Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39322e302f32342d3234203d3e203236363130.roa
File:                     3134362e38332e39322e302f32342d3234203d3e203236363130.roa (raw, json)
Hash identifier:          XO3YsdTTC21TCxtJQVzpMNtXwtloVlTfccDhNfZYUqM=
Subject key identifier:   7F:0F:1C:4E:DE:75:9B:4C:6D:EA:76:82:18:A5:7E:5B:08:B8:1C:83
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       37A67DEF069569D5373855934ED9736BF46F6ABC
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39322e302f32342d3234203d3e203236363130.roa
Signing time:             Tue 04 Feb 2025 18:09:51 +0000
ROA not before:           Tue 04 Feb 2025 18:04:51 +0000
ROA not after:            Tue 03 Feb 2026 18:09:51 +0000
asID:                     26610
IP address blocks:        146.83.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:7d:ef:06:95:69:d5:37:38:55:93:4e:d9:73:6b:f4:6f:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:51 2025 GMT
            Not After : Feb  3 18:09:51 2026 GMT
        Subject: CN=7F0F1C4EDE759B4C6DEA768218A57E5B08B81C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:fa:90:03:6c:d9:95:93:92:68:05:be:31:
                    26:19:31:33:ab:ee:2b:d6:88:08:0e:41:56:26:03:
                    24:60:86:f9:fb:61:e2:ef:4f:07:e3:d8:95:b5:12:
                    e7:da:f4:24:28:3b:5a:13:bc:8f:63:22:81:20:b3:
                    4e:27:a2:e3:e0:25:3b:92:48:bb:cb:9b:5b:90:68:
                    a2:32:9d:4b:31:f4:32:a5:da:76:e6:48:fe:06:ab:
                    72:6b:b6:f7:98:b3:8f:c3:55:f0:a6:68:02:ec:ad:
                    47:b1:9d:4f:65:c8:83:80:c2:a9:a1:25:3f:4c:48:
                    fc:a6:05:0a:46:07:74:20:d3:b6:97:b5:a8:1a:33:
                    29:01:39:1a:49:7b:1d:68:1d:df:51:ec:79:db:f3:
                    41:c9:3a:fd:84:d9:e6:65:b5:92:12:da:88:fa:a7:
                    d3:f0:2b:2f:75:ae:9a:3d:bd:18:7a:88:b1:1f:74:
                    fa:9b:e2:4e:8d:6c:95:64:3f:a4:4e:81:46:9a:ef:
                    ef:ed:32:f4:98:62:35:bc:81:b9:00:42:04:9b:80:
                    52:cd:bb:35:fe:42:be:ef:68:eb:a0:c3:17:7d:97:
                    c8:79:b1:b7:bf:8b:ec:4f:f1:d4:e7:df:74:e6:78:
                    bf:97:4a:04:6a:fa:b8:cf:31:63:c1:a1:be:5e:02:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:1C:4E:DE:75:9B:4C:6D:EA:76:82:18:A5:7E:5B:08:B8:1C:83
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39322e302f32342d3234203d3e203236363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:94:24:c1:56:39:53:d2:bc:aa:02:15:9a:f8:7e:3b:35:
         02:44:bc:ed:15:b7:39:74:6c:69:71:01:31:d1:bc:23:a4:7d:
         97:a7:f5:9e:93:b8:38:63:94:1a:ca:95:f2:b4:24:af:a7:28:
         8b:b2:02:af:b4:e1:8d:4d:8d:44:fe:fb:6a:21:52:45:fc:eb:
         4f:e4:04:9c:50:f0:a9:83:c5:ec:7c:9c:84:97:6c:8f:b2:d6:
         7a:ac:39:d7:2f:fb:ab:ea:09:e0:e9:a1:67:fe:ca:1f:d6:b4:
         39:73:f1:9d:42:9d:20:be:f9:6b:0d:d6:c7:ce:fe:a2:ee:69:
         b8:49:5a:73:39:4d:59:c5:5c:9d:d0:6e:70:e2:e4:81:c1:c9:
         36:fb:f5:42:a9:c7:96:2c:99:22:87:3b:8a:10:a6:30:7b:1a:
         d9:f6:93:21:86:52:61:77:8d:a3:ff:39:fe:19:d6:64:fc:e5:
         36:21:4e:a1:e9:7f:3f:f3:66:4b:0b:38:17:bd:86:b2:91:96:
         7b:cf:4e:8d:3b:53:d8:c6:1e:02:c5:11:c6:b5:64:9f:85:12:
         bc:83:18:91:3d:42:56:de:4d:31:1f:19:99:d1:9e:b8:d4:55:
         89:bf:50:2b:44:53:83:b0:d7:a9:53:9b:75:d3:12:2f:9c:26:
         d0:04:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:54:26 2025 by rpki-client