Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
File:                     3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa (raw, json)
Hash identifier:          aIAExg/gOeXhOq3nH3osHx1oSByW+cAMycWu0Uojk9A=
Subject key identifier:   64:9D:AD:82:4A:4D:84:BB:A2:F9:34:8C:F2:10:9E:9C:2F:DE:0B:07
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       44D31E8E472F33763383C3E1B87760AACE6174B2
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:28 +0000
ROA not before:           Tue 04 Feb 2025 18:06:28 +0000
ROA not after:            Tue 03 Feb 2026 18:11:28 +0000
asID:                     19169
IP address blocks:        168.197.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d3:1e:8e:47:2f:33:76:33:83:c3:e1:b8:77:60:aa:ce:61:74:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:28 2025 GMT
            Not After : Feb  3 18:11:28 2026 GMT
        Subject: CN=649DAD824A4D84BBA2F9348CF2109E9C2FDE0B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:cf:bf:7e:c7:4a:0e:2c:9f:48:52:7e:16:
                    aa:13:b7:c3:ac:e9:2e:ab:71:24:2e:93:ab:00:68:
                    17:de:7c:5a:90:98:03:94:b6:0a:71:c6:40:0c:b7:
                    dc:10:eb:15:d4:87:c0:70:e2:1d:f4:00:25:40:66:
                    14:f9:49:bb:3b:2d:1b:ec:fb:dc:f9:f5:bd:99:76:
                    a4:b9:d3:b1:28:a8:0b:0c:7e:57:91:6e:f3:b4:19:
                    f1:83:e1:ea:2b:a0:30:28:14:54:18:a5:87:3a:a6:
                    97:34:b7:6f:34:87:8c:b2:f9:9b:a3:77:c1:8d:b1:
                    06:08:2c:2e:62:ce:56:cc:9a:eb:b2:d2:bb:9d:75:
                    89:17:c4:e4:af:fe:bf:e9:67:67:71:f2:37:5c:ec:
                    56:eb:f9:09:dc:ef:f4:d6:2d:b7:bc:90:74:60:cf:
                    50:93:a2:b7:a0:3f:cc:89:96:af:f3:d6:22:7b:bf:
                    17:50:4d:dd:dd:c0:fc:2e:2e:03:e2:79:77:0d:c2:
                    9b:1e:ea:f5:b4:1c:53:11:bd:0f:1f:9a:1f:d7:a4:
                    68:ad:21:df:68:2d:df:79:01:e3:df:a2:1d:b7:3d:
                    fc:45:94:0c:ea:b3:0d:30:1c:89:66:a6:eb:25:79:
                    ab:2b:a2:f3:82:8f:f7:0a:5c:e6:e8:a0:bc:f2:9b:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:AD:82:4A:4D:84:BB:A2:F9:34:8C:F2:10:9E:9C:2F:DE:0B:07
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:47:c9:2a:40:d1:f9:03:e4:a5:6c:4d:7c:7c:c0:ee:51:15:
         09:d1:d6:86:59:e0:90:89:7f:51:61:1a:bb:30:30:84:b3:6a:
         9e:df:97:63:03:5e:73:a8:2e:1b:dd:fa:6c:1a:09:f5:6d:3b:
         1e:fc:ef:8d:1c:59:89:b0:0a:54:27:b0:e1:b1:ff:d2:fc:d3:
         24:f9:cc:98:94:05:4a:f4:2e:55:24:a6:90:24:21:03:c9:ea:
         15:78:12:4a:9e:53:4e:f7:52:21:86:37:bc:fd:50:d6:21:f1:
         83:c6:ae:7b:54:5f:00:a3:1c:b6:5a:5d:83:ea:91:54:a5:a9:
         16:70:47:f6:aa:77:a9:af:d5:5c:98:65:fc:c5:d7:aa:7f:76:
         ed:f9:f6:c8:77:de:ee:b6:29:c5:f6:6b:a8:6d:2d:66:92:63:
         8d:03:08:ff:9c:f0:ef:97:1d:20:35:7b:be:4e:75:31:32:2b:
         4c:28:8c:ea:35:03:50:47:6b:18:5b:ad:bc:5f:86:2b:3d:6f:
         73:a9:60:03:a1:e3:b4:fe:4f:e8:bf:0f:53:99:32:a9:dc:8d:
         a0:2d:3a:48:96:7e:2c:98:87:6e:e7:7b:2f:88:64:1f:60:85:
         ac:5c:04:ca:f0:5f:f1:49:83:b6:8c:3f:dc:37:5d:00:42:c8:
         55:80:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:05 2025 by rpki-client