Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          BouXnuiX7bSQIdqlaFSEQLNaKjNqUJTkLkfHH/1hCbQ=
Subject key identifier:   29:9A:7C:75:91:87:50:C2:69:8A:C7:A0:91:53:CA:52:8E:4D:7B:4C
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       770B72490CBBCC0D0069602E7EF66993F45E6B10
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 04 Feb 2025 18:18:41 +0000
ROA not before:           Tue 04 Feb 2025 18:13:41 +0000
ROA not after:            Tue 03 Feb 2026 18:18:41 +0000
asID:                     265786
IP address blocks:        192.141.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0b:72:49:0c:bb:cc:0d:00:69:60:2e:7e:f6:69:93:f4:5e:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Feb  4 18:13:41 2025 GMT
            Not After : Feb  3 18:18:41 2026 GMT
        Subject: CN=299A7C75918750C2698AC7A09153CA528E4D7B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:f7:17:65:e5:e6:9f:bc:52:1d:c6:e8:9a:
                    1f:ff:66:5e:4f:fe:b4:75:2d:0e:28:63:50:86:98:
                    f5:24:7e:3b:51:b2:d2:18:45:fd:35:a5:e1:a3:2e:
                    7a:53:74:0a:92:c4:a2:d8:b4:3c:92:1e:bb:84:ce:
                    13:e9:3e:22:16:00:53:da:bd:48:8b:7c:80:f1:d0:
                    50:a3:51:fd:23:f7:7e:14:82:d7:3e:de:90:5b:2b:
                    c4:c0:7e:6a:f9:db:a6:ab:26:96:fa:74:cf:78:36:
                    be:d4:18:62:52:66:94:0d:72:8f:81:41:66:71:5d:
                    45:90:dd:8c:24:82:d3:a7:ac:e7:98:37:ae:b3:97:
                    fe:03:da:6a:40:59:35:f6:ad:05:82:26:64:f2:d1:
                    82:06:a6:cb:65:a7:79:d9:42:f4:34:07:b4:57:14:
                    a4:36:aa:72:10:16:d0:c8:1f:64:dd:2d:41:fd:16:
                    62:a0:ef:15:e6:73:f1:c2:2f:89:6e:3a:4b:7a:af:
                    08:70:81:76:f7:dd:8c:b8:b9:22:21:67:bf:cb:82:
                    04:48:b3:c9:46:05:8c:4e:3a:f1:2b:2d:fa:96:eb:
                    85:67:29:97:76:32:21:f0:34:27:a8:d4:a2:d4:91:
                    ff:8b:27:cb:2d:6a:fe:1f:9a:1d:3f:91:ca:b8:43:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:7C:75:91:87:50:C2:69:8A:C7:A0:91:53:CA:52:8E:4D:7B:4C
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:25:cc:56:80:10:c5:0e:b8:96:6f:f5:a3:68:7d:94:a2:20:
         39:83:4c:d1:a2:b1:47:bb:b4:1a:38:d9:16:0f:09:db:ee:5a:
         8b:09:80:a4:7e:57:e1:13:48:fd:ed:2e:d1:ef:ae:b8:fe:9d:
         43:bc:ea:b2:e4:29:da:d7:eb:56:b4:7c:77:b4:0f:a7:7c:d9:
         c8:4f:33:b5:0c:a5:b1:50:80:1d:9a:44:c5:52:55:3b:38:22:
         9c:d3:41:5a:fd:7c:b6:ef:bc:ed:58:5e:a6:06:e4:95:5a:c7:
         fd:45:f7:e8:85:c3:f8:b6:25:60:fe:e2:89:a7:75:12:77:db:
         d7:3c:ce:dd:4e:c3:44:07:c7:93:3e:72:c7:80:0f:80:79:7f:
         ec:85:9c:bd:00:67:0e:c0:58:9b:f8:c5:32:36:99:c0:03:de:
         00:77:8b:f3:76:80:ef:a2:b5:9b:39:5f:8f:7a:d6:ca:8d:c9:
         5c:b1:57:a9:bd:15:e2:ff:b6:07:90:8b:ca:23:13:e8:94:b8:
         33:62:86:46:3c:c0:e3:69:d3:69:06:b8:73:f4:52:b8:c7:32:
         03:55:80:69:40:2c:ce:f0:41:62:80:a1:c5:9e:62:c5:02:9e:
         9e:47:ca:19:17:bd:ae:2b:35:96:7e:d4:7f:af:cc:2c:3d:f6:
         0f:be:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:58 2025 by rpki-client