Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3136382e3139352e3132342e302f32322d3234203d3e20323632323431.roa
File:                     3136382e3139352e3132342e302f32322d3234203d3e20323632323431.roa (raw, json)
Hash identifier:          iOq2URQX5w1/bxItQHAlDH1v9L7blgJZw/4I48QY41A=
Subject key identifier:   79:84:D6:72:60:3B:1B:AC:4D:4C:14:FB:A4:1F:68:4F:30:4F:B2:03
Certificate issuer:       /CN=96EAFA0906A1E2F48685E9D99165923172C806EA
Certificate serial:       4AB099F836EFBB85533C651B64B9E35B9A167A83
Authority key identifier: 96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3136382e3139352e3132342e302f32322d3234203d3e20323632323431.roa
Signing time:             Tue 05 Mar 2024 17:55:49 +0000
ROA not before:           Tue 05 Mar 2024 17:50:49 +0000
ROA not after:            Tue 04 Mar 2025 17:55:49 +0000
asID:                     262241
IP address blocks:        168.195.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:99:f8:36:ef:bb:85:53:3c:65:1b:64:b9:e3:5b:9a:16:7a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EAFA0906A1E2F48685E9D99165923172C806EA
        Validity
            Not Before: Mar  5 17:50:49 2024 GMT
            Not After : Mar  4 17:55:49 2025 GMT
        Subject: CN=7984D672603B1BAC4D4C14FBA41F684F304FB203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:d5:00:48:0c:be:a7:fa:95:45:c7:94:00:
                    a8:40:ee:d3:b8:12:04:d3:d6:df:ee:5f:1d:33:bc:
                    76:f0:54:48:5c:b6:e4:37:5b:74:55:5c:e4:04:fe:
                    04:16:33:9c:ab:1a:86:30:93:55:28:a0:5c:42:55:
                    65:c7:f5:c9:82:ef:fb:ee:b7:07:bf:0a:9c:d4:4b:
                    5b:ec:62:f2:36:79:9a:07:f0:9f:18:31:85:03:3e:
                    8b:6b:85:93:fe:3c:d1:30:eb:09:15:1a:a8:26:73:
                    7b:9d:e6:58:cc:ff:eb:55:f3:1b:5d:21:94:c1:36:
                    9b:4c:2a:78:1d:15:6d:65:3f:6f:7a:c1:81:5c:76:
                    69:19:53:a0:8c:0e:44:1d:b9:22:5f:0e:67:fb:11:
                    32:ec:f7:10:39:4c:80:73:ea:f9:c8:0b:13:e2:6c:
                    66:08:c6:3d:6c:2e:08:b8:c3:29:e9:84:d5:86:eb:
                    fc:e9:a0:b0:77:a2:03:76:8c:20:be:92:07:88:3c:
                    9e:7b:95:16:6c:df:fd:9c:9c:c8:5a:e1:f0:27:84:
                    94:b0:63:0b:d1:36:2d:ef:7f:09:6c:30:6c:e3:93:
                    3e:14:69:2b:6e:c3:31:b8:b3:00:f3:12:c2:35:28:
                    67:b9:87:4f:46:c4:d8:a2:bd:eb:bc:a2:16:d5:4b:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:D6:72:60:3B:1B:AC:4D:4C:14:FB:A4:1F:68:4F:30:4F:B2:03
            X509v3 Authority Key Identifier:
                keyid:96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/96EAFA0906A1E2F48685E9D99165923172C806EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3136382e3139352e3132342e302f32322d3234203d3e20323632323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:41:d4:6b:bc:a9:16:1f:d3:da:fc:e7:41:7a:82:c2:1c:72:
         c1:8b:17:c2:a6:f5:70:82:30:69:a1:2c:87:3d:cb:ae:40:59:
         eb:dd:64:bf:90:55:0d:26:b4:f7:27:85:68:dd:44:a5:a1:e6:
         6b:e8:61:65:1b:2a:52:df:db:5b:5b:76:4c:5f:39:ba:13:12:
         12:7e:f8:9d:6b:ea:49:05:a4:7d:7f:f7:ee:f7:a7:81:f7:3e:
         60:06:b4:eb:87:7d:b6:2a:1f:2f:30:8e:ae:49:9d:76:e4:3b:
         61:7e:15:9f:29:00:01:2b:87:da:96:b9:58:9a:a3:44:d2:8c:
         f1:aa:84:bc:79:da:7d:e6:52:af:13:55:71:97:af:b9:26:e6:
         e5:d3:6b:b8:29:af:6d:b3:07:81:7e:9b:81:f8:4a:03:46:71:
         b1:b2:70:80:77:b5:29:b5:08:06:8a:66:b4:d0:4c:f6:e1:df:
         46:ba:6b:3f:5b:ac:42:01:3d:79:aa:b3:3c:8a:3c:3d:f6:6a:
         5e:c7:46:f7:7b:f0:a0:22:6d:cb:a4:78:2b:62:9d:a9:67:2c:
         af:d8:ea:45:a0:0d:9b:f5:23:bc:31:63:8d:61:f7:64:6b:66:
         7e:4f:e1:bb:42:e3:9d:c7:b6:fa:5e:c3:86:15:83:4a:78:65:
         60:a5:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:40:18 2025 by rpki-client