Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa
File:                     3134362e38332e31362e302f32302d3230203d3e203233313430.roa (raw, json)
Hash identifier:          Oa6umDPJwd085joxBIAt+Sv+R1hxoBjSNIUrwulSoxw=
Subject key identifier:   9C:D6:6A:6D:E0:38:BB:79:F7:23:5A:76:5A:C6:4D:64:4E:C7:FF:D4
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       117B5CE8C0B75BA776CF13C5B2F6E1CFBE07A72D
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa
Signing time:             Tue 04 Feb 2025 18:09:49 +0000
ROA not before:           Tue 04 Feb 2025 18:04:49 +0000
ROA not after:            Tue 03 Feb 2026 18:09:49 +0000
asID:                     23140
IP address blocks:        146.83.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:5c:e8:c0:b7:5b:a7:76:cf:13:c5:b2:f6:e1:cf:be:07:a7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:49 2025 GMT
            Not After : Feb  3 18:09:49 2026 GMT
        Subject: CN=9CD66A6DE038BB79F7235A765AC64D644EC7FFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:fd:9e:b2:e1:cc:e7:64:91:0f:8d:7f:ae:
                    98:f8:c4:88:c2:fa:1a:23:1a:9f:ec:98:47:7e:04:
                    b1:bb:a9:d4:a5:02:81:26:ec:12:3f:87:18:b4:40:
                    a2:e6:4d:57:3b:ae:49:5b:86:41:c4:95:fd:d6:95:
                    8b:bd:62:25:e1:75:82:51:cc:d5:1a:16:b8:ba:18:
                    5e:ae:14:61:45:36:4f:db:2b:45:c8:c2:61:f4:50:
                    d3:a2:bc:0d:eb:c6:9b:24:e2:34:cd:b4:7a:6c:48:
                    fe:83:0b:ef:3e:35:70:4d:d7:88:8f:2f:8c:59:9d:
                    f7:11:24:85:16:e3:2e:6f:e6:db:3a:bc:7e:9b:2c:
                    8b:86:df:29:de:d3:fa:82:ff:33:36:a2:90:ac:1f:
                    1b:1b:5c:0a:ca:23:17:41:77:5f:64:d4:f2:32:ab:
                    5b:d1:fb:25:bf:0d:28:f4:30:3a:05:30:06:96:92:
                    15:4d:0b:0c:12:e6:d6:e6:10:f4:2d:ac:4e:1f:d9:
                    1a:43:0d:8a:cd:e2:9a:57:19:e3:a0:39:25:d5:56:
                    ce:42:e0:55:01:8c:20:4d:e7:ce:e1:38:08:6d:e2:
                    22:31:ee:e6:1c:a9:82:81:8a:37:8a:71:1f:1f:0d:
                    de:4f:31:ec:01:6a:8c:98:0a:4d:56:54:bc:11:4e:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:6A:6D:E0:38:BB:79:F7:23:5A:76:5A:C6:4D:64:4E:C7:FF:D4
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:49:f5:ad:2b:74:85:a0:3c:3f:74:81:7a:43:18:8d:50:ca:
         e4:ff:c9:0f:c6:61:86:07:3a:38:37:d6:d9:6c:b7:71:2d:c5:
         f8:7d:d8:bf:6c:61:0c:fe:c1:ce:aa:fe:36:a4:c3:10:20:30:
         ba:cc:04:3e:28:c6:1b:b5:4c:25:a6:5c:eb:da:de:a0:22:b7:
         4a:fc:51:03:11:bc:3d:b4:b9:4e:5d:50:77:e1:9f:76:5c:d6:
         32:ae:0d:9b:4d:4d:a5:b9:e4:c1:f7:34:32:da:60:c3:35:51:
         16:cc:f3:df:ee:e8:9b:3e:8a:d3:49:4f:10:94:21:4b:35:b4:
         c3:29:f9:14:5b:37:d8:01:15:29:1f:d8:25:6d:c1:4d:0a:b9:
         05:95:76:fe:ad:92:bc:7e:e5:04:ec:4c:aa:8f:b9:f1:cd:f3:
         84:49:1c:a5:0b:30:a1:e1:98:6e:ff:d8:97:e9:f4:de:21:d1:
         de:93:3a:f3:bf:fa:95:3b:e7:7e:75:f5:47:fa:0b:66:89:21:
         ea:19:09:9e:82:7e:8e:c2:d1:c4:92:f7:38:f6:30:7a:26:81:
         44:27:02:1a:f8:88:b3:5f:8f:6a:87:f4:86:99:99:75:e4:e8:
         7d:f4:44:ec:88:22:38:3d:94:e8:79:bd:03:46:05:92:e0:b9:
         7a:4b:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:41 2025 by rpki-client