Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa
File:                     3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa (raw, json)
Hash identifier:          Y4YAZrc70qDiSqdk0Kh28qng3NAvXcWJvbmySj1/yQQ=
Subject key identifier:   B0:1F:14:94:76:C2:16:23:A1:95:9E:95:69:D5:99:DC:CD:12:BC:C2
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       30AB307CE475B7D9C9752A9D5CBAE7B765F37C35
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa
Signing time:             Sat 30 Nov 2024 15:00:00 +0000
ROA not before:           Sat 30 Nov 2024 14:55:00 +0000
ROA not after:            Sat 29 Nov 2025 15:00:00 +0000
asID:                     64123
IP address blocks:        186.148.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:30:7c:e4:75:b7:d9:c9:75:2a:9d:5c:ba:e7:b7:65:f3:7c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Nov 30 14:55:00 2024 GMT
            Not After : Nov 29 15:00:00 2025 GMT
        Subject: CN=B01F149476C21623A1959E9569D599DCCD12BCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:6a:17:b9:33:11:6c:e6:b1:00:ac:c7:54:
                    02:44:b8:3e:35:e8:bb:45:65:18:41:74:13:a5:8e:
                    56:c5:32:9f:81:fd:4c:92:f9:a9:24:33:80:27:09:
                    92:1e:37:c9:45:a5:81:74:51:1d:67:3c:69:69:21:
                    30:3b:72:93:6f:6d:45:b2:87:a2:6b:2e:ca:6a:b2:
                    53:9f:44:65:7a:4e:a4:dc:cb:29:fd:fd:8a:5e:b5:
                    65:41:ff:9c:0d:ef:ca:2c:69:f7:5f:4f:1f:70:78:
                    4c:40:58:5f:12:eb:63:0a:30:de:a3:5d:a1:16:da:
                    c1:ec:55:92:a5:55:7f:80:c7:03:9d:67:df:b1:5d:
                    c9:2a:b9:c1:a0:e5:51:5a:b4:e4:e4:66:fc:5a:a7:
                    69:ce:51:86:58:d3:de:19:ff:e4:df:f1:e0:65:22:
                    96:94:45:23:3d:51:eb:5b:5b:88:6c:9f:52:8c:79:
                    f4:0a:65:21:a1:3a:b0:69:77:88:fd:a8:ce:c9:c2:
                    d4:75:f1:fa:93:49:61:65:b7:47:02:66:f4:75:e3:
                    c9:a2:9d:0a:0b:58:32:ff:5a:f5:02:b8:7c:18:f6:
                    92:bc:12:58:7e:0e:46:4b:2c:f2:67:4c:cf:4b:ab:
                    8d:57:e8:fd:76:19:ec:83:86:09:29:25:2e:9e:40:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:14:94:76:C2:16:23:A1:95:9E:95:69:D5:99:DC:CD:12:BC:C2
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:94:d8:f5:1d:51:21:8b:b9:5e:95:be:6d:98:93:8d:e4:6b:
         a1:5f:8a:de:20:32:73:3d:ee:39:07:ba:36:3f:f8:24:94:c3:
         50:14:97:ee:fc:aa:4a:ba:66:a9:fe:ef:ca:12:78:81:c4:24:
         ed:ae:20:5e:63:48:9b:fe:3a:5d:04:6f:6f:a5:21:d9:e4:5a:
         1a:7d:be:eb:ea:b3:79:81:31:93:65:81:4e:f8:ad:5a:38:b9:
         1d:98:18:dc:06:a9:2e:77:5d:6d:50:59:73:de:c0:2b:17:dc:
         7b:42:6c:5e:3b:3d:63:73:82:a9:c7:54:d2:c5:22:54:38:c1:
         c1:cd:4c:aa:8c:da:92:28:66:4a:36:77:4b:a4:33:6d:a8:2f:
         58:fe:5d:f8:2a:25:9f:a3:50:32:58:cf:28:14:ac:9e:9f:9e:
         c8:16:00:46:d8:9e:31:fc:82:f4:e0:0e:eb:67:e8:40:af:40:
         9a:57:d5:57:60:9e:ee:7f:67:38:11:7f:ff:78:55:3a:d2:30:
         f2:eb:30:0c:f1:12:a6:11:99:2e:d9:1c:db:fe:46:ff:9e:2c:
         3a:56:72:6f:09:cf:5b:60:63:23:33:7a:0a:8f:11:30:d5:aa:
         fc:82:24:bb:b2:a0:4d:0e:f3:61:6f:fb:3e:a5:2f:14:f6:94:
         75:86:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:02:33 2025 by rpki-client