Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3232203d3e203532343835.roa
File:                     3133382e3132322e3139322e302f32322d3232203d3e203532343835.roa (raw, json)
Hash identifier:          PAVeJg1ijZHQ4nTtqaX+yfpO1ubQD4fpInACnbMC3Fw=
Subject key identifier:   36:BA:F4:CD:DC:99:E9:B1:6B:B6:9A:1E:7E:41:7F:F8:62:6F:6C:7E
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       6208DD6F5B8C23C8E37BFCD038803B0AFFEAD6E1
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3232203d3e203532343835.roa
Signing time:             Tue 04 Feb 2025 18:39:57 +0000
ROA not before:           Tue 04 Feb 2025 18:34:57 +0000
ROA not after:            Tue 03 Feb 2026 18:39:57 +0000
asID:                     52485
IP address blocks:        138.122.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:08:dd:6f:5b:8c:23:c8:e3:7b:fc:d0:38:80:3b:0a:ff:ea:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Feb  4 18:34:57 2025 GMT
            Not After : Feb  3 18:39:57 2026 GMT
        Subject: CN=36BAF4CDDC99E9B16BB69A1E7E417FF8626F6C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:d0:d1:e6:b3:ad:de:9c:df:7e:56:54:84:
                    b4:48:b8:f2:7c:90:eb:f2:fa:ba:d1:e5:c3:f3:53:
                    b7:30:a8:c1:70:66:40:3e:65:01:7a:c6:b6:d2:83:
                    78:09:20:bc:e2:83:c9:e3:4c:69:dc:13:c0:ad:85:
                    3f:59:55:51:01:08:77:82:ec:36:e8:37:f3:ed:57:
                    92:c8:26:e2:5b:7c:4d:b8:1c:76:d6:95:8c:16:4d:
                    62:be:09:b3:45:13:73:83:f4:c2:ff:ca:5d:af:dc:
                    3d:c0:07:4f:61:50:98:ad:35:d7:b7:0f:90:20:25:
                    b2:a8:e8:73:07:27:1b:ec:68:33:6c:7c:93:c5:4b:
                    9e:41:e3:fd:00:6a:f0:87:d8:68:6d:69:dd:22:ba:
                    03:c5:9f:34:aa:78:bb:34:de:87:70:45:3d:15:a6:
                    2b:d8:02:a6:68:1c:48:82:cb:24:36:3d:2e:3f:04:
                    6d:84:46:45:a4:f9:1e:f0:dd:63:cb:b4:62:71:34:
                    14:17:ea:90:3f:18:14:4a:26:8c:ee:48:68:c0:35:
                    af:de:70:25:ad:f6:ee:42:ea:32:7d:52:1c:e5:ae:
                    5d:09:3a:d5:16:24:46:ec:e8:5f:89:5e:2d:14:4b:
                    5b:c1:92:16:02:42:67:05:46:20:c8:8b:97:88:1b:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:F4:CD:DC:99:E9:B1:6B:B6:9A:1E:7E:41:7F:F8:62:6F:6C:7E
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3232203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:9b:a3:d1:7c:1b:0e:45:a7:37:77:fe:64:38:17:08:6b:
         11:34:2a:56:66:a7:11:56:9c:fb:0e:f6:2e:ff:a9:44:47:0c:
         99:fe:15:d2:f8:4f:f5:b2:37:a4:7a:d4:ad:a5:d2:c3:15:ce:
         d7:6d:27:50:da:9a:17:30:45:fd:ec:41:de:dc:4b:04:07:19:
         e5:64:0e:fb:1a:4a:c6:ee:87:2f:2a:dd:78:7a:90:21:b2:2f:
         ce:36:d8:2b:7e:6c:83:40:df:6e:68:6d:13:c6:b9:76:38:c3:
         85:66:56:6b:00:c5:7d:f0:bb:fb:8f:5c:d4:1c:c1:c2:7c:aa:
         85:ad:fa:a7:22:2b:48:a6:0d:3b:40:dd:38:6e:86:aa:f8:55:
         44:92:18:db:f7:98:80:bd:16:a3:76:5e:c7:01:ba:8f:a3:2e:
         48:ac:58:b5:53:51:ea:1e:4d:b0:be:cb:47:87:3d:ff:96:6a:
         86:5f:6a:83:84:85:ab:53:a8:ae:0d:6c:e6:49:aa:1a:6a:74:
         a7:d8:37:cb:7a:54:87:b4:03:d3:f6:cf:59:e0:65:4c:f4:65:
         c7:f2:9a:d6:fb:21:38:ef:d5:de:e2:33:fd:53:3d:59:73:ba:
         5e:0d:fc:7d:35:41:45:f4:f0:4c:60:e6:82:b8:55:d9:b9:b1:
         5e:5d:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:50 2025 by rpki-client