Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/1467def834bc469cd0b228c3cda061ce72ffbbf6.roa
File:                     1467def834bc469cd0b228c3cda061ce72ffbbf6.roa (raw, json)
Hash identifier:          C5qIpJknw/0FHRyN1Qhnz9x/cKNGx1685yzkfvvAqMw=
Subject key identifier:   A9:AC:0B:65:DC:A0:FC:96:87:79:5B:E3:9D:9D:16:98:41:E7:0C:53
Certificate issuer:       /CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Certificate serial:       2404E6
Authority key identifier: 35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/1467def834bc469cd0b228c3cda061ce72ffbbf6.roa
Signing time:             Mon 09 Oct 2023 19:57:55 +0000
ROA not before:           Sun 08 Oct 2023 19:57:55 +0000
ROA not after:            Thu 09 Oct 2025 19:57:55 +0000
asID:                     22122
IP address blocks:        148.209.231.0/24 maxlen: 24
                          148.209.240.0/22 maxlen: 22
                          148.209.238.0/23 maxlen: 23
                          148.209.236.0/23 maxlen: 24
                          148.209.244.0/23 maxlen: 23
                          148.209.246.0/23 maxlen: 24
                          148.209.248.0/23 maxlen: 23
                          148.209.252.0/24 maxlen: 24
                          148.209.176.0/20 maxlen: 20
                          148.209.175.0/24 maxlen: 24
                          148.209.192.0/23 maxlen: 23
                          148.209.200.0/22 maxlen: 22
                          148.209.204.0/23 maxlen: 23
                          148.209.206.0/23 maxlen: 24
                          148.209.208.0/23 maxlen: 24
                          148.209.210.0/24 maxlen: 24
                          148.209.212.0/22 maxlen: 22
                          148.209.210.0/23 maxlen: 24
                          148.209.216.0/22 maxlen: 23
                          148.209.224.0/21 maxlen: 24
                          148.209.232.0/22 maxlen: 24
                          148.209.222.0/23 maxlen: 23
                          148.209.220.0/23 maxlen: 24
                          148.209.16.0/20 maxlen: 24
                          148.209.32.0/19 maxlen: 24
                          148.209.15.0/24 maxlen: 24
                          148.209.56.0/22 maxlen: 22
                          148.209.64.0/21 maxlen: 21
                          148.209.60.0/23 maxlen: 23
                          148.209.62.0/23 maxlen: 24
                          148.209.0.0/16 maxlen: 24
                          148.209.8.0/22 maxlen: 22
                          148.209.5.0/24 maxlen: 24
                          148.209.120.0/22 maxlen: 24
                          148.209.124.0/22 maxlen: 24
                          148.209.128.0/23 maxlen: 24
                          148.209.123.0/24 maxlen: 24
                          148.209.126.0/24 maxlen: 24
                          148.209.130.0/23 maxlen: 24
                          148.209.132.0/24 maxlen: 24
                          148.209.135.0/24 maxlen: 24
                          148.209.136.0/22 maxlen: 24
                          148.209.140.0/23 maxlen: 24
                          148.209.144.0/22 maxlen: 22
                          148.209.142.0/23 maxlen: 23
                          148.209.152.0/21 maxlen: 21
                          148.209.148.0/22 maxlen: 23
                          148.209.72.0/23 maxlen: 24
                          148.209.75.0/24 maxlen: 24
                          148.209.76.0/24 maxlen: 24
                          148.209.84.0/22 maxlen: 22
