Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa
File:                     3136342e3136332e382e302f32332d3233203d3e20323635373631.roa (raw, json)
Hash identifier:          BzsrTvL+j4LW4glxAN88a3c5V3H9iyo9EeWn0BtXMLQ=
Subject key identifier:   FC:22:21:F5:12:81:F7:FE:73:8F:9A:14:38:E8:AB:81:02:CF:37:AA
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       628C5C0302C6778FBA59A4FE9395E739D82D1D4F
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa
Signing time:             Tue 04 Feb 2025 19:59:12 +0000
ROA not before:           Tue 04 Feb 2025 19:54:12 +0000
ROA not after:            Tue 03 Feb 2026 19:59:12 +0000
asID:                     265761
IP address blocks:        164.163.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8c:5c:03:02:c6:77:8f:ba:59:a4:fe:93:95:e7:39:d8:2d:1d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Feb  4 19:54:12 2025 GMT
            Not After : Feb  3 19:59:12 2026 GMT
        Subject: CN=FC2221F51281F7FE738F9A1438E8AB8102CF37AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:d0:8c:e9:26:db:94:33:8e:94:93:e0:6a:
                    65:d0:84:3e:ce:80:7e:b9:f9:64:9b:be:d5:9c:7f:
                    61:12:d6:a4:f9:a3:1d:88:90:26:75:d1:4e:41:41:
                    16:7f:80:1b:ce:89:db:f8:65:7f:ef:37:c4:ac:f8:
                    51:4e:54:63:ee:9b:5b:55:7c:92:34:57:6c:1f:ae:
                    1d:5e:dc:12:27:5f:cb:55:7c:8a:8b:f9:6c:ea:24:
                    43:93:01:1d:35:a7:3e:e5:74:33:39:69:d1:99:b5:
                    43:9d:87:38:ce:e5:d3:bf:ea:b4:6a:aa:c6:74:1e:
                    c0:a4:f2:d8:14:b5:25:d0:6b:ef:42:0e:79:65:1a:
                    32:f7:5d:4e:d9:46:65:e8:84:6b:16:a4:e3:3e:ed:
                    2b:9e:7e:89:93:d2:43:99:19:fd:70:8e:29:6b:76:
                    28:e2:dd:f5:00:f1:7d:15:6f:1d:71:77:f5:3d:a2:
                    42:f3:81:79:ff:47:04:81:9c:c8:43:35:e8:64:42:
                    85:c0:28:67:c8:53:e8:9b:ca:23:7a:86:01:a4:0e:
                    f6:c4:37:2e:bd:ba:34:bd:f3:50:14:22:3c:39:ef:
                    f9:10:c1:f1:13:e6:a0:bf:ad:93:40:cc:6f:3e:90:
                    1d:81:5a:bd:26:a5:2c:0b:5f:d6:97:fd:d2:90:55:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:21:F5:12:81:F7:FE:73:8F:9A:14:38:E8:AB:81:02:CF:37:AA
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:ee:68:85:30:96:6e:9c:ef:90:54:89:2f:2d:c0:c2:d1:
         15:96:a7:2a:16:9d:46:01:0b:a3:08:49:75:b1:04:8f:6c:22:
         9d:bc:ed:d9:05:b6:66:fe:54:a4:b3:f5:bd:9c:0d:35:09:b9:
         bb:4c:d8:eb:b3:08:f4:e3:c8:4f:c6:17:6e:f2:be:86:00:75:
         6b:fb:ec:32:3e:be:7b:06:a5:b1:22:be:78:6d:72:6c:a7:eb:
         98:32:7d:05:cc:66:89:7d:3b:e7:84:0f:10:37:25:ac:ff:76:
         52:ab:5c:50:09:5f:01:5f:72:72:4d:63:2f:cd:48:3e:71:12:
         f1:25:29:19:28:82:7b:43:a3:53:2a:37:0f:61:8e:de:38:80:
         c3:c6:d8:7d:55:32:97:50:6f:26:e4:cb:41:cb:18:f6:35:54:
         e8:e4:f2:99:79:b5:a1:e7:38:b5:35:7f:46:23:1c:50:db:0d:
         a1:46:5e:d8:b5:61:63:f7:34:98:bb:ff:0d:61:75:09:fa:cb:
         65:ac:dc:04:39:7f:06:cc:69:d8:9d:ab:37:e7:b1:ed:ba:22:
         6f:43:27:6c:c5:1d:be:02:e4:8f:99:7c:44:bb:2b:c5:d2:4f:
         a1:05:4f:6d:15:47:b8:97:70:43:01:cb:fd:db:a1:7c:20:da:
         d0:c8:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:03 2025 by rpki-client