Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa
File:                     3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa (raw, json)
Hash identifier:          fAE00wpIcjlF0E6WHhXUbR4Wz7cVyEwWujBrYA3QOIE=
Subject key identifier:   C1:45:9D:7B:A7:BE:FF:2D:93:C0:B5:56:3B:0B:6C:48:D6:08:29:18
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       5D30D49E477D818DEA77E83A8CC67B498BD84882
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:58 +0000
ROA not before:           Tue 04 Feb 2025 18:33:58 +0000
ROA not after:            Tue 03 Feb 2026 18:38:58 +0000
asID:                     22122
IP address blocks:        148.209.148.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:30:d4:9e:47:7d:81:8d:ea:77:e8:3a:8c:c6:7b:49:8b:d8:48:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:58 2025 GMT
            Not After : Feb  3 18:38:58 2026 GMT
        Subject: CN=C1459D7BA7BEFF2D93C0B5563B0B6C48D6082918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:51:83:cd:9e:c7:e4:fa:64:00:4c:3a:82:
                    a9:8f:df:71:e7:d0:ee:4c:86:be:b8:5d:5e:d7:39:
                    74:fe:24:0c:fa:21:09:a7:83:8d:ab:f5:2b:fb:75:
                    b1:3b:46:1f:5d:cd:b2:67:4b:78:3d:4b:03:bc:83:
                    68:83:ff:76:41:ab:64:fc:36:cf:59:68:4f:cd:54:
                    95:6c:a5:ba:b6:26:df:6f:72:b7:8d:08:79:67:30:
                    3a:b1:33:2b:2d:3d:64:73:fd:cd:12:a3:7a:e3:9c:
                    fc:91:fb:7d:e2:37:68:3b:dc:f8:be:28:34:08:2f:
                    b6:41:14:84:49:cc:ff:aa:48:17:8f:42:4c:a1:81:
                    2f:70:e8:e9:1a:9f:4f:ad:88:db:c1:f2:61:8a:f9:
                    57:90:37:9f:8d:ee:2a:8d:10:a8:52:d1:f9:4f:c3:
                    af:74:58:a6:d9:30:6d:50:46:e6:9f:32:0c:3b:e4:
                    0e:16:28:11:0a:5e:96:c5:a9:a6:56:1b:74:ec:22:
                    3b:70:4f:cc:6d:8d:f5:2c:0d:a8:62:76:08:8d:80:
                    07:e6:f9:f1:e1:0c:d7:33:22:57:a0:d8:48:1f:0f:
                    4e:6e:bd:e0:d3:05:04:81:dc:03:d4:54:89:d9:0c:
                    c6:9a:34:aa:84:e1:d3:3a:68:98:43:b8:72:05:1d:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:9D:7B:A7:BE:FF:2D:93:C0:B5:56:3B:0B:6C:48:D6:08:29:18
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:80:74:4a:79:35:ee:e9:9e:22:19:6c:f9:5a:ae:b2:c4:6d:
         4e:d9:9e:51:6f:f9:93:ee:36:62:c2:74:c9:e4:96:2c:95:47:
         80:78:6d:05:c2:35:12:c7:23:51:55:89:21:69:00:3e:55:30:
         47:5d:49:c2:16:16:84:03:80:d9:6f:85:0c:2a:69:d9:38:95:
         6a:e0:11:8b:ef:ac:54:ee:c8:be:e9:a0:c4:42:85:ad:94:de:
         0e:cc:1c:58:cf:16:ad:9c:3f:18:4b:0c:a6:8a:b8:7f:41:2c:
         54:58:a9:7f:9f:3d:09:1b:98:41:de:8c:08:18:80:c6:9c:d7:
         af:80:a0:d9:a5:d8:c9:e7:e2:d5:d6:86:97:67:05:ab:cd:0c:
         1f:27:40:75:ea:9e:9e:3a:70:03:7d:f8:78:a7:80:cf:8c:77:
         43:3d:98:74:34:f8:48:21:63:18:8a:4b:8b:38:5b:83:64:ed:
         01:2e:21:d5:d9:77:b3:4e:38:7e:49:0d:43:0f:c1:3e:66:59:
         db:81:46:c5:42:d8:dd:4a:18:41:0b:12:0b:12:51:d4:29:5a:
         ba:a8:1e:72:46:c6:f5:d6:84:ce:ba:75:e5:b1:a2:6f:79:eb:
         f9:dd:31:f8:c9:a4:82:0c:e5:7e:c5:ae:03:f5:95:ad:5c:4a:
         81:48:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:05 2025 by rpki-client