Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235302e302f32342d3234203d3e203631353231.roa
File:                     3133382e3230342e3235302e302f32342d3234203d3e203631353231.roa (raw, json)
Hash identifier:          AiMPqV3CpfWTT7fZxQDiwD9nPxArk8JHSyWU1y0XloI=
Subject key identifier:   BB:46:F4:0B:03:41:5F:7D:42:A3:64:85:7D:5C:F1:15:54:7F:62:B9
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       0B0C7BF989949D283244D334DB615D15C1958F85
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235302e302f32342d3234203d3e203631353231.roa
Signing time:             Tue 04 Feb 2025 18:35:16 +0000
ROA not before:           Tue 04 Feb 2025 18:30:16 +0000
ROA not after:            Tue 03 Feb 2026 18:35:16 +0000
asID:                     61521
IP address blocks:        138.204.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0c:7b:f9:89:94:9d:28:32:44:d3:34:db:61:5d:15:c1:95:8f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:16 2025 GMT
            Not After : Feb  3 18:35:16 2026 GMT
        Subject: CN=BB46F40B03415F7D42A364857D5CF115547F62B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:f5:7f:4c:02:6a:f6:b1:84:d9:a1:09:41:
                    8d:4a:b7:10:40:8e:6b:81:0f:7c:a5:7c:fb:ca:16:
                    e4:6c:60:88:37:1e:66:1f:2e:8a:9e:e6:0d:25:39:
                    09:c8:64:66:04:10:43:b4:1a:5f:60:6d:82:a0:78:
                    4d:71:2c:a6:c4:11:ee:61:9d:74:28:e0:21:7e:0c:
                    d4:a0:f9:30:df:1a:5f:ea:88:bc:9b:55:f9:5f:00:
                    a7:df:d6:0f:64:b8:1d:a7:87:97:b1:96:c2:99:3d:
                    0e:79:e7:21:e1:5f:47:ee:38:eb:93:f5:5f:6f:d0:
                    4c:94:51:7b:95:3f:1b:3b:e1:a5:e4:9b:ed:9d:98:
                    d9:e6:6e:18:5d:7d:da:fa:ec:2c:ef:f9:fb:ad:a7:
                    03:b9:41:b2:e1:1c:37:f9:2f:ab:7d:67:7e:25:03:
                    fd:4f:00:e1:ff:81:91:28:8b:a0:89:3f:70:84:39:
                    7b:3c:ad:bf:f0:8e:eb:59:c2:87:24:22:54:e6:ca:
                    30:68:97:ee:18:8c:c1:ed:a3:ab:79:ed:fd:e2:fd:
                    4d:f0:a4:be:08:72:a1:f7:2a:cc:06:a4:43:7f:4b:
                    98:e8:7c:db:8c:f2:a4:91:50:2c:24:c3:dd:87:ec:
                    a3:9e:f6:65:cb:67:87:d3:a1:0a:65:33:37:ae:dd:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:F4:0B:03:41:5F:7D:42:A3:64:85:7D:5C:F1:15:54:7F:62:B9
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235302e302f32342d3234203d3e203631353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:d4:b7:6c:dc:15:a8:f9:86:94:7b:23:de:40:31:f8:4d:
         4f:d5:dd:0c:71:23:39:ac:29:e4:9c:79:bf:4d:d5:4e:b0:e0:
         9e:3d:90:81:e4:d7:36:4e:72:aa:43:5a:b0:39:3d:c2:76:b1:
         1d:06:09:fd:97:20:06:ca:62:e6:63:dd:94:1a:19:f0:c9:35:
         da:d9:b5:b2:1f:30:d0:26:ab:13:bc:29:4d:3e:c6:3a:52:41:
         0c:af:60:4a:f7:44:ee:a9:6c:54:6e:77:c8:3c:a7:e9:4d:63:
         0e:32:6c:f7:9f:3e:69:65:b1:73:2e:1d:e3:b8:e4:d2:bc:fd:
         a2:77:16:ff:54:64:b2:6b:42:7f:e1:6a:cb:69:32:e1:36:40:
         a3:7e:d7:9d:db:75:15:c9:5b:89:58:ee:1f:dc:31:34:a2:c8:
         38:b6:11:eb:37:fa:24:54:0d:51:34:a5:e8:4c:16:bf:24:88:
         72:75:24:83:1e:67:3a:f8:65:ce:b8:90:1c:5a:dd:7e:5a:e9:
         59:5c:a2:1a:c0:ed:9f:37:ca:b9:05:1f:f7:d0:53:da:1c:28:
         10:73:de:f6:f2:5f:e6:6e:d7:03:fc:a6:82:40:01:58:43:ba:
         d4:ff:6e:e5:ec:35:c3:50:c0:7e:91:0e:07:e0:11:1c:be:34:
         e5:b4:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:31 2025 by rpki-client