Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa
File:                     3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          +/A49BN4610Cl0iMW4pE99OIuCPwMJ1v4Mcd3MBVylo=
Subject key identifier:   D7:1B:F1:5E:82:13:E6:0C:A7:DA:EE:B9:72:E6:12:5C:19:39:5C:D5
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5145398244526906C3EB51942EB7C87B7EF7066C
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:17 +0000
ROA not before:           Tue 04 Feb 2025 18:17:17 +0000
ROA not after:            Tue 03 Feb 2026 18:22:17 +0000
asID:                     22368
IP address blocks:        201.221.128.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:45:39:82:44:52:69:06:c3:eb:51:94:2e:b7:c8:7b:7e:f7:06:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:17 2025 GMT
            Not After : Feb  3 18:22:17 2026 GMT
        Subject: CN=D71BF15E8213E60CA7DAEEB972E6125C19395CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:14:ac:cd:e3:41:9c:4a:d8:51:40:b5:fb:
                    01:a3:95:37:e2:c7:6f:6e:0e:58:8a:8e:b2:9a:5c:
                    74:d9:76:ae:a5:32:2f:6b:0c:0c:d1:93:80:af:a5:
                    9a:97:53:21:28:85:f8:f2:fa:33:21:06:46:e3:01:
                    42:37:9a:63:d5:8c:e0:3e:69:28:9a:70:95:d3:ba:
                    a5:a7:1b:59:b6:57:f2:f6:f1:15:ce:3b:08:e2:1f:
                    df:dc:ef:de:f9:5b:01:7c:3b:53:05:70:45:55:0d:
                    3a:9c:ae:a0:a4:e9:3e:d3:69:6e:e9:3f:8e:78:3c:
                    8e:bf:cb:34:4e:5d:5a:ba:ba:73:dc:e0:17:de:e5:
                    89:47:48:11:6f:cb:0e:b0:f6:70:e9:e4:48:19:15:
                    10:f2:d5:07:57:89:60:5f:e3:1d:20:bf:bf:d1:6e:
                    c5:06:da:d7:e7:ad:78:aa:05:c8:99:f5:33:77:42:
                    79:18:96:80:24:85:f1:41:b2:ee:6b:ec:5f:7c:80:
                    d8:aa:95:dd:63:e0:83:a6:a4:af:4c:2e:c2:b3:25:
                    ed:56:51:41:34:46:6c:15:2b:a0:ae:af:e4:5f:3d:
                    9e:b0:52:ed:27:aa:fe:d1:af:1a:b4:66:e3:b7:17:
                    27:e5:b3:87:44:66:ec:70:33:fb:c2:61:93:10:25:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1B:F1:5E:82:13:E6:0C:A7:DA:EE:B9:72:E6:12:5C:19:39:5C:D5
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:7f:b6:ee:9f:1f:bc:dc:ce:6b:31:fd:93:49:2a:3f:84:
         90:71:d8:3e:da:e0:ba:20:10:eb:6b:d1:10:f7:15:50:31:dc:
         e7:33:37:7e:86:17:ec:1e:4f:70:8e:9c:6d:a6:d5:98:c8:d4:
         48:ce:d4:fa:ad:3d:95:e3:f0:2d:b5:27:4b:c6:46:d1:55:f1:
         06:f8:dd:ae:97:f2:87:c9:ae:73:5f:74:37:3c:48:df:42:8d:
         16:24:f1:f8:7b:63:9a:88:8e:5e:04:81:e9:79:64:cf:1e:3f:
         7d:b0:b6:b8:d2:8e:0e:77:77:2c:77:ec:ab:00:13:b5:c9:ac:
         5d:e3:87:d5:06:5c:03:2a:f2:2c:30:e9:4f:06:cc:a2:48:b5:
         75:2e:72:06:5a:f1:30:bd:df:76:7d:3e:af:2c:57:2a:0b:cc:
         b5:06:b3:06:5f:00:4a:4e:ad:08:ce:30:0f:e1:06:14:40:55:
         32:c4:c6:3b:7e:24:f2:f3:eb:ed:ca:af:97:93:d2:b2:04:05:
         9f:0c:d6:46:39:44:77:9a:83:11:05:63:28:ca:3d:c3:d1:36:
         11:86:dd:26:24:4d:88:1c:92:90:89:96:59:93:8a:35:a5:8b:
         11:c0:9b:1e:a5:5a:4f:f9:c0:84:f3:04:d1:69:c8:b7:ee:b8:
         9d:99:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:33 2025 by rpki-client