Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134392e302f32342d3234203d3e203238333938.roa
File:                     3133382e39392e3134392e302f32342d3234203d3e203238333938.roa (raw, json)
Hash identifier:          dViQSLk0dMCDzH0xYqhzotTF2YY01sQRhlhSyuqks8A=
Subject key identifier:   36:A0:82:27:44:6F:20:A2:4D:FC:39:7F:BE:79:10:53:B3:25:3B:0D
Certificate issuer:       /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial:       7C43A806BBC98CB6A7E8FF1F3E5EDE44DBE8D07B
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134392e302f32342d3234203d3e203238333938.roa
Signing time:             Tue 04 Feb 2025 18:39:34 +0000
ROA not before:           Tue 04 Feb 2025 18:34:34 +0000
ROA not after:            Tue 03 Feb 2026 18:39:34 +0000
asID:                     28398
IP address blocks:        138.99.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:43:a8:06:bb:c9:8c:b6:a7:e8:ff:1f:3e:5e:de:44:db:e8:d0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
        Validity
            Not Before: Feb  4 18:34:34 2025 GMT
            Not After : Feb  3 18:39:34 2026 GMT
        Subject: CN=36A08227446F20A24DFC397FBE791053B3253B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:18:8b:e4:19:88:0b:74:21:d8:0c:8b:5c:
                    75:55:1e:ce:0b:88:25:c3:59:da:12:2b:3d:7e:a3:
                    29:aa:b6:09:44:4f:a1:e1:7a:4b:04:8a:ab:0e:e4:
                    ef:6f:ad:72:91:98:5d:37:03:d6:d3:2e:5d:7c:cb:
                    21:58:24:4c:ca:84:05:1b:f3:96:80:27:30:ff:b8:
                    26:be:08:6a:66:64:5d:f2:7e:f2:64:36:1c:14:bf:
                    c8:cb:4e:2f:b3:19:d5:da:2b:ca:24:1a:5b:1c:58:
                    e4:aa:94:5d:63:5c:b4:a2:d2:d5:cb:1f:87:18:f3:
                    b0:04:56:61:0e:67:07:c8:a6:90:8a:91:e2:b3:f8:
                    42:a2:43:a5:45:f9:ea:13:2d:00:75:f7:cf:5b:6e:
                    5a:71:c9:92:18:5d:cb:bf:5d:ee:60:46:8f:0c:d6:
                    91:ef:9c:96:20:68:4d:a5:ca:7d:49:67:6e:1a:c5:
                    35:94:08:2e:bd:15:a2:ac:5e:4f:3a:c5:51:54:53:
                    d6:3a:14:27:10:f2:2e:43:56:83:17:0f:b5:9b:7a:
                    fd:9e:d7:cd:e7:de:a5:c1:6e:0b:42:61:58:bb:1e:
                    5f:30:82:d1:78:0c:19:1f:59:15:11:39:25:90:ef:
                    71:d7:a5:68:b5:e1:cb:15:1b:8e:81:a6:47:5d:4c:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:82:27:44:6F:20:A2:4D:FC:39:7F:BE:79:10:53:B3:25:3B:0D
            X509v3 Authority Key Identifier:
                keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134392e302f32342d3234203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:f0:f3:11:84:1d:5d:2a:95:a3:e9:12:4d:b9:f7:84:39:
         e8:78:0c:68:c3:5c:b6:46:80:af:c0:1f:32:27:9f:01:d5:8a:
         a7:7f:aa:f8:ac:c1:d1:21:e6:b1:ae:9f:06:38:44:e5:1d:59:
         23:e4:bf:5e:f3:ab:f3:5b:90:bf:95:ae:73:41:96:fd:68:fa:
         cb:b8:30:1c:6b:e2:8b:bf:fc:a3:4d:90:77:3a:92:48:5d:03:
         e5:e6:16:e5:04:25:3c:bb:15:14:5d:bc:04:4c:74:e1:5d:51:
         96:64:19:73:a0:b5:fa:5b:33:22:7f:e4:ec:da:0d:aa:e9:49:
         b4:d1:86:5e:1b:cc:20:39:27:e9:c3:af:14:01:7f:4c:2a:77:
         b6:de:4d:e7:9f:00:81:1f:23:d7:2b:40:4b:cf:70:40:39:c7:
         50:da:2c:20:fe:89:a8:e5:ae:08:ac:7e:b0:c5:9f:3c:43:32:
         50:c1:b4:80:31:7d:95:14:6c:9b:ee:74:75:4a:8c:03:56:04:
         67:3e:93:74:80:fc:b4:0c:66:4d:36:8d:ff:5b:d3:8a:cc:b1:
         67:1b:22:0f:e1:6c:e0:85:40:25:4b:c4:a1:89:18:d2:75:13:
         4a:07:d5:fe:3b:04:4d:ba:29:a0:ad:e9:fd:f2:59:a5:0b:46:
         b1:a8:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:25 2025 by rpki-client