Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa
File:                     3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa (raw, json)
Hash identifier:          im27vE4y6y+avJMgdRWOqyZyb2qL8vINyXPFFRyGNl0=
Subject key identifier:   E9:41:D0:5C:D0:9C:48:45:BF:6C:A6:4B:67:E8:F4:B7:4E:5B:4D:B9
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       725EF36C4345ED8C82CFD58CEA82389B6FED8990
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa
Signing time:             Tue 04 Feb 2025 18:03:26 +0000
ROA not before:           Tue 04 Feb 2025 17:58:26 +0000
ROA not after:            Tue 03 Feb 2026 18:03:26 +0000
asID:                     265675
IP address blocks:        143.255.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:f3:6c:43:45:ed:8c:82:cf:d5:8c:ea:82:38:9b:6f:ed:89:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Feb  4 17:58:26 2025 GMT
            Not After : Feb  3 18:03:26 2026 GMT
        Subject: CN=E941D05CD09C4845BF6CA64B67E8F4B74E5B4DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:f5:4d:cc:7f:fd:80:12:c1:ba:57:6c:5e:
                    87:2e:79:34:41:51:5c:5c:60:95:06:ff:a5:4d:47:
                    2a:3d:97:3c:2e:e0:99:df:fe:68:74:90:6b:ec:5d:
                    f8:9b:5f:29:d9:98:6b:69:e1:52:7f:25:ed:cb:d6:
                    85:29:60:ea:62:d6:d3:48:b8:59:74:64:63:8d:22:
                    60:c5:24:33:ee:cc:e1:24:22:80:99:d9:ef:5a:3e:
                    71:b2:0d:58:86:d4:a6:7e:1e:4f:7c:0b:e6:7b:85:
                    48:5b:24:68:52:84:d7:84:0f:4b:ca:b9:ca:40:11:
                    4f:3a:c0:09:4e:8b:29:60:b7:52:97:da:5e:39:8c:
                    8a:cd:ae:7f:cd:fc:57:cb:e2:3d:f9:80:6c:81:8c:
                    fb:48:72:af:86:0d:b1:ab:87:6d:1c:ce:2f:b5:05:
                    b9:ca:b2:c9:7e:c8:d0:eb:c2:17:e5:6b:96:b3:3d:
                    a4:70:c7:d3:f6:a7:cd:9f:ac:bf:bd:89:1e:6a:80:
                    88:cb:8a:56:7e:05:05:cd:1d:01:b2:92:5b:ef:08:
                    35:89:05:9a:e4:56:fc:31:6b:00:e0:60:ef:93:2c:
                    14:2b:be:72:2b:bc:bc:7f:29:c7:75:ed:81:24:04:
                    48:86:f4:4f:3d:75:11:61:64:07:79:92:24:b4:03:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:D0:5C:D0:9C:48:45:BF:6C:A6:4B:67:E8:F4:B7:4E:5B:4D:B9
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:23:ac:8c:4f:b7:31:62:94:56:9e:c6:a9:f0:3a:61:d2:1d:
         16:b6:fa:44:b2:97:5a:0b:81:30:80:64:0a:10:d8:95:62:2c:
         09:75:e7:37:44:25:cf:ff:fd:fa:03:33:26:93:5c:6f:26:4d:
         04:e6:68:d2:c3:b7:61:33:76:bf:3b:55:b2:67:07:6e:60:9f:
         18:ed:51:bf:cc:3b:7c:32:ce:ae:a8:8c:04:0c:b3:43:ae:51:
         7b:42:84:cd:01:5d:2f:34:17:0e:f8:6d:e7:e2:b5:21:12:da:
         8a:82:6d:88:a3:ce:56:3f:a2:61:35:81:79:63:cc:e2:2e:23:
         d6:4d:61:8a:5b:a6:ff:61:77:2f:4c:17:b4:1a:54:f1:e4:12:
         15:4f:59:bd:48:4a:d5:f7:0b:e1:af:5e:1d:4a:34:77:8f:69:
         f1:36:4a:56:92:a1:c1:79:94:b2:c6:57:8a:80:49:61:90:0d:
         9d:67:af:9c:21:19:b7:ca:0a:14:71:bc:57:73:ba:8e:bd:31:
         78:ad:0a:cb:fb:9c:44:f7:31:f4:e0:2e:99:5e:db:dc:b8:f3:
         2b:a6:f3:55:9c:fe:5d:e6:e3:b0:09:51:6d:68:c3:17:07:81:
         2c:fb:66:ee:15:d5:bc:cf:b0:73:c0:91:8c:18:01:41:c2:0d:
         97:d4:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:18 2025 by rpki-client