Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133392e302f32342d3234203d3e20323732383832.roa
File:                     3134382e3232322e3133392e302f32342d3234203d3e20323732383832.roa (raw, json)
Hash identifier:          zq/qdOBDEvfhYCVJGnFovpmbmSbis9D+134sDM7LJ3U=
Subject key identifier:   93:E5:34:18:9C:C7:37:1A:60:3F:1D:96:C0:B9:16:6E:82:6F:18:F1
Certificate issuer:       /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial:       6224CBBAF34018826D95C8F5E39F9214A7E4012D
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133392e302f32342d3234203d3e20323732383832.roa
Signing time:             Tue 07 Jan 2025 23:05:00 +0000
ROA not before:           Tue 07 Jan 2025 23:00:00 +0000
ROA not after:            Tue 06 Jan 2026 23:05:00 +0000
asID:                     272882
IP address blocks:        148.222.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:24:cb:ba:f3:40:18:82:6d:95:c8:f5:e3:9f:92:14:a7:e4:01:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
        Validity
            Not Before: Jan  7 23:00:00 2025 GMT
            Not After : Jan  6 23:05:00 2026 GMT
        Subject: CN=93E534189CC7371A603F1D96C0B9166E826F18F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:1a:7e:70:dc:75:00:78:23:db:f7:b4:42:
                    e2:a2:65:27:b2:12:3c:57:82:58:42:fa:e6:e9:28:
                    c4:de:65:db:3e:ff:a5:70:5b:86:90:5e:3d:d6:19:
                    ae:96:b8:f6:9f:85:d4:a5:bc:35:18:5a:60:d1:88:
                    02:b9:14:91:2f:d1:46:4b:e2:a2:e6:79:a6:b4:a0:
                    19:f8:54:2f:e0:94:66:97:45:a5:93:93:ca:f9:0a:
                    e7:63:34:4c:bc:bb:b3:b3:03:ef:e4:b4:65:59:4c:
                    47:ed:12:78:1f:d4:d2:49:5d:ed:0f:0d:08:cd:5f:
                    24:ff:05:43:3f:a9:97:52:01:d3:3a:be:1b:14:85:
                    67:2e:4a:50:32:1f:bf:5e:6e:7b:58:fa:8c:d2:88:
                    bd:ff:27:7b:c6:15:35:7f:96:df:d8:cd:89:78:35:
                    ee:01:af:d8:e4:eb:71:00:84:45:94:4e:b1:3a:d5:
                    1c:65:c5:1d:cc:e5:1d:79:5c:f2:6d:2f:c2:64:be:
                    fd:0b:a5:90:1d:20:b2:5b:41:80:9d:27:b3:93:29:
                    b0:3a:6e:4d:b8:fd:d5:c4:fd:52:0d:ec:e0:36:84:
                    a3:62:52:8d:92:3f:14:a3:a0:22:97:a0:51:57:6a:
                    9f:57:cd:a7:ab:66:2c:9f:6b:fc:1d:43:6e:dd:e1:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:34:18:9C:C7:37:1A:60:3F:1D:96:C0:B9:16:6E:82:6F:18:F1
            X509v3 Authority Key Identifier:
                keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133392e302f32342d3234203d3e20323732383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:bc:f2:58:04:bf:6e:72:49:0f:c8:2b:e4:26:bc:3b:5e:
         bd:45:a9:35:b2:f0:5d:58:cb:2e:00:4b:3b:99:ad:ac:11:74:
         03:e0:91:d8:8a:f2:aa:93:29:d4:5b:27:98:bf:fd:99:39:5c:
         a3:4c:b4:3d:eb:1f:93:83:e1:de:5c:3d:2a:36:9a:b4:64:ee:
         54:a6:35:10:a2:b6:f1:88:f2:fd:69:ab:71:0d:ca:4c:f0:44:
         a1:cd:92:75:2f:34:b9:19:c6:4c:82:d8:c1:82:df:c8:31:ab:
         53:a0:86:27:6a:bf:a8:72:5d:47:1a:f2:e8:4b:12:b6:7f:9d:
         c4:ac:73:b9:19:1b:c3:12:b8:e8:c1:46:b9:4a:55:19:50:45:
         6a:0b:6d:6c:1b:e9:a7:e1:75:a1:de:12:3f:a7:75:a8:1a:77:
         cc:78:25:ac:8b:52:65:d1:98:e8:29:78:e8:d1:21:bf:b1:02:
         bb:a4:9c:16:75:84:90:a5:be:e9:fa:26:68:af:f7:5f:a2:47:
         53:31:d6:5d:d2:27:a5:fa:fb:2c:1b:b6:53:40:c5:8a:7e:2f:
         ef:3d:a4:7b:6c:7a:73:56:a9:ea:83:4d:87:e9:d7:89:db:a2:
         9d:00:0f:e0:05:8c:63:63:3d:ef:e5:79:59:62:d9:50:57:55:
         40:3c:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:35 2025 by rpki-client