Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135312e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3135312e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          uPJPi7k6IzypGxBu604nONpzN0fWUZv9H0Gso1X0Cv0=
Subject key identifier:   49:68:E4:61:67:19:94:BE:91:05:D7:55:7D:F9:93:59:1A:66:9A:BD
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       3513537E8A375E67252A08AC3321DCED5BA30384
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135312e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 04 Feb 2025 18:18:40 +0000
ROA not before:           Tue 04 Feb 2025 18:13:40 +0000
ROA not after:            Tue 03 Feb 2026 18:18:40 +0000
asID:                     265786
IP address blocks:        192.141.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:13:53:7e:8a:37:5e:67:25:2a:08:ac:33:21:dc:ed:5b:a3:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Feb  4 18:13:40 2025 GMT
            Not After : Feb  3 18:18:40 2026 GMT
        Subject: CN=4968E461671994BE9105D7557DF993591A669ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:3b:ce:ae:77:c4:2d:37:83:ef:b6:97:31:
                    84:30:16:4e:e6:47:74:82:c6:72:41:2a:07:71:19:
                    12:ae:91:2c:1d:77:56:83:fa:2b:7b:e3:e3:3c:c5:
                    68:3b:2b:b8:8a:3d:1c:ef:03:81:4c:da:99:df:50:
                    e9:4b:b1:e8:cd:b7:fc:6c:f2:f2:64:a7:cc:16:8a:
                    d3:f5:6f:05:28:bb:d3:17:d0:fe:c3:f7:eb:6a:1d:
                    3f:0e:df:9c:20:b8:6c:b7:19:b3:de:64:b8:20:0b:
                    64:e1:aa:a5:ff:aa:30:28:a6:74:62:75:b2:21:4d:
                    a9:a7:46:5c:31:4c:ce:45:fd:95:91:56:7e:84:7d:
                    30:71:af:25:8b:e0:c2:97:59:e1:94:c6:d0:08:77:
                    97:15:46:a0:76:82:3d:c2:a2:0c:96:f6:dd:c6:c2:
                    2b:51:c1:e9:2e:12:fc:92:8c:69:c7:0c:31:a2:7b:
                    a9:c1:67:64:cb:63:b0:11:43:a9:7d:91:7f:0b:6e:
                    6f:68:6d:b6:ea:c1:eb:32:79:0c:34:fa:5a:cb:42:
                    9f:6e:3e:27:9c:3e:10:4a:80:65:61:59:18:23:f1:
                    8f:0d:7c:45:c6:70:a9:c9:fc:68:5e:c4:53:12:1a:
                    ca:82:7f:c5:f1:18:00:f6:08:03:e8:66:a9:05:d0:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:68:E4:61:67:19:94:BE:91:05:D7:55:7D:F9:93:59:1A:66:9A:BD
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135312e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:02:bd:5c:dc:7c:93:50:8e:b8:2e:4b:04:fe:9c:9d:b1:8e:
         5c:53:f4:28:1f:09:5b:40:09:47:a5:0a:a7:4a:8c:a7:e3:c5:
         63:aa:cc:0f:b9:60:b5:07:23:e8:fe:19:2a:a7:33:46:f8:10:
         bf:58:49:b8:cd:a3:36:06:05:93:c2:84:96:75:5f:75:4c:81:
         4f:f5:0b:e4:a4:32:fb:19:5c:96:4a:3a:44:2c:e2:b5:b7:3d:
         b5:a1:0c:5f:06:0f:2a:12:a1:a9:aa:40:da:67:0a:eb:6b:47:
         91:77:2c:f7:c7:3a:5e:53:de:3b:5f:b4:c6:67:4c:56:3e:ca:
         51:82:6f:48:89:f6:e1:80:27:71:d9:10:4a:c2:dd:8e:56:73:
         6a:b5:69:5c:1e:db:0e:b7:55:0f:97:67:29:65:17:16:d3:ea:
         fd:ef:43:fb:88:9a:ef:1f:59:95:14:39:1e:02:88:37:38:fc:
         4b:3f:39:6e:44:cb:d9:7b:e3:36:99:04:67:53:5b:7f:43:ce:
         a8:4b:51:b0:b3:b1:c5:a5:30:06:96:28:c2:33:48:40:71:2b:
         76:f6:16:37:24:28:df:30:9f:ef:67:cd:7a:3a:8f:d6:c4:96:
         37:3b:d6:49:64:a1:90:bc:c8:67:e8:7d:1e:1d:0d:6a:fe:ec:
         37:24:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:59 2025 by rpki-client