Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa
File:                     e801397a175bbe076c9713795250ecdcc47d66b7.roa (raw, json)
Hash identifier:          m+MIfCOs5jf9id2rq1Ggf8N1rv08vh2GbR3P/ZiX60k=
Subject key identifier:   2A:C3:8D:E6:42:8B:AC:3C:B1:19:E6:81:73:D7:40:86:F1:92:5B:D5
Certificate issuer:       /CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Certificate serial:       1F4519
Authority key identifier: 35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa
Signing time:             Fri 24 Mar 2023 08:31:48 +0000
ROA not before:           Thu 23 Mar 2023 08:31:48 +0000
ROA not after:            Sat 22 Mar 2025 08:31:48 +0000
asID:                     22122
IP address blocks:        148.209.103.0/24 maxlen: 24
                          148.209.104.0/24 maxlen: 24
                          148.209.111.0/24 maxlen: 24
                          148.209.112.0/21 maxlen: 21
                          148.209.120.0/22 maxlen: 22
                          148.209.123.0/24 maxlen: 24
                          148.209.126.0/24 maxlen: 24
                          148.209.131.0/24 maxlen: 24
                          148.209.132.0/24 maxlen: 24
                          148.209.136.0/24 maxlen: 24
                          148.209.138.0/24 maxlen: 24
                          148.209.140.0/24 maxlen: 24
                          148.209.144.0/22 maxlen: 22
                          148.209.148.0/23 maxlen: 23
                          148.209.15.0/24 maxlen: 24
                          148.209.16.0/20 maxlen: 20
                          148.209.175.0/24 maxlen: 24
                          148.209.176.0/20 maxlen: 20
                          148.209.192.0/23 maxlen: 23
                          148.209.200.0/22 maxlen: 22
                          148.209.204.0/23 maxlen: 23
                          148.209.206.0/24 maxlen: 24
                          148.209.208.0/24 maxlen: 24
                          148.209.210.0/23 maxlen: 23
                          148.209.212.0/22 maxlen: 22
                          148.209.218.0/23 maxlen: 23
                          148.209.220.0/24 maxlen: 24
                          148.209.228.0/22 maxlen: 22
                          148.209.231.0/24 maxlen: 24
                          148.209.232.0/22 maxlen: 22
                          148.209.236.0/24 maxlen: 24
                          148.209.238.0/23 maxlen: 23
                          148.209.240.0/22 maxlen: 22
                          148.209.244.0/23 maxlen: 23
                          148.209.246.0/24 maxlen: 24
                          148.209.32.0/20 maxlen: 20
                          148.209.48.0/20 maxlen: 20
                          148.209.5.0/24 maxlen: 24
                          148.209.56.0/22 maxlen: 22
                          148.209.60.0/23 maxlen: 23
                          148.209.62.0/24 maxlen: 24
                          148.209.73.0/24 maxlen: 24
                          148.209.75.0/24 maxlen: 24
                          148.209.76.0/24 maxlen: 24
                          148.209.8.0/22 maxlen: 22
                          148.209.81.0/24 maxlen: 24
                          148.209.82.0/23 maxlen: 23
                          148.209.84.0/22 maxlen: 22
                          148.209.88.0/23 maxlen: 23
                          148.209.93.0/24 maxlen: 24
                          148.209.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049305 (0x1f4519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e1045f9f659b040e2833d32618d562a29ac1fd
