:8b:
         c3:c7:8e:27:7a:03:f1:75:67:1b:9f:f3:8d:1f:40:5e:5b:95:
         39:ec:80:ef:44:87:e9:bb:dc:57:bb:85:d2:c6:45:0c:7d:a3:
         af:2d:f7:a8:53:f2:8e:01:6d:df:36:ce:df:ed:9d:ea:b9:2f:
         2f:b5:aa:97:cb:a4:3c:77:6f:aa:c5:51:51:3e:c9:eb:55:2b:
         55:83:f9:88:8b:ac:8f:48:1a:e7:84:4a:f3:35:7d:ae:a0:91:
         9c:d4:9a:b2:05:42:19:3e:fd:0a:ce:40:4e:fa:e4:ea:a3:28:
         7b:61:4a:8f:00:c4:88:68:25:bf:59:6b:4b:ae:ac:fb:04:b9:
         bd:94:08:44:96:1c:b3:b8:39:58:cf:78:89:78:5a:bb:02:5e:
         67:e5:b1:0d:7d:56:88:e7:67:d5:1a:6b:a8:72:6b:e6:4a:3a:
         e6:bb:12:bd:64:1c:7c:75:07:fc:22:84:f8:32:f7:23:f5:ac:
         ec:8e:52:59:24:1a:79:8f:e2:e9:24:3e:ba:2c:ec:78:43:cf:
         d4:d2:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:15 2025 by rpki-client