Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          hS6ax3Ak/v3W1MnN5JPfHSRqD/0qApvQZh8sTgTy1IU=
Subject key identifier:   1F:75:62:31:64:AC:A1:17:88:80:5A:30:BA:CE:41:77:F6:1E:6E:72
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       4D9C0955AFC1FCAE98915119581BF56E7A3D3909
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 04 Feb 2025 18:56:08 +0000
ROA not before:           Tue 04 Feb 2025 18:51:08 +0000
ROA not after:            Tue 03 Feb 2026 18:56:08 +0000
asID:                     263767
IP address blocks:        167.250.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9c:09:55:af:c1:fc:ae:98:91:51:19:58:1b:f5:6e:7a:3d:39:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Feb  4 18:51:08 2025 GMT
            Not After : Feb  3 18:56:08 2026 GMT
        Subject: CN=1F75623164ACA11788805A30BACE4177F61E6E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:a3:ff:57:36:99:c9:80:d3:3d:08:c0:b9:
                    1c:09:f4:0e:a6:0e:66:b8:af:4d:7b:16:70:4b:45:
                    ab:37:38:36:60:67:d5:b9:bc:89:a0:37:23:a9:e2:
                    87:2b:7c:2f:73:83:29:b9:46:93:a4:bc:5a:44:03:
                    53:d6:ce:06:69:e2:da:47:44:ec:d5:46:d2:c3:15:
                    4d:04:d0:12:6e:48:bd:a2:9a:2e:a2:6c:b8:5a:50:
                    05:d1:2a:32:59:88:79:c6:13:e1:18:25:ed:47:c1:
                    54:bf:c4:b2:5a:9b:7a:16:00:ab:10:99:d7:75:67:
                    f4:ef:73:f1:a7:df:b8:3f:02:25:34:ff:d2:46:75:
                    e7:0f:71:db:6e:c6:49:ad:94:68:9f:61:8d:80:16:
                    f8:c0:bb:5b:66:ee:11:c2:68:36:cc:01:db:2e:19:
                    0c:65:87:e9:40:fb:12:31:72:c1:87:c9:52:a9:73:
                    40:e4:c9:7e:ec:28:cd:72:a4:e4:80:7c:fe:b6:87:
                    e4:c4:02:b7:70:73:a4:00:d2:b6:95:af:fa:40:9e:
                    77:9c:33:cb:bf:41:81:a2:c0:5c:f2:c9:72:b4:f9:
                    23:1d:34:5a:7e:3c:5e:86:97:05:f3:ed:dc:e4:29:
                    bb:80:fa:6f:ad:6e:96:e8:2b:29:9c:73:e4:d5:61:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:75:62:31:64:AC:A1:17:88:80:5A:30:BA:CE:41:77:F6:1E:6E:72
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:82:4a:20:7f:b9:df:42:ac:1b:ed:e4:87:42:07:a8:be:
         b4:6a:39:9b:2b:4b:a1:5a:30:a7:7a:4b:3d:29:10:f1:86:da:
         31:5e:50:7b:86:e5:34:33:2a:b5:d2:e2:33:72:15:8c:7d:4c:
         35:3b:7f:99:de:82:c3:8c:db:17:a7:8c:f7:f3:1c:2f:11:3f:
         4d:e1:52:bc:83:4f:9a:a3:97:20:21:6c:36:0c:db:6c:3d:f6:
         08:6f:03:96:9c:e1:c3:3e:b8:d0:30:cd:f5:46:c6:da:65:16:
         35:dd:b4:30:42:ff:45:46:4e:37:23:3f:6b:8e:fc:8b:f2:13:
         eb:3f:8a:6c:02:6c:92:56:67:dd:cc:54:9b:d6:a3:73:a2:ce:
         e1:3c:05:94:b8:2b:97:cd:e4:e1:8d:13:f8:b6:84:b3:b8:bd:
         dd:fb:80:7f:8c:16:f6:70:5f:f8:0b:b4:59:c2:62:93:15:19:
         cf:30:38:dc:46:30:89:aa:25:ae:a0:00:1b:34:9b:61:48:83:
         ee:86:c0:89:81:7a:e8:5b:73:3e:5f:cd:7c:ac:1b:d3:0b:52:
         5b:5a:19:78:fb:eb:78:c5:d6:fe:b0:e5:8f:50:aa:24:e8:30:
         22:3f:f0:a8:f3:6b:97:66:18:bf:bd:de:66:43:be:3a:a2:96:
         dd:62:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:05:00 2025 by rpki-client