Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
File:                     3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          ChELhbB8IXTV/KuzArY82H5XeiU73iU25V4ExYGC4uA=
Subject key identifier:   06:05:97:89:7C:E0:C2:CC:10:21:5D:40:D7:02:3B:86:0C:98:96:46
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       101616923CC53B581805A31BB4304EB0E0E3EC27
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
Signing time:             Tue 04 Feb 2025 18:19:22 +0000
ROA not before:           Tue 04 Feb 2025 18:14:22 +0000
ROA not after:            Tue 03 Feb 2026 18:19:22 +0000
asID:                     269822
IP address blocks:        103.219.234.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:16:16:92:3c:c5:3b:58:18:05:a3:1b:b4:30:4e:b0:e0:e3:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Feb  4 18:14:22 2025 GMT
            Not After : Feb  3 18:19:22 2026 GMT
        Subject: CN=060597897CE0C2CC10215D40D7023B860C989646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:a2:b8:13:f2:08:5e:aa:22:d3:c8:7c:dc:
                    f7:ed:d1:a0:f7:90:c1:71:6a:9d:21:03:d3:5f:5b:
                    69:ff:a7:d3:1d:24:ae:f4:2e:b5:02:04:d3:df:3f:
                    cc:47:fa:1a:e0:52:32:1f:f1:f8:c9:91:48:9d:ad:
                    96:28:a0:6e:db:57:d0:b4:ea:8d:33:7f:31:f1:72:
                    9f:04:13:72:6e:32:43:32:d1:c6:96:04:1b:6f:11:
                    39:a7:6c:d8:28:b8:a0:99:5a:82:51:06:2d:9a:56:
                    a6:d8:08:2f:17:9b:9e:ca:04:8e:8a:26:0c:49:18:
                    6f:15:92:fd:05:88:13:5a:de:91:6d:03:7f:9e:1f:
                    49:94:2b:93:c1:1e:d6:68:ff:d7:39:97:82:32:2d:
                    59:ed:8d:18:58:be:26:00:9c:4b:9c:9e:8e:1f:6d:
                    82:bd:a2:94:2a:c7:67:47:04:5b:e2:fe:0b:00:d3:
                    62:20:1e:ec:51:88:7c:24:ff:18:e9:11:77:f6:86:
                    52:57:de:a6:af:36:22:a6:ee:2b:54:b0:d5:45:af:
                    fb:33:61:4b:07:9b:fa:a9:4b:ba:68:73:1c:29:f4:
                    9a:75:22:79:f7:64:4c:40:96:bb:31:15:30:41:46:
                    66:7c:70:7e:27:6e:20:6e:fd:8e:49:09:af:42:d9:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:97:89:7C:E0:C2:CC:10:21:5D:40:D7:02:3B:86:0C:98:96:46
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:59:7a:74:3d:1d:11:aa:75:df:23:dd:f8:37:3b:52:38:fd:
         5f:70:a7:66:67:f2:81:e0:6f:95:ca:3a:16:9d:5e:8f:99:e7:
         ca:86:11:0a:02:6e:1c:54:b3:22:5c:1d:ec:e3:16:e3:c2:a0:
         16:8b:d4:39:90:1e:05:c5:ad:14:b1:a0:99:4f:f4:12:19:4a:
         92:9b:a7:06:35:a1:db:5b:57:e6:13:bb:04:67:79:7e:61:2a:
         89:b1:bd:39:99:6f:5d:b8:a5:17:f6:6f:2e:49:56:4b:0c:2d:
         55:c5:08:53:df:fb:cc:a2:ca:6b:d0:e9:b7:df:fc:1d:11:88:
         1c:14:df:56:5b:45:0e:de:1e:e1:41:bc:49:87:f7:b5:5d:06:
         54:a7:0b:2e:20:6a:f3:8b:37:3c:39:ae:dd:b0:99:de:a4:8c:
         a5:6c:b7:6d:bd:50:65:33:c6:90:d1:a1:6c:c0:43:93:b6:f2:
         76:f5:8f:8f:56:11:88:86:b8:a7:35:8f:5c:18:8c:99:f5:eb:
         cf:8f:d3:9c:4b:4f:56:1f:f1:16:57:2d:e9:78:fc:4b:76:9f:
         e5:9a:cc:c6:1a:a9:d8:68:52:37:93:9d:fd:fb:6d:11:7f:db:
         29:d5:d7:2e:b6:86:0c:31:d2:30:51:89:20:af:c9:96:44:a9:
         30:f0:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:14 2025 by rpki-client