Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32322d3234203d3e20323730313230.roa
File:                     3138372e3130332e32342e302f32322d3234203d3e20323730313230.roa (raw, json)
Hash identifier:          +19dvI7rSHa32ubVQXJHysoIGF+aXaCZBHflKtUpaT0=
Subject key identifier:   A0:94:A5:3D:2F:73:FE:9D:9F:5D:55:7D:43:B5:BA:4D:0D:98:2B:6E
Certificate issuer:       /CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
Certificate serial:       0A5538D73E0D1EFF87452D9293AC3E839CB8FA59
Authority key identifier: FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32322d3234203d3e20323730313230.roa
Signing time:             Tue 04 Feb 2025 20:06:27 +0000
ROA not before:           Tue 04 Feb 2025 20:01:27 +0000
ROA not after:            Tue 03 Feb 2026 20:06:27 +0000
asID:                     270120
IP address blocks:        187.103.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:38:d7:3e:0d:1e:ff:87:45:2d:92:93:ac:3e:83:9c:b8:fa:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
        Validity
            Not Before: Feb  4 20:01:27 2025 GMT
            Not After : Feb  3 20:06:27 2026 GMT
        Subject: CN=A094A53D2F73FE9D9F5D557D43B5BA4D0D982B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:48:3a:fa:fa:fd:2b:08:89:71:40:f0:69:
                    71:80:d2:7f:2b:bf:3c:b2:24:36:5b:8b:6b:eb:7d:
                    4c:18:17:37:37:47:71:ad:5e:1c:54:b2:11:0d:48:
                    e0:7b:4e:2a:b2:8f:e6:21:54:60:8d:46:1f:78:a9:
                    f2:8d:ea:f9:99:7b:df:9a:9c:37:b8:f1:0c:69:9d:
                    52:e5:d5:62:2b:6d:2d:1f:f5:40:eb:3d:d3:63:91:
                    17:7c:90:9e:e6:ab:45:a2:f8:59:28:f9:1e:b0:55:
                    14:9a:26:7a:4c:d3:d6:0b:e0:35:a9:44:3b:33:7a:
                    9f:13:94:7d:66:09:81:da:88:dc:01:41:77:e7:e8:
                    4d:e9:f3:26:b9:8b:23:e5:0c:f3:03:db:09:78:80:
                    68:4e:48:b4:60:d0:22:c9:30:c4:55:f0:29:fe:f0:
                    e4:73:4a:7f:14:a5:ca:5b:83:62:54:07:d8:de:a9:
                    4c:1b:1c:c9:e1:6f:d1:fc:ba:39:9a:c7:b2:25:4e:
                    44:c3:25:f9:e7:05:71:d9:e5:21:a8:96:7b:e9:d2:
                    2a:69:40:ff:13:f6:ad:fa:ce:56:67:73:e2:1e:55:
                    aa:56:d3:4b:00:6e:1d:83:0b:f9:8b:bb:36:60:90:
                    7b:f5:0c:28:ed:2f:64:a1:40:9a:fb:58:cd:be:3c:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:A5:3D:2F:73:FE:9D:9F:5D:55:7D:43:B5:BA:4D:0D:98:2B:6E
            X509v3 Authority Key Identifier:
                keyid:FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32322d3234203d3e20323730313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:7b:fd:5d:b3:04:5e:b1:6b:46:84:37:f3:79:21:cc:7b:
         1d:26:72:c9:43:ad:dd:e6:9b:e6:49:c2:be:cd:e3:96:4e:ab:
         80:da:d8:d1:18:70:a5:6d:6b:93:ce:6c:c9:9e:c6:0a:61:cc:
         8e:d1:19:2f:3a:d7:be:f5:a3:fb:0f:d4:79:0f:a4:89:c6:f1:
         af:70:66:8f:0d:9c:b8:48:1c:17:21:3e:33:85:b2:53:f4:44:
         de:82:53:8a:25:8e:b5:93:e7:7c:8d:2b:de:54:63:6b:36:9e:
         73:ab:77:cf:e1:ec:f8:9a:63:54:04:a1:80:78:f2:39:4f:ba:
         fa:59:9f:b9:bb:4a:42:63:bb:df:36:c6:21:5f:9b:e5:98:43:
         0f:fd:5b:ff:fd:0c:19:eb:77:65:d0:fc:8d:c0:1a:c6:a5:f9:
         1b:01:dc:e8:55:98:33:24:b6:8c:b2:fe:b4:8f:ac:c3:ce:84:
         c5:e4:dc:e6:4f:b7:ab:1f:95:61:c7:0d:59:bb:1f:4e:78:aa:
         98:25:5d:9e:8d:3b:f1:48:22:32:13:e6:66:06:76:85:74:cc:
         42:54:7e:f0:b3:e3:b1:70:01:ea:ca:cb:cc:86:13:6b:92:1c:
         8c:00:17:57:82:bd:95:04:82:5a:9c:88:49:8e:8b:9f:52:0c:
         52:06:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client