Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e3132382e302f31372d3234203d3e2036353033.roa
File:                     3138392e3230352e3132382e302f31372d3234203d3e2036353033.roa (raw, json)
Hash identifier:          obCO2X5nrxOG6ttbSajOV9d1SDKKdI+eu6JjB1+Phkw=
Subject key identifier:   D0:4E:C3:01:96:CA:48:A9:CB:B6:32:6B:25:06:20:52:EB:3E:BE:05
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       2BFDF0FD6A0E2958F21B84DA077ED41A205DBF05
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e3132382e302f31372d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:19:00 +0000
ROA not before:           Tue 04 Feb 2025 18:14:00 +0000
ROA not after:            Tue 03 Feb 2026 18:19:00 +0000
asID:                     6503
IP address blocks:        189.205.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:f0:fd:6a:0e:29:58:f2:1b:84:da:07:7e:d4:1a:20:5d:bf:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:14:00 2025 GMT
            Not After : Feb  3 18:19:00 2026 GMT
        Subject: CN=D04EC30196CA48A9CBB6326B25062052EB3EBE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3b:34:0e:77:eb:d5:18:70:98:44:0f:cf:f7:
                    07:c3:06:d0:79:9c:bf:64:c7:0d:87:f1:5e:f4:88:
                    e7:8a:38:4a:cc:a0:5a:9d:53:1b:3e:d1:ec:46:a1:
                    1e:64:1a:5e:e7:18:79:39:f1:85:5a:13:2e:52:2b:
                    d0:ed:17:73:39:d9:87:74:dd:a9:4d:6d:9e:d7:81:
                    89:91:51:97:3c:c9:d3:fa:e9:73:5c:a6:ce:23:6d:
                    93:33:ff:dd:c6:9d:a2:62:df:85:a3:fa:15:70:61:
                    70:5b:78:68:79:b1:51:07:54:8c:51:76:ef:11:2f:
                    98:ad:56:56:d8:0e:db:5e:4f:c3:e0:7c:d1:d3:a6:
                    69:fd:72:db:74:70:8f:b4:de:78:05:54:b9:59:74:
                    dc:d6:b7:33:21:79:e5:5a:8a:f9:de:bd:24:bf:c6:
                    25:b9:fd:85:5c:43:a0:90:00:8e:33:8a:bf:6e:08:
                    2f:8f:d8:dd:40:bc:c8:95:f5:01:db:c2:7b:73:5b:
                    bb:03:ef:65:28:d4:20:35:56:0f:af:30:fd:0c:94:
                    29:ff:9a:fd:33:dd:90:27:65:cc:35:c5:f5:8b:9b:
                    dc:7a:74:e9:32:4e:16:2e:42:b5:05:ab:20:bf:70:
                    fb:8c:92:36:15:87:04:86:55:e7:49:f9:aa:46:b2:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4E:C3:01:96:CA:48:A9:CB:B6:32:6B:25:06:20:52:EB:3E:BE:05
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230352e3132382e302f31372d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.205.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:19:07:30:0d:49:db:3f:42:a6:eb:68:5a:48:53:8e:87:
         98:03:a6:1d:0b:aa:7f:76:0e:06:12:ec:b3:15:e5:21:bb:b1:
         28:63:a7:17:db:3f:f3:64:f8:00:58:97:90:af:25:d8:44:6d:
         bd:80:05:5f:15:e2:39:30:5e:e8:1e:b3:eb:23:0f:ba:6f:fa:
         8d:61:0b:82:75:95:3a:0f:9f:fd:3c:e0:5e:e2:8c:b7:ae:aa:
         6b:26:89:1f:19:53:b1:f7:ab:69:c0:62:ff:ab:ae:14:f4:2c:
         45:43:1a:0d:bd:ff:d3:57:db:ec:2a:6e:61:cb:0e:25:69:37:
         e1:11:4f:38:b7:29:04:70:0c:87:00:be:28:ae:c8:41:9f:05:
         aa:9e:a5:c5:cc:2e:07:f8:97:c2:8c:bd:ad:bd:9a:b5:5a:db:
         b8:7e:be:45:0e:bd:5d:fa:e2:9f:ab:14:5c:aa:9e:bc:9d:5c:
         c8:26:66:f3:a7:ec:60:7b:f0:36:e7:b1:3a:3d:29:9f:73:0b:
         c7:e6:ef:e5:f2:8a:19:92:eb:9e:a4:e9:cc:6c:33:b3:43:9c:
         81:8f:5d:2d:0f:57:c5:5d:c1:94:cf:7a:0f:c4:38:c1:26:92:
         b4:be:3f:32:d2:5e:58:12:84:ff:40:f5:bf:58:8a:ef:94:79:
         14:f1:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client