        Validity
            Not Before: Mar 23 08:31:48 2023 GMT
            Not After : Mar 22 08:31:48 2025 GMT
        Subject: CN=e801397a175bbe076c9713795250ecdcc47d66b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4f:aa:a5:e9:d7:a8:d6:e9:5a:9d:ee:c9:33:
                    3b:96:45:1b:38:b9:d8:68:a0:0f:ac:84:73:1e:98:
                    6b:b1:ba:77:8e:91:53:a8:23:27:8d:09:dd:7d:dd:
                    e9:90:e0:3b:98:29:2f:bd:ed:cb:6d:95:a1:5a:53:
                    07:c8:ed:0d:f9:1c:78:f5:dc:fe:a4:9d:ba:98:e4:
                    15:05:6b:23:8a:ea:ab:03:70:86:31:3d:49:bc:ae:
                    8d:aa:d5:02:79:d3:fe:8f:21:21:46:75:42:52:a2:
                    01:cf:c1:e2:82:f1:3b:c2:c8:10:a9:2f:24:83:fc:
                    c0:72:6d:d6:59:62:c8:dd:50:b9:1a:53:77:ed:bb:
                    8e:bd:e5:c8:d5:cc:f4:37:12:5d:0a:de:b0:3a:01:
                    e3:cf:79:5e:ff:5f:dc:c2:61:ab:f4:86:84:33:dc:
                    97:4c:17:63:73:e5:40:9f:30:47:9a:86:48:e5:98:
                    60:7c:34:a6:67:b1:64:52:9c:e4:fa:6e:3b:74:6a:
                    6a:bf:bc:4e:f0:22:3b:3b:77:74:25:a4:3e:43:51:
                    26:b7:dc:7d:b1:86:c1:ab:54:92:1c:0f:da:62:16:
                    85:1b:9e:6d:c0:94:e7:1c:ae:9b:82:33:64:01:f9:
                    58:bd:26:56:f0:dd:0d:1b:ba:3e:e0:c1:c9:ff:0f:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:8D:E6:42:8B:AC:3C:B1:19:E6:81:73:D7:40:86:F1:92:5B:D5
            X509v3 Authority Key Identifier:
                keyid:35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/93e1045f9f659b040e2833d32618d562a29ac1fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.5.0/24
                  148.209.8.0/22
                  148.209.15.0-148.209.63.255
                  148.209.73.0/24
                  148.209.75.0-148.209.76.255
                  148.209.81.0-148.209.89.255
                  148.209.93.0-148.209.94.255
                  148.209.103.0-148.209.104.255
                  148.209.111.0-148.209.123.255
                  148.209.126.0/24
                  148.209.131.0-148.209.132.255
                  148.209.136.0/24
                  148.209.138.0/24
                  148.209.140.0/24
                  148.209.144.0-148.209.149.255
                  148.209.175.0-148.209.193.255
                  148.209.200.0-148.209.206.255
                  148.209.208.0/24
                  148.209.210.0-148.209.215.255
                  148.209.218.0-148.209.220.255
                  148.209.228.0-148.209.236.255
                  148.209.238.0-148.209.246.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:b9:45:5e:7a:93:f5:71:72:8f:ae:8d:3e:82:92:00:93:
         ff:28:ea:5c:40:77:ab:80:48:7a:d8:14:fa:69:3b:03:4d:98:
         f2:5e:db:66:2b:e9:6c:98:5e:61:4d:49:83:9a:d1:41:9c:fa:
         b4:62:04:df:32:e5:69:cb:67:14:31:11:3a:a9:f3:b2:4c:f3:
         d3:f4:21:64:c3:b0:c8:dd:d0:27:02:0e:22:79:55:f3:e0:fd:
         54:79:3c:4e:54:9d:9b:cf:1e:eb:20:7e:15:13:e0:c5:de:a1:
         3d:7c:2f:23:b5:4a:a6:3f:45:d7:96:9a:ea:ee:cb:9a:9b:1b:
         9c:4f:e3:ae:46:27:d3:78:9e:a8:20:bb:df:f2:32:4b:9f:38:
         b7:11:db:1c:16:2d:8b:51:87:6e:c1:af:1f:1a:b7:89:82:f6:
         e8:7e:43:4f:77:1c:25:df:00:de:6a:1e:91:25:48:58:ad:7d:
         8f:92:ca:82:ed:cd:87:f7:04:0d:f0:f0:3e:c8:f6:ae:48:76:
         d3:e9:a2:26:a3:56:83:c0:76:52:ff:e4:96:d4:13:1a:75:ce:
         e9:f2:6f:01:19:34:53:ce:3c:24:7b:1f:a5:52:46:93:8f:d5:
         a6:53:70:44:b0:78:14:e4:5a:da:51:e8:33:3c:f8:13:0e:8e:
         fc:9d:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org