Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
File:                     3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa (raw, json)
Hash identifier:          GK18sXZtx/nJAyKmq9MIEZJSoBAN0c2dFJ8szaGE8Z4=
Subject key identifier:   FF:E2:9A:42:DC:34:F5:86:A3:71:EA:96:F8:E7:49:88:CB:97:09:C2
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       0FD976AB13B7B0E07C2A0948EDA7EE13750D6DA1
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:48 +0000
ROA not before:           Tue 04 Feb 2025 18:01:48 +0000
ROA not after:            Tue 03 Feb 2026 18:06:48 +0000
asID:                     18734
IP address blocks:        138.122.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d9:76:ab:13:b7:b0:e0:7c:2a:09:48:ed:a7:ee:13:75:0d:6d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:48 2025 GMT
            Not After : Feb  3 18:06:48 2026 GMT
        Subject: CN=FFE29A42DC34F586A371EA96F8E74988CB9709C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:d4:18:ad:9d:fc:0e:45:85:9a:49:ad:11:
                    02:c7:fb:e3:e5:c4:df:92:d4:95:1c:f4:b6:e6:ff:
                    4e:0e:63:65:67:d6:89:58:2b:32:76:eb:9d:cc:fd:
                    82:24:01:af:34:d3:58:71:0e:94:d7:e1:3e:8b:c7:
                    aa:c9:76:b1:4d:f1:1c:08:a9:84:d1:39:3c:4c:a5:
                    fb:22:ce:a9:3f:f8:de:09:09:95:b1:cf:89:52:b3:
                    b8:18:5a:4f:a2:e4:22:3c:13:25:bc:21:c0:4d:cf:
                    ab:35:ac:73:f4:5b:ce:db:90:32:83:ee:11:1d:db:
                    75:40:6c:7e:3b:c3:71:8a:a3:0e:e1:62:c2:e9:c2:
                    88:3e:5e:b2:4f:23:22:21:f0:f0:c0:cc:53:e4:cc:
                    d9:82:ec:58:d3:a3:8c:e8:b2:e8:cc:67:a2:49:82:
                    ab:69:c5:63:0c:20:0e:ea:20:bd:41:43:68:8d:b1:
                    e4:07:43:ab:6b:62:61:ee:41:bd:a5:4d:90:a4:62:
                    40:29:a4:5a:75:61:f3:e5:07:8e:49:24:b5:8d:d3:
                    ba:89:96:82:33:d8:46:f9:18:cc:78:3e:93:c0:17:
                    41:50:49:2b:97:1f:e2:a2:02:96:f5:f0:de:db:00:
                    97:f4:20:3f:90:08:6c:92:3a:f5:af:42:b7:99:e4:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:9A:42:DC:34:F5:86:A3:71:EA:96:F8:E7:49:88:CB:97:09:C2
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:b3:a4:82:27:86:dc:71:36:39:f9:2f:5b:24:ed:b8:28:
         00:68:7a:51:42:78:bf:27:39:7a:00:c6:a8:44:15:d6:41:01:
         aa:a6:51:e7:19:5c:48:79:b4:f4:4b:da:55:5b:34:ed:0f:a6:
         b2:54:c7:a6:f5:67:07:8b:7f:4c:55:9d:18:6b:86:81:08:4b:
         7c:49:fb:62:0f:65:e6:71:d7:67:1e:4c:eb:0d:84:c0:d7:0f:
         aa:29:7d:21:c9:c9:76:bd:8b:a6:4b:f6:c6:5b:92:3c:59:21:
         d1:be:4e:e6:05:90:9b:7d:b0:70:e0:80:52:6d:81:f4:18:8e:
         fb:36:26:3a:6a:f6:7e:47:80:80:d0:cc:93:d6:47:c2:1b:bc:
         4f:a9:04:91:39:e1:7d:b3:cd:aa:30:31:13:f2:ea:8a:6b:e7:
         61:25:cf:f7:94:fa:a5:a2:e6:48:f1:b1:55:7f:1f:06:1b:c5:
         be:14:cf:aa:78:59:f8:ca:2b:fc:d8:e5:ec:52:24:a3:37:62:
         5c:37:64:e7:8b:dc:9f:20:9a:95:bf:e0:8b:4f:4d:60:a1:4c:
         4b:00:99:50:93:16:7d:7d:72:84:9b:ea:f7:38:8e:30:b1:07:
         05:fd:82:6b:08:e8:84:48:47:a3:92:78:8b:67:3c:cb:d0:b8:
         be:86:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:28 2025 by rpki-client