Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e302e302f31372d3234203d3e2036353033.roa
File:                     3138392e3230352e302e302f31372d3234203d3e2036353033.roa (raw, json)
Hash identifier:          TOt9raNvl8YrzvVdQr/Gjz1ge+iRCQfOWav2fMuANhQ=
Subject key identifier:   E7:A4:4B:C2:1D:C1:BB:9C:A2:5C:58:DC:50:06:A0:2A:6F:CD:1F:B2
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       101CE1CD129AA546FF488310D33B90BC3CB08E60
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e302e302f31372d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:51 +0000
ROA not before:           Tue 04 Feb 2025 18:13:51 +0000
ROA not after:            Tue 03 Feb 2026 18:18:51 +0000
asID:                     6503
IP address blocks:        189.205.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1c:e1:cd:12:9a:a5:46:ff:48:83:10:d3:3b:90:bc:3c:b0:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:51 2025 GMT
            Not After : Feb  3 18:18:51 2026 GMT
        Subject: CN=E7A44BC21DC1BB9CA25C58DC5006A02A6FCD1FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:47:67:38:ec:60:79:3f:62:08:7c:01:55:
                    28:ee:22:a1:eb:8e:61:f3:b6:0f:0c:95:e8:39:64:
                    42:be:10:12:81:de:da:f7:ee:3c:fa:e1:e4:a4:e6:
                    9f:3f:30:25:dd:e8:7f:9b:8f:15:eb:39:49:5f:f4:
                    d9:30:2a:06:09:78:64:06:59:f0:ae:47:d4:29:d1:
                    f3:a0:88:48:21:61:33:dd:70:4d:4e:a3:d8:64:14:
                    11:0d:65:4f:be:05:16:e6:db:b6:00:6b:9f:0d:c0:
                    65:6e:93:a5:1c:13:d4:3f:95:3a:2a:91:f9:fb:54:
                    a9:3c:ab:22:5c:a8:31:a6:28:15:a5:1a:ee:18:b2:
                    df:e5:e3:5c:02:b0:76:e9:7c:e0:8a:0c:13:5a:ba:
                    9b:ec:cb:84:bd:d1:91:f7:76:a1:07:93:84:a0:73:
                    c3:ad:2a:ac:b0:8e:cd:11:15:cb:90:73:a2:4b:46:
                    69:7c:bb:56:fa:12:c6:52:b4:5a:59:f9:5a:4f:3d:
                    cb:3b:68:96:00:74:ee:4a:3f:fb:0c:84:0c:2b:f5:
                    30:10:19:b1:38:a9:05:12:aa:f1:c1:b1:67:a5:21:
                    16:74:60:2c:eb:56:fd:85:ab:26:9d:cb:0f:87:df:
                    90:f5:76:df:4a:65:d0:2e:73:ec:ae:b0:77:9b:ed:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:4B:C2:1D:C1:BB:9C:A2:5C:58:DC:50:06:A0:2A:6F:CD:1F:B2
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e302e302f31372d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.205.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:43:45:b0:f4:ab:b8:e7:6f:c6:54:12:30:09:ca:40:b5:cb:
         bd:40:9a:35:31:84:b3:1f:c0:2e:df:b3:0c:ee:0f:b4:83:54:
         cc:b0:33:ee:bb:77:16:ab:67:aa:85:05:75:67:d0:37:f5:6d:
         0b:8d:2f:57:d9:7d:cf:4c:cf:1a:2e:2f:8b:e3:23:33:1f:4d:
         d9:70:58:9a:26:9c:04:ea:dd:80:32:32:a3:95:1b:09:66:29:
         48:94:79:2f:55:2f:a3:2a:9e:35:f9:4d:15:67:1b:55:7c:ca:
         8e:73:f6:e5:8b:8d:2e:21:24:06:06:ff:c4:8f:eb:27:58:0e:
         e6:f6:52:65:42:a6:a3:fe:4b:14:29:02:4a:b2:85:9e:b7:57:
         41:2d:b9:89:d5:be:65:74:74:16:39:84:f3:c7:b4:a8:53:b5:
         42:b6:e6:3e:d9:c6:1e:4d:11:70:0f:02:58:39:13:20:2e:f0:
         dd:6c:c2:c2:dd:94:c8:3f:53:78:c5:fe:8a:0d:e5:62:64:84:
         a5:a3:23:d8:d9:9e:3d:1c:a0:48:24:f0:a1:ce:e1:f2:e9:18:
         02:8c:6b:b6:c7:59:15:78:3a:1e:1c:b2:58:6d:52:1a:c4:9d:
         3c:0a:19:57:08:b9:9a:23:18:4b:0d:0a:42:a8:26:58:5d:da:
         3a:1a:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:46 2025 by rpki-client