Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/3139322e31322e3131382e302f32342d3234203d3e20323636383138.roa
File:                     3139322e31322e3131382e302f32342d3234203d3e20323636383138.roa (raw, json)
Hash identifier:          ozm7faBQJhqUZ6H9Vf4diCWzHiNUn2ngCSve1E0RDac=
Subject key identifier:   51:1C:BE:BD:45:92:B3:B9:22:94:38:E2:89:C9:FC:16:C0:2A:04:12
Certificate issuer:       /CN=E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6
Certificate serial:       786845540F8B1BC599C843ADAF9F30FB8C565EFE
Authority key identifier: E9:3D:83:07:A7:37:FA:98:B8:AB:D4:3C:7D:C9:B0:44:1C:AA:92:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/3139322e31322e3131382e302f32342d3234203d3e20323636383138.roa
Signing time:             Tue 04 Feb 2025 18:42:07 +0000
ROA not before:           Tue 04 Feb 2025 18:37:07 +0000
ROA not after:            Tue 03 Feb 2026 18:42:07 +0000
asID:                     266818
IP address blocks:        192.12.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:68:45:54:0f:8b:1b:c5:99:c8:43:ad:af:9f:30:fb:8c:56:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6
        Validity
            Not Before: Feb  4 18:37:07 2025 GMT
            Not After : Feb  3 18:42:07 2026 GMT
        Subject: CN=511CBEBD4592B3B9229438E289C9FC16C02A0412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:92:43:61:4c:91:d3:0c:eb:97:15:5e:71:
                    e5:91:a3:e3:b5:11:bf:10:2f:6d:98:75:89:dd:4b:
                    0b:77:93:be:27:75:c8:b9:89:28:f1:61:9c:8e:75:
                    80:5d:85:b1:ca:b4:1c:ff:ba:e4:48:55:83:07:97:
                    89:86:f0:f6:e7:ec:c3:46:58:92:35:76:b4:35:8f:
                    1e:ce:cf:7f:b6:a3:ae:44:41:e0:33:59:7a:94:6d:
                    20:51:56:78:85:44:11:8e:cb:1b:eb:e5:45:ce:e6:
                    b9:6b:41:30:28:d5:8b:dc:83:e3:9b:a2:eb:ea:49:
                    59:30:3d:4d:97:e0:dd:e4:b6:4e:39:99:cf:50:d0:
                    bc:a1:ca:e7:19:b0:81:81:38:32:a7:17:20:38:fb:
                    c6:f8:6d:f9:4a:ec:2d:34:8c:df:9b:84:97:0f:81:
                    b2:08:c1:3d:d0:4c:25:89:a4:c7:ea:44:4c:cc:3a:
                    45:9d:52:60:e9:7d:1a:d3:d6:b8:1f:41:22:97:78:
                    d3:be:99:a6:40:9f:b9:dc:26:35:f1:db:85:7e:7a:
                    fc:32:20:d9:9a:8c:7f:ec:f6:a4:93:a6:65:57:d6:
                    ca:06:53:62:6c:a8:f1:8a:48:b5:b3:fe:3e:82:24:
                    26:b1:44:6a:2f:5a:ce:3c:69:12:88:56:e6:df:c6:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:BE:BD:45:92:B3:B9:22:94:38:E2:89:C9:FC:16:C0:2A:04:12
            X509v3 Authority Key Identifier:
                keyid:E9:3D:83:07:A7:37:FA:98:B8:AB:D4:3C:7D:C9:B0:44:1C:AA:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/3139322e31322e3131382e302f32342d3234203d3e20323636383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:08:f9:93:8f:42:cb:cf:e0:f8:e0:0c:87:85:6d:6d:df:6f:
         71:12:e5:dd:d1:f8:74:53:13:41:78:ec:38:bd:71:2c:10:d8:
         4e:09:c5:89:9a:8c:75:e0:63:1e:39:3b:7b:24:33:97:82:51:
         99:6c:1e:ae:f6:c0:6e:9e:5d:3c:55:52:dd:50:b7:ec:dc:ae:
         a4:ac:b9:21:1c:bb:42:6e:57:7e:d8:36:b5:48:10:24:e5:2e:
         c8:da:2d:0a:b7:a3:97:e1:49:ec:96:84:ac:91:7f:a4:94:68:
         ff:89:e2:63:9c:c8:0d:44:35:1e:64:8f:36:7d:03:5d:ac:ce:
         f1:a5:aa:50:6e:c0:ec:49:c5:4e:54:87:70:c3:3e:7b:83:c1:
         95:92:17:d4:0d:34:6d:4c:42:79:fc:19:a6:1f:0c:2b:6c:96:
         c8:64:d3:b3:25:8e:7b:44:63:17:ea:c2:b2:dd:3f:c3:e9:1a:
         d5:5f:e4:f8:2e:a9:89:b3:74:06:25:74:f7:38:52:65:ea:e6:
         6a:88:02:b2:24:07:1b:63:03:46:9c:a5:29:a4:20:49:cd:e5:
         19:b2:76:89:ee:61:0d:0c:62:bf:9a:02:12:16:56:77:c1:f1:
         b8:93:71:80:16:1a:09:96:1b:2c:ea:fe:ec:27:7a:af:63:f8:
         4f:be:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:07:11 2025 by rpki-client