Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130332e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3130332e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          VOWyZ/HZHZFQeO20TiucdKfbPxTL1/bgYONAvsrN08s=
Subject key identifier:   1A:DD:FC:6A:1E:BB:67:20:C1:C7:F9:3B:66:05:7B:71:74:3B:E4:BA
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       334107890DF135FD591A54E2D1703EA067C9FB6F
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130332e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:02 +0000
ROA not before:           Tue 04 Feb 2025 18:34:02 +0000
ROA not after:            Tue 03 Feb 2026 18:39:02 +0000
asID:                     22122
IP address blocks:        148.209.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:41:07:89:0d:f1:35:fd:59:1a:54:e2:d1:70:3e:a0:67:c9:fb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:02 2025 GMT
            Not After : Feb  3 18:39:02 2026 GMT
        Subject: CN=1ADDFC6A1EBB6720C1C7F93B66057B71743BE4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:dd:1a:91:fe:27:7e:6c:ea:24:2a:56:48:
                    3d:ad:60:ac:87:ee:85:ca:00:47:5a:3d:a1:68:6b:
                    ac:e7:74:03:3e:6d:d2:b7:42:91:c6:fa:b9:b6:97:
                    44:78:98:ea:91:c1:d8:b6:b6:16:7a:a9:71:b8:4e:
                    17:74:ba:4c:03:29:b9:2c:a0:9e:5c:77:80:7f:29:
                    9a:43:b6:8c:1f:98:81:fe:0c:8d:e9:85:74:5f:3c:
                    9a:91:11:86:25:69:a2:80:71:6e:07:d8:fe:a0:f2:
                    a4:45:a0:14:7c:6e:f5:4a:fa:30:de:b0:3a:df:cf:
                    ab:45:62:0b:ae:14:72:dd:f8:01:49:45:dc:47:45:
                    1b:51:0e:86:29:49:6e:49:ae:71:a5:c4:cd:c1:1d:
                    c6:ab:0d:a2:5c:67:47:73:f2:72:c9:2c:d0:ed:c0:
                    33:aa:52:7a:17:8b:75:66:b9:cf:c1:63:3a:58:cf:
                    fb:b3:1b:5d:cd:39:92:3f:60:a5:c1:c9:63:0d:4e:
                    c8:5f:80:1a:56:84:a0:f1:d6:da:37:63:33:d5:5b:
                    10:76:8c:5b:ef:42:46:7b:b3:71:04:cd:28:3c:22:
                    90:96:75:42:62:5c:1c:da:c0:8b:5a:da:a4:1f:b4:
                    be:8e:70:08:93:08:72:4d:4a:65:8f:52:67:1f:30:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:FC:6A:1E:BB:67:20:C1:C7:F9:3B:66:05:7B:71:74:3B:E4:BA
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130332e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:f2:86:c9:03:17:bd:e3:29:f9:57:2e:42:e8:40:58:f3:
         29:13:c5:d1:57:3b:48:e4:b2:10:57:84:92:04:37:ff:1d:67:
         8a:ed:97:f8:8a:15:64:f0:b3:49:a8:80:07:0a:31:a1:7f:f0:
         da:c3:2e:72:5d:00:fc:87:c4:7c:a1:c3:52:46:40:1b:1a:94:
         d0:92:18:87:9e:85:f6:72:9d:ff:ff:7d:b0:02:9d:73:59:ca:
         57:8c:55:a5:ea:e1:92:c6:a1:7a:9a:ea:9a:b8:16:d3:41:9f:
         48:52:52:6e:58:2c:e1:90:9f:d0:f5:e8:8b:a1:a2:34:0e:22:
         89:a8:bb:2e:75:bd:09:12:b5:0e:c7:81:04:35:af:d4:71:e9:
         97:7d:01:30:79:b4:88:55:af:2c:ae:fa:be:68:c0:36:15:70:
         f2:3a:cb:ea:33:e7:fe:3c:f2:3f:77:df:b0:ca:70:01:a7:51:
         c1:8c:c4:bf:81:88:46:49:c9:e8:82:5e:d7:45:4a:f4:64:f2:
         8e:ad:5a:d8:11:fa:41:a2:01:79:03:9b:60:05:6f:33:65:0a:
         07:af:d1:32:36:c2:18:18:44:cf:e6:0a:cf:da:54:40:43:77:
         2b:4e:c3:27:65:5d:0d:7d:6d:d2:0a:82:c3:df:41:2e:a9:bd:
         50:57:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:31 2025 by rpki-client