Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa
File:                     3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa (raw, json)
Hash identifier:          AWoJxnfB4ejljxk2NSAGVNRDqXWabCZgyWLff9lJL5Q=
Subject key identifier:   6D:B9:68:43:DC:4C:B7:C0:67:48:65:43:B5:CF:35:01:99:E1:B1:AE
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       3692E82C9B90DC296E224D92FC7425B31D54F9E7
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa
Signing time:             Sat 30 Nov 2024 15:00:00 +0000
ROA not before:           Sat 30 Nov 2024 14:55:00 +0000
ROA not after:            Sat 29 Nov 2025 15:00:00 +0000
asID:                     64123
IP address blocks:        186.148.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:92:e8:2c:9b:90:dc:29:6e:22:4d:92:fc:74:25:b3:1d:54:f9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Nov 30 14:55:00 2024 GMT
            Not After : Nov 29 15:00:00 2025 GMT
        Subject: CN=6DB96843DC4CB7C067486543B5CF350199E1B1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:8b:53:d0:7b:bd:5b:3b:57:df:44:b5:cc:
                    93:40:99:2b:77:08:c4:22:d8:59:45:94:0a:d2:0a:
                    e5:ca:b2:11:7a:e9:5b:03:db:93:2c:9b:ee:84:6d:
                    5b:91:aa:be:42:6a:fd:1a:75:51:3e:e1:02:53:80:
                    08:33:fc:e7:55:07:23:68:75:b0:a7:2c:af:52:53:
                    ae:d4:c0:74:c9:d7:7f:38:4b:80:e1:42:72:91:bc:
                    ef:40:d0:d0:2d:81:c8:48:e8:98:18:d3:92:5c:3e:
                    29:34:c4:72:97:46:54:af:32:4f:d3:e4:b9:ab:be:
                    3b:db:9f:c7:4f:63:30:26:5c:87:4d:8f:2f:65:2a:
                    f3:30:80:bb:6a:80:f9:5e:04:5c:99:ce:e1:5b:5d:
                    03:08:6d:60:6d:9d:4c:a1:68:ae:4e:34:5a:a5:55:
                    9b:39:23:97:c9:47:88:20:22:da:9e:bf:ee:29:95:
                    ba:ab:18:62:ed:95:fb:1a:24:dc:ad:51:0e:8e:02:
                    6a:ee:99:53:4e:03:76:f9:48:f9:78:6e:ee:37:2d:
                    37:dd:fb:7f:f1:f5:ac:28:20:d1:dd:e2:bd:10:93:
                    59:ac:ea:57:b7:0b:96:e7:03:fa:99:9c:d8:c2:cb:
                    95:96:ce:48:c2:b8:13:84:e5:55:01:10:67:ba:a2:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B9:68:43:DC:4C:B7:C0:67:48:65:43:B5:CF:35:01:99:E1:B1:AE
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:52:fc:27:0a:18:07:6f:97:87:b4:a7:34:f4:ff:d8:b7:c5:
         27:98:bc:89:83:62:94:0c:ae:02:45:95:67:99:d4:bd:da:68:
         e6:cb:4e:54:c9:d9:5a:84:8e:6b:f7:79:15:cf:ea:18:60:90:
         8f:15:c5:75:72:a1:36:60:88:bb:23:d2:7b:37:db:91:f9:e9:
         03:35:33:28:55:f0:3f:df:3a:fc:84:e5:d3:db:3c:43:12:11:
         0b:49:9c:88:1b:9f:30:7a:ab:95:fe:c0:ef:a9:a9:aa:6a:b7:
         9d:01:f1:fb:49:5b:2b:13:24:8f:ae:d1:04:49:1d:1c:3f:bc:
         db:f0:1e:69:64:87:ed:fe:a8:0d:4a:8d:7a:3f:47:42:91:29:
         59:8d:65:ec:b9:8e:c4:82:1e:50:82:30:f0:d1:3b:90:38:c2:
         41:07:b4:82:e0:4a:61:37:97:9c:da:8e:81:45:55:cc:d0:61:
         13:dc:51:7a:32:10:12:a8:55:ee:77:d1:de:ba:6b:c7:7b:e8:
         dd:6c:99:37:ef:3f:d3:88:82:74:f5:c4:b0:72:27:9d:69:88:
         f1:e7:ff:c0:79:54:ac:31:16:cf:89:f6:02:42:4c:6e:c1:40:
         b1:d0:58:f7:ef:97:c2:65:a9:73:a4:3f:f7:ca:e3:01:c2:54:
         89:d1:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:59:55 2025 by rpki-client