Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/be3e45b62422def1e975c19855b8f50076bd24e6.roa
File:                     be3e45b62422def1e975c19855b8f50076bd24e6.roa (raw, json)
Hash identifier:          yBCJYV1gnHh741C0yHwsmoq8iAfaTVL9jeT72lD7bTE=
Subject key identifier:   CA:44:D4:37:E2:13:27:13:91:DE:61:4A:A4:1C:6D:9D:8C:B7:E9:04
Certificate issuer:       /CN=0b38efd4dcf424862de151d45262c81ae7ac849b
Certificate serial:       02A3
Authority key identifier: 6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b38efd4dcf424862de151d45262c81ae7ac849b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/be3e45b62422def1e975c19855b8f50076bd24e6.roa
Signing time:             Tue 28 Feb 2023 12:36:44 +0000
ROA not before:           Mon 27 Feb 2023 12:32:52 +0000
ROA not after:            Fri 28 Feb 2025 12:32:52 +0000
asID:                     13424
IP address blocks:        190.13.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b38efd4dcf424862de151d45262c81ae7ac849b
        Validity
            Not Before: Feb 27 12:32:52 2023 GMT
            Not After : Feb 28 12:32:52 2025 GMT
        Subject: CN=be3e45b62422def1e975c19855b8f50076bd24e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:b7:0c:79:46:ea:ab:91:13:6e:83:8b:9a:
                    96:00:be:f8:e5:67:e1:25:41:c7:16:57:97:78:f9:
                    0d:03:a7:cb:60:f7:9b:47:bf:40:8a:1c:fe:2a:98:
                    03:84:cd:f4:21:a6:30:f8:69:49:00:8a:e8:62:06:
                    bd:48:42:ae:c5:09:e0:0a:85:7b:e6:70:7b:0b:3e:
                    c6:5a:6f:48:65:78:83:31:66:21:c1:0c:37:c0:ea:
                    d8:89:e6:25:11:e3:3e:52:1a:64:78:35:80:9c:dc:
                    c6:85:0b:76:6c:25:3f:94:0b:a1:cb:72:03:0c:cd:
                    0c:6d:52:3c:22:1e:4b:0f:aa:98:1b:36:3a:79:21:
                    e3:81:d1:b4:b5:e1:a0:12:9d:ec:95:9b:49:e9:b5:
                    ac:ad:1b:78:a6:2f:d1:90:28:9d:97:78:75:ad:f9:
                    b4:2a:ef:3b:01:db:46:ce:37:a7:26:e2:42:b8:18:
                    a4:0f:78:5b:d2:37:f3:52:ea:fe:77:17:cb:21:93:
                    4b:3c:41:88:5e:69:c6:00:b7:26:0a:c0:0f:52:6a:
                    e6:02:02:64:88:2b:0d:6b:e5:2e:dd:e7:05:bf:e1:
                    a6:e2:84:06:36:44:09:59:15:32:e1:88:32:2a:c4:
                    dc:17:bd:9e:d8:ad:58:84:74:12:15:5f:6b:3b:73:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:D4:37:E2:13:27:13:91:DE:61:4A:A4:1C:6D:9D:8C:B7:E9:04
            X509v3 Authority Key Identifier:
                keyid:6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b38efd4dcf424862de151d45262c81ae7ac849b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/be3e45b62422def1e975c19855b8f50076bd24e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/0b38efd4dcf424862de151d45262c81ae7ac849b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:26:20:58:38:9c:54:73:f5:13:2b:e9:d9:c7:0f:b3:46:05:
         fb:e5:b7:0f:e2:88:20:36:d9:6a:21:cd:87:7b:96:0d:28:d9:
         c7:48:b3:ca:01:8f:bb:3c:78:96:ad:3f:35:d8:ad:ba:17:b5:
         f8:66:23:37:e9:90:5e:ab:01:8a:14:a6:42:ee:7b:ad:9d:b6:
         6b:55:0f:ec:b7:cd:16:e7:b6:ef:c9:fe:dc:31:89:3e:31:17:
         ce:07:bf:cc:bf:9c:8e:4d:56:a7:f3:dc:3e:c4:54:44:79:e6:
         56:d8:39:b4:67:b5:c3:75:fb:9e:5d:cb:06:bb:73:9b:35:34:
         d0:f4:f2:1a:f1:68:0e:2f:70:5f:93:21:d6:18:c3:e8:83:7e:
         67:72:bd:de:7c:00:c3:1a:e0:71:eb:7b:da:40:5b:4a:7c:56:
         d5:43:a6:e9:f7:7f:71:72:3a:71:c3:63:0d:8b:f4:fb:4a:46:
         e7:c0:77:8a:1b:dd:4a:64:9d:86:b1:8b:51:da:1e:ae:26:0c:
         4c:1f:a5:fb:bb:cf:d0:84:b9:8c:88:43:7a:de:45:3e:4e:e8:
         f9:3b:c3:b2:c3:cf:bd:0c:87:f9:8b:37:0e:b5:08:28:9c:05:
         9c:cb:b7:d9:92:e0:d7:52:ba:b7:6a:13:44:a4:d0:0a:b1:43:
         0c:d0:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:23:29 2025 by rpki-client