Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31372e302f32342d3234203d3e20323731393038.roa
File:                     3133312e3235352e31372e302f32342d3234203d3e20323731393038.roa (raw, json)
Hash identifier:          qCSyNg59hi61NgGHSmfnGCBo70bSaA5FjhnMxoUMvUc=
Subject key identifier:   A5:7E:80:E4:DB:7E:4E:66:9A:C3:B7:DB:DD:9C:AC:80:D5:EB:5E:BE
Certificate issuer:       /CN=C63FB072C318744286AE683521DFED7AF1E0B944
Certificate serial:       4F1B700B71712880EB5851B02FDFB23B570FD077
Authority key identifier: C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31372e302f32342d3234203d3e20323731393038.roa
Signing time:             Tue 04 Feb 2025 18:40:06 +0000
ROA not before:           Tue 04 Feb 2025 18:35:06 +0000
ROA not after:            Tue 03 Feb 2026 18:40:06 +0000
asID:                     271908
IP address blocks:        131.255.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1b:70:0b:71:71:28:80:eb:58:51:b0:2f:df:b2:3b:57:0f:d0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63FB072C318744286AE683521DFED7AF1E0B944
        Validity
            Not Before: Feb  4 18:35:06 2025 GMT
            Not After : Feb  3 18:40:06 2026 GMT
        Subject: CN=A57E80E4DB7E4E669AC3B7DBDD9CAC80D5EB5EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:cf:da:91:52:8c:dd:98:e1:84:a4:db:c8:
                    fc:4b:a7:36:19:1f:2c:cb:bd:7b:ae:52:79:bd:03:
                    d3:b8:30:f8:d6:67:f4:5b:a2:43:48:07:0c:21:03:
                    a8:b2:31:ed:d0:bd:88:6e:8c:82:33:4a:4e:c0:d1:
                    02:f6:6a:39:85:ae:23:13:f1:70:a3:20:d7:26:dd:
                    45:45:a1:99:60:2c:c9:bb:6d:ed:dd:b1:92:af:75:
                    39:2c:c5:d8:a6:75:5e:32:89:37:9a:05:15:8f:41:
                    b6:ed:ff:e7:37:db:63:7f:a6:b7:a1:ab:7a:51:e7:
                    51:be:b0:cd:6c:f8:2c:b2:b1:da:d3:55:65:d8:54:
                    a8:db:c0:70:83:12:2a:76:1c:8d:e4:76:8f:91:95:
                    6c:6b:42:a2:33:44:14:bf:1d:ec:8d:f5:82:c4:f1:
                    86:79:22:83:b7:5d:8c:65:51:78:23:9a:40:cf:68:
                    d2:f6:89:56:ed:85:7c:77:48:6a:a3:44:3f:4f:3e:
                    1b:d2:41:59:00:5d:d3:75:90:48:a5:d2:b8:ce:c4:
                    98:ab:f0:04:f6:f3:2c:f5:ed:19:6c:38:32:eb:26:
                    2a:8d:8f:ef:37:a1:f5:18:b4:da:2a:af:76:a7:b7:
                    3a:b9:1c:c4:a9:26:f4:33:9d:40:27:91:1c:24:63:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:80:E4:DB:7E:4E:66:9A:C3:B7:DB:DD:9C:AC:80:D5:EB:5E:BE
            X509v3 Authority Key Identifier:
                keyid:C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31372e302f32342d3234203d3e20323731393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:6a:5b:0c:47:e3:9d:94:6c:a7:c5:aa:15:30:17:ed:ed:
         bf:e1:21:b1:3e:f2:a5:54:ab:5b:93:66:47:d9:ab:74:80:fb:
         60:09:6c:78:6a:e6:e8:15:6f:74:b6:8b:32:8c:51:e1:2e:f0:
         fe:3e:99:ef:59:4d:6d:90:6f:7c:c2:6c:56:94:fa:a2:b7:af:
         fa:43:c0:62:9d:2d:f6:14:83:a8:5f:a9:eb:fe:19:67:ce:d2:
         27:5a:8d:49:7a:af:97:5e:b9:96:a0:60:48:82:ee:c6:c6:02:
         96:ba:82:8c:0d:84:61:85:43:9f:fc:6e:c0:d5:b7:13:7d:fb:
         e3:2c:99:65:dd:08:3c:0e:7f:f0:67:88:16:a4:ae:67:5c:b7:
         fe:fc:0d:0c:ad:d3:4f:0c:9f:a8:0a:99:a0:24:f9:18:51:cc:
         b9:0a:54:f1:f2:28:81:46:c3:14:3b:e5:23:3c:c5:0b:33:72:
         6a:24:71:1b:56:6f:7a:b6:66:29:2f:c4:58:8e:c8:8b:a1:e1:
         aa:ad:3a:b3:3e:4a:6c:f2:07:4e:39:23:7e:df:56:ee:8c:91:
         5c:98:10:43:7a:a7:7b:39:89:f3:2c:8a:71:8c:1f:2c:ff:9f:
         4c:f5:10:58:9f:9a:ad:b0:57:bb:e0:85:f9:d5:f9:63:a3:a4:
         55:03:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:23 2025 by rpki-client