Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e3131322e302f32302d3234203d3e203134373534.roa
File:                     3138362e3135312e3131322e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          F0XYN5E+GXYFFRxTCaWBjpBzL0pA0ECkLCQ+fO/guWw=
Subject key identifier:   05:81:01:67:09:B6:0A:DD:E3:EE:40:7D:5D:9B:76:87:25:F7:F6:8D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       44DEFCCD728613373BA161349264879F0AC95A4C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e3131322e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 25 Feb 2025 07:11:02 +0000
ROA not before:           Tue 25 Feb 2025 07:06:02 +0000
ROA not after:            Tue 24 Feb 2026 07:11:02 +0000
asID:                     14754
IP address blocks:        186.151.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:fc:cd:72:86:13:37:3b:a1:61:34:92:64:87:9f:0a:c9:5a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb 25 07:06:02 2025 GMT
            Not After : Feb 24 07:11:02 2026 GMT
        Subject: CN=0581016709B60ADDE3EE407D5D9B768725F7F68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:b8:34:c6:c2:2f:54:bd:8a:29:5a:05:0c:
                    84:fc:fd:7f:7e:35:65:c6:6e:bb:ed:6a:d5:60:04:
                    12:3e:d2:38:11:d1:c7:7d:3c:ce:fb:91:ac:ae:c2:
                    9f:74:e8:c2:95:71:e7:62:b2:b6:1d:84:cd:3e:c1:
                    5c:6a:45:c1:87:a9:b2:77:aa:9a:65:a5:bb:6b:3a:
                    28:69:dc:72:d0:63:79:f5:53:ad:d8:f2:ea:f4:6d:
                    c0:0b:46:60:44:10:8e:c6:95:7d:85:33:dd:e3:96:
                    8b:d8:16:a4:9b:a2:10:50:2a:d2:11:a3:26:2e:51:
                    24:e6:1a:54:a0:ab:ed:4b:2f:ca:67:7d:03:4d:4c:
                    86:49:68:de:97:64:d8:61:9b:ec:0e:f7:a0:90:5c:
                    9c:c9:a6:cf:a8:88:3c:0e:72:74:1a:1f:9a:95:5c:
                    fe:0f:41:36:57:8d:25:f9:c5:bf:50:fc:8b:d5:1e:
                    f4:49:40:55:7c:0e:24:ff:98:56:81:5d:b7:c9:04:
                    d9:f9:a0:3b:3a:8f:41:58:42:51:ac:2d:3a:74:f0:
                    c2:e6:0c:27:ac:f1:da:28:4a:61:63:93:72:3f:f9:
                    6f:c1:48:2b:e3:76:90:5c:48:7b:68:ca:d7:d3:54:
                    e5:cc:ca:a9:67:60:ad:32:ee:eb:2a:03:f7:ac:e9:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:01:67:09:B6:0A:DD:E3:EE:40:7D:5D:9B:76:87:25:F7:F6:8D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e3131322e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:c3:e2:fd:69:62:fd:18:23:48:2d:a2:ea:5a:a9:f0:64:
         d5:74:39:1e:e7:02:cd:82:bd:27:c0:ba:73:75:e0:aa:a9:aa:
         44:77:9e:17:63:39:5f:8b:6e:ef:cf:a4:6c:9c:7c:a6:1e:3d:
         7a:a2:c4:16:6f:a6:9d:e8:ab:bb:be:1e:07:dd:bf:72:93:a9:
         cb:10:e7:9e:c6:ab:d4:47:6b:09:4a:7c:76:42:64:96:11:a8:
         5c:58:26:87:c9:f6:1b:82:e3:ba:c5:25:55:f7:e7:9a:08:b2:
         61:5a:fc:d8:50:02:2a:da:f4:8a:a7:f7:86:db:89:bb:60:58:
         fa:11:79:04:c5:75:55:15:9d:37:42:0a:fe:1a:d9:b6:3e:e1:
         ef:4f:7a:37:fe:67:90:26:29:a7:e0:f7:0d:1b:79:60:6d:df:
         20:f0:f6:49:41:02:35:81:91:69:5f:55:dd:ab:58:6c:00:17:
         7f:50:63:40:4e:f8:de:ae:5e:91:69:0c:76:51:2f:91:2b:ba:
         fd:06:39:4a:52:f4:2e:f3:12:c8:20:84:84:f6:a1:c4:80:5a:
         35:3f:c7:27:ce:25:02:05:a7:2f:39:18:59:f6:de:87:0c:48:
         44:30:a5:70:12:a6:c7:1c:be:a5:94:f3:6f:26:37:44:ec:53:
         38:e8:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----