Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133312e3235352e34302e302f32322d3234203d3e20323633383234.roa
File:                     3133312e3235352e34302e302f32322d3234203d3e20323633383234.roa (raw, json)
Hash identifier:          zooV9bPMc0+G6U0/duarGOQgd5lFnGUbnVtKmBz1z3g=
Subject key identifier:   F7:C3:5A:7D:B8:FB:42:45:1E:0E:89:68:E9:09:E0:9E:AF:84:C7:71
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       0A8E11B04FFF213F75C44D1508A98FB563056A68
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133312e3235352e34302e302f32322d3234203d3e20323633383234.roa
Signing time:             Thu 16 Jan 2025 20:25:00 +0000
ROA not before:           Thu 16 Jan 2025 20:20:00 +0000
ROA not after:            Thu 15 Jan 2026 20:25:00 +0000
asID:                     263824
IP address blocks:        131.255.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8e:11:b0:4f:ff:21:3f:75:c4:4d:15:08:a9:8f:b5:63:05:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Jan 16 20:20:00 2025 GMT
            Not After : Jan 15 20:25:00 2026 GMT
        Subject: CN=F7C35A7DB8FB42451E0E8968E909E09EAF84C771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:41:81:7f:21:9a:66:62:e3:90:d0:b3:9a:
                    84:36:6f:a6:f3:60:5f:f4:67:e8:d3:dc:e7:a4:2c:
                    64:83:f0:3f:7b:5b:83:e8:16:fd:27:e2:0a:3f:90:
                    fc:31:b2:ea:c1:89:fb:42:f7:88:10:e1:3f:e5:26:
                    77:a1:34:e0:fb:97:ee:70:a2:0d:59:34:99:80:ba:
                    40:46:9e:af:5c:18:10:6e:3e:2f:d4:9c:e6:a0:b0:
                    04:39:6b:fe:de:78:77:74:79:fe:ed:09:52:72:0e:
                    a9:d9:ab:5d:d5:26:73:2a:aa:eb:21:7d:7a:fd:1f:
                    52:ba:dc:58:73:29:87:89:73:2b:de:07:0d:e1:b4:
                    d4:4e:5a:6d:ab:e5:16:68:76:9c:7c:ac:a1:d8:26:
                    17:2d:6b:c2:a5:35:27:fc:e1:fa:d4:34:3e:68:74:
                    fa:da:93:b1:55:e0:63:02:e8:9f:1b:d0:90:5b:14:
                    12:3b:0f:80:6e:e6:75:04:9c:b4:f8:c6:6c:f6:61:
                    f2:c5:76:4a:52:d0:ba:13:0c:6e:d3:2a:4c:6a:c6:
                    7f:7a:4c:9a:23:e3:fd:e3:f0:5f:69:28:3d:9e:28:
                    e1:4f:1c:cc:1a:2f:75:3c:e5:9a:b7:95:dd:76:35:
                    ec:72:6f:10:e8:27:b8:1e:f2:58:4d:a7:ec:fd:28:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C3:5A:7D:B8:FB:42:45:1E:0E:89:68:E9:09:E0:9E:AF:84:C7:71
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133312e3235352e34302e302f32322d3234203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:2c:c8:de:bb:5e:15:00:0e:cc:e1:2b:d9:c2:5f:a4:5c:
         b3:67:9a:8a:b2:55:62:e8:14:91:fb:87:92:a4:95:56:9f:15:
         9f:09:e9:f4:13:73:73:2d:b6:d1:15:2b:c4:18:63:64:d1:36:
         27:af:92:f9:bf:49:56:ad:0b:0c:9b:31:af:6f:87:2f:5c:62:
         44:f8:b2:87:83:b4:7e:28:e1:aa:7c:54:4c:f6:81:8c:91:38:
         cd:83:2c:18:65:0b:3a:d3:3c:72:12:b9:35:e6:f8:9c:a0:a7:
         87:a3:6f:77:4e:03:07:9f:7e:df:57:e4:80:87:df:4f:21:ae:
         d6:11:74:5c:32:e9:c1:2d:97:f5:3e:41:4a:1a:f5:42:56:43:
         78:38:a3:e8:bc:d0:b4:81:f8:d4:da:9b:23:37:00:c9:d1:3c:
         24:93:c6:68:39:0b:85:ce:d9:5f:ef:61:0d:24:93:d6:78:f3:
         1a:03:75:d1:02:1e:34:9c:0c:27:29:b3:eb:73:a3:06:03:ae:
         95:a3:7a:dd:a8:54:e3:fe:df:69:da:b5:37:f1:87:ef:a1:96:
         5f:55:41:fe:33:a9:e5:22:8a:e2:98:dd:d9:6d:8f:39:2d:2a:
         9a:c8:02:46:e0:42:b2:12:df:18:46:df:cb:41:0f:75:36:3d:
         f0:06:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----