Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa
File:                     3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa (raw, json)
Hash identifier:          nwH++tw4G9WijaE5xdLqxQZqWVZWZYHndbvNZdU6JEg=
Subject key identifier:   8B:63:A9:1C:7F:21:E7:FE:DE:71:79:82:35:D6:0B:72:5C:7B:CF:93
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       09BA4A882F028CC7097B7A824527C4178FC582A1
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa
Signing time:             Sat 30 Nov 2024 15:00:00 +0000
ROA not before:           Sat 30 Nov 2024 14:55:00 +0000
ROA not after:            Sat 29 Nov 2025 15:00:00 +0000
asID:                     64123
IP address blocks:        186.148.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ba:4a:88:2f:02:8c:c7:09:7b:7a:82:45:27:c4:17:8f:c5:82:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Nov 30 14:55:00 2024 GMT
            Not After : Nov 29 15:00:00 2025 GMT
        Subject: CN=8B63A91C7F21E7FEDE71798235D60B725C7BCF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:74:38:8b:41:af:3e:84:db:c6:5f:91:09:
                    30:87:52:25:62:62:59:21:38:77:81:d0:be:e0:80:
                    48:7f:3f:6e:52:c6:8d:c3:0b:32:cb:58:59:28:6f:
                    da:7d:43:b2:7e:5d:6a:57:6d:1c:05:d4:f2:c2:c9:
                    9f:44:a0:b1:7c:13:57:88:61:05:11:bb:3f:6b:d2:
                    97:a4:cc:05:5d:5d:9b:4d:b8:a7:db:dc:30:ca:da:
                    cf:71:fb:6d:a6:d6:97:e8:55:7a:ad:12:aa:d0:f7:
                    ee:e3:fa:f8:dc:4d:58:0b:bb:0e:03:58:5b:1f:97:
                    3b:8d:44:4f:ad:2e:b7:39:7d:cd:f2:86:d2:46:e6:
                    46:44:cf:a2:ed:0d:95:52:42:73:0c:78:18:0d:d8:
                    b2:70:42:12:a7:14:4d:01:5b:28:d8:ff:45:17:d1:
                    23:cf:4e:6d:95:2f:7d:7c:9a:a3:f9:d5:98:ce:1a:
                    29:ef:07:b1:de:11:d4:a5:a0:8c:22:65:9b:65:ae:
                    d8:ff:de:4d:ed:84:23:14:06:e9:e9:76:94:52:79:
                    ef:d2:84:53:94:82:ab:db:0d:e7:f5:34:69:a8:56:
                    85:da:53:7e:70:66:5b:ab:5d:68:ca:2f:26:dd:a9:
                    aa:4c:d4:6f:91:2c:8b:ea:d2:38:8a:a5:21:61:c1:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:63:A9:1C:7F:21:E7:FE:DE:71:79:82:35:D6:0B:72:5C:7B:CF:93
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:79:5d:67:68:18:31:59:fb:ba:19:2d:4f:e2:0b:32:68:20:
         24:ca:2d:f1:75:42:bb:85:34:03:ec:48:66:69:f9:4c:cc:21:
         88:5a:d7:60:6f:79:58:1f:09:e2:27:09:77:2e:f1:62:01:e6:
         31:ea:d5:3b:36:83:c4:fb:70:d3:f8:7d:7f:49:1e:6e:39:5d:
         53:48:c7:cd:b4:82:27:43:2f:08:6f:6e:9d:a1:46:e7:8d:8f:
         4c:ea:d3:bc:81:86:33:bb:46:58:06:85:3d:b4:dc:b4:3d:37:
         f8:1a:8f:55:6c:78:ec:90:03:59:ca:e1:5f:99:a8:88:e7:b6:
         5e:42:24:d2:23:e6:8a:ff:c9:1f:2f:6e:b4:5c:ad:ef:22:ce:
         bb:c2:f8:1e:02:87:85:56:49:1b:49:63:c2:8f:15:36:67:e3:
         8a:13:85:2f:a6:dc:2e:24:0c:81:01:0b:10:d7:32:bb:0c:b2:
         68:51:36:d5:5a:0c:ad:06:05:1e:31:75:45:37:ce:b3:fa:c9:
         6d:8b:6a:04:51:f7:24:51:c8:d4:4a:ce:16:27:5b:91:7f:bb:
         94:16:0a:bf:f0:99:88:f5:f5:af:cb:2a:6b:2e:86:c7:e0:a2:
         1b:75:1d:44:30:4c:cc:ae:24:5b:e4:07:9b:95:cd:bb:57:3e:
         31:b6:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:37 2025 by rpki-client