Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37392e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          +dKyVJ25k4Qqtr04Z55BxB43jGJ0Zk7/9IzwH+94DTM=
Subject key identifier:   F4:34:C9:BA:ED:9B:84:9F:FA:96:D4:AC:48:F0:45:9A:C6:B7:DE:81
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       335D6E54E6BE43A19FB44F507FEB36AC6104C2F7
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:28 +0000
ROA not before:           Tue 04 Feb 2025 18:23:28 +0000
ROA not after:            Tue 03 Feb 2026 18:28:28 +0000
asID:                     263209
IP address blocks:        191.97.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:6e:54:e6:be:43:a1:9f:b4:4f:50:7f:eb:36:ac:61:04:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:28 2025 GMT
            Not After : Feb  3 18:28:28 2026 GMT
        Subject: CN=F434C9BAED9B849FFA96D4AC48F0459AC6B7DE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:ad:88:2b:72:0e:ff:2b:b3:64:c6:54:92:
                    69:ef:10:0e:b9:14:36:93:66:a5:09:ed:c2:1f:c8:
                    81:4b:f8:bd:39:5f:a3:95:39:d6:a1:47:e6:e7:b9:
                    64:ff:70:e1:ee:e7:69:70:ac:50:0b:f1:d6:4a:a1:
                    3d:05:03:00:e3:dd:4a:50:2e:47:87:23:e1:80:3a:
                    44:00:01:30:6c:b0:1d:6a:fb:47:df:20:7e:2c:86:
                    1d:78:8d:0d:22:de:f0:3c:a9:b7:a4:73:14:72:31:
                    55:34:d7:8e:ca:cf:10:29:9e:2a:53:d2:57:82:93:
                    39:27:93:4c:de:62:0b:34:46:49:5a:fa:d8:8a:3a:
                    51:b5:b5:01:0d:2b:13:90:6b:6c:95:0a:4a:03:34:
                    be:4d:7a:0c:db:66:39:0d:29:31:1b:f8:66:01:16:
                    bf:bb:21:a8:bc:22:50:36:e3:fd:23:b3:52:21:3b:
                    f8:29:e0:30:66:35:f4:41:88:1e:72:e0:13:69:ff:
                    ef:58:6e:a1:40:3c:7d:ed:97:e9:2c:1f:88:77:7c:
                    b7:c0:88:d8:f2:80:14:d6:2a:10:00:45:9e:57:24:
                    cc:a0:be:d7:33:51:aa:3f:97:dd:99:97:33:dc:97:
                    ae:e4:09:6b:8b:69:c9:d3:a1:14:85:04:0b:ed:d0:
                    3b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:C9:BA:ED:9B:84:9F:FA:96:D4:AC:48:F0:45:9A:C6:B7:DE:81
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:c8:03:03:42:9e:f0:40:27:a0:aa:31:50:bd:48:c8:0a:
         a9:85:32:37:f0:74:96:3b:4b:97:47:c4:e0:de:50:0c:8a:fc:
         e7:41:9f:58:b8:c6:f4:fe:dc:2b:30:06:55:49:43:85:de:52:
         6a:93:7b:96:2e:c8:9c:b5:da:2b:f5:d8:58:19:a1:ab:76:09:
         b9:7c:e2:e7:2a:0f:99:0b:cb:40:b9:3a:82:76:2e:49:d8:b1:
         f8:db:98:a7:0e:26:06:ed:fe:8a:01:1e:3b:32:bf:e4:0e:06:
         a7:96:cd:ab:ee:71:d6:9d:af:24:65:96:ab:eb:c2:a9:c1:cf:
         ee:c9:73:7a:76:3e:3b:33:21:99:f4:9a:44:10:33:ca:de:fc:
         27:99:a8:7a:32:e8:6b:bb:26:da:40:57:f9:5c:2e:fe:7e:bd:
         1d:2e:fc:24:90:73:72:18:18:e5:5c:1d:ec:5c:57:02:c2:57:
         79:c0:93:d1:d5:9f:7d:0f:3e:be:d5:0b:0a:92:bf:fa:1a:c2:
         ae:f5:9b:19:e8:49:88:3f:15:32:d4:33:d9:cc:0a:01:37:be:
         6e:c1:55:1a:d8:14:90:c6:99:57:99:31:ac:40:68:2a:a5:58:
         7a:87:3b:76:9a:a3:92:d3:a7:7f:7e:d1:a8:cb:23:18:6d:b7:
         00:aa:74:65
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM11uVOa+Q6GftE9Qf+s2rGEEwvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNTAyMDQxODIzMjhaFw0yNjAyMDMxODI4MjhaMDMxMTAvBgNV
BAMTKEY0MzRDOUJBRUQ5Qjg0OUZGQTk2RDRBQzQ4RjA0NTlBQzZCN0RFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoa2IK3IO/yuzZMZUkmnvEA65
FDaTZqUJ7cIfyIFL+L05X6OVOdahR+bnuWT/cOHu52lwrFAL8dZKoT0FAwDj3UpQ
LkeHI+GAOkQAATBssB1q+0ffIH4shh14jQ0i3vA8qbekcxRyMVU0147KzxApnipT
0leCkzknk0zeYgs0Rkla+tiKOlG1tQENKxOQa2yVCkoDNL5NegzbZjkNKTEb+GYB
Fr+7Iai8IlA24/0js1IhO/gp4DBmNfRBiB5y4BNp/+9YbqFAPH3tl+ksH4h3fLfA
iNjygBTWKhAARZ5XJMygvtczUao/l92ZlzPcl67kCWuLacnToRSFBAvt0Dv1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9DTJuu2bhJ/6ltSsSPBFmsa33oEwHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzczOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9hTzAN
BgkqhkiG9w0BAQsFAAOCAQEATr7IAwNCnvBAJ6CqMVC9SMgKqYUyN/B0ljtLl0fE
4N5QDIr850GfWLjG9P7cKzAGVUlDhd5SapN7li7InLXaK/XYWBmhq3YJuXzi5yoP
mQvLQLk6gnYuSdix+NuYpw4mBu3+igEeOzK/5A4Gp5bNq+5x1p2vJGWWq+vCqcHP
7slzenY+OzMhmfSaRBAzyt78J5moejLoa7sm2kBX+Vwu/n69HS78JJBzchgY5Vwd
7FxXAsJXecCT0dWffQ8+vtULCpK/+hrCrvWbGehJiD8VMtQz2cwKATe+bsFVGtgU
kMaZV5kxrEBoKqVYeoc7dpqjktOnf37RqMsjGG23AKp0ZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:08 2025 by rpki-client