                          148.209.82.0/23 maxlen: 23
                          148.209.80.0/23 maxlen: 24
                          148.209.88.0/22 maxlen: 23
                          148.209.96.0/21 maxlen: 24
                          148.209.92.0/22 maxlen: 24
                          148.209.103.0/24 maxlen: 24
                          148.209.104.0/24 maxlen: 24
                          148.209.106.0/23 maxlen: 23
                          148.209.111.0/24 maxlen: 24
                          148.209.112.0/21 maxlen: 21
                          2801:c4:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360550 (0x2404e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e1045f9f659b040e2833d32618d562a29ac1fd
        Validity
            Not Before: Oct  8 19:57:55 2023 GMT
            Not After : Oct  9 19:57:55 2025 GMT
        Subject: CN=1467def834bc469cd0b228c3cda061ce72ffbbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:93:21:57:98:3a:c4:49:db:64:55:6f:99:
                    44:97:d9:82:75:6b:31:1a:ae:1d:8f:28:f5:81:50:
                    9e:f5:bd:dd:68:b6:b6:31:55:b0:8e:f8:5d:30:27:
                    71:21:29:ea:f9:b7:cd:2c:8c:96:d8:25:2d:a2:a8:
                    5b:e4:d1:f0:fc:3f:a7:22:87:be:43:ae:18:c8:5e:
                    55:77:9a:b3:e7:bd:f4:50:98:b0:3d:03:05:cb:b7:
                    09:57:55:d2:d0:85:80:9b:32:cd:10:bc:1a:33:55:
                    52:dc:f6:33:51:a9:53:d5:d5:4d:4a:04:e0:16:79:
                    00:82:a8:48:42:77:73:e6:11:37:d2:80:cc:fa:af:
                    be:d2:3c:d7:7b:bb:20:c3:3b:80:c3:4e:ea:59:8e:
                    71:d2:25:48:94:e0:47:2c:b4:6c:26:23:60:0c:93:
                    9c:a1:4c:37:96:49:f2:17:79:2c:3b:60:1d:5b:6e:
                    5c:27:aa:5e:da:c0:45:9a:01:6b:e0:58:89:0c:cb:
                    8b:53:c5:ef:05:49:9f:33:b4:d4:13:cf:16:f1:2a:
                    e0:4a:d5:71:45:75:ad:c9:6e:4b:65:54:5f:2c:66:
                    37:0b:20:fb:21:e9:55:9a:07:a9:80:03:5a:cc:da:
                    53:a4:f3:25:d0:6a:78:50:fc:e2:0f:aa:8a:c2:7d:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:0B:65:DC:A0:FC:96:87:79:5B:E3:9D:9D:16:98:41:E7:0C:53
            X509v3 Authority Key Identifier:
                keyid:35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/1467def834bc469cd0b228c3cda061ce72ffbbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/93e1045f9f659b040e2833d32618d562a29ac1fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.0.0/16
                IPv6:
                  2801:c4:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:6a:8e:a0:b4:d1:64:c4:8b:9e:09:20:6e:5e:0e:5c:4f:
         75:a9:ca:c6:96:84:37:bf:45:e8:30:bf:44:ea:9b:5b:47:e1:
         34:28:d7:38:ce:4d:ba:3c:d3:59:53:cb:82:35:8d:b5:61:90:
         48:26:7d:de:9d:6c:80:ae:f0:d1:bb:27:35:f1:02:13:3f:52:
         fc:0e:d3:79:af:be:48:2a:77:27:94:1c:53:eb:3f:d1:9e:4a:
         d1:b3:66:a9:07:8a:41:e8:2f:e0:f3:28:df:7e:34:dd:69:74:
         d5:dc:63:d9:c3:82:52:bb:77:9c:c4:5a:bb:5c:6b:4c:0b:92:
         2f:51:44:64:1c:ca:40:9c:f9:fa:52:3a:1a:f6:d2:54:f1:23:
         c4:d3:89:d8:ef:80:8c:a1:00:e2:de:eb:5e:05:44:12:3f:09:
         c5:f5:90:f2:65:26:a2:53:fe:00:39:9f:e4:17:c8:10:d5:8a:
         e9:c2:49:e7:ac:16:09:d3:50:78:c7:68:88:54:f0:d3:ff:4c:
         b5:71:2b:3d:e5:bf:b9:1b:bb:a8:b6:b9:06:b5:14:27:5c:f1:
         d3:e9:4a:a1:0e:80:b9:4c:30:d1:96:e0:1b:e4:88:fb:94:6c:
         a9:cc:3b:eb:6a:ea:ad:49:db:a1:01:95:ae:dd:a4:21:14:c3:
         11:7a:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org