Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233312e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3233312e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          wo6/0C4UwOCeIWi7xpp7Y/JoAKJ9L5n1veNSmaDGo4Q=
Subject key identifier:   F2:06:99:13:B3:0F:53:3A:BC:AC:50:CD:46:A2:F2:4D:55:F6:F0:CC
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       65BEC11F5E0C05D5F8ACBB6E94FB33F0C9472ACC
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233312e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:49 +0000
ROA not before:           Tue 04 Feb 2025 18:33:49 +0000
ROA not after:            Tue 03 Feb 2026 18:38:49 +0000
asID:                     22122
IP address blocks:        148.209.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:c1:1f:5e:0c:05:d5:f8:ac:bb:6e:94:fb:33:f0:c9:47:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:49 2025 GMT
            Not After : Feb  3 18:38:49 2026 GMT
        Subject: CN=F2069913B30F533ABCAC50CD46A2F24D55F6F0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:ed:af:aa:25:72:13:47:8a:36:f0:2f:d3:
                    12:a2:f1:86:78:2e:bc:c6:64:87:72:04:82:1c:8e:
                    53:59:53:2d:86:a4:6b:d2:c2:af:26:54:1a:36:a8:
                    9a:40:e7:b6:97:d6:80:c2:e8:60:cb:4b:1f:24:17:
                    6e:6f:96:2a:b2:d5:6c:8f:ed:bc:27:6f:02:79:3d:
                    37:d3:a2:6b:23:27:58:f4:c3:8f:62:eb:4f:9c:c4:
                    f6:ed:ee:93:1f:09:da:53:0e:22:96:f6:88:07:3c:
                    39:60:54:24:cc:94:04:d4:8c:b7:94:fc:35:18:80:
                    c6:e1:42:3c:af:14:bb:e3:ae:d7:01:33:fd:17:fa:
                    38:13:e7:ce:a6:e9:5b:dd:02:a3:d9:5f:52:f8:ba:
                    d5:27:49:51:10:d4:61:44:fd:5d:f9:e4:2f:05:e9:
                    40:32:80:24:ab:76:f9:43:30:5e:b8:bd:e7:ca:d9:
                    ed:66:20:a5:3c:c9:43:55:8a:51:a3:dc:16:9e:95:
                    53:3d:e8:48:27:53:8d:49:72:68:ea:ab:7b:3d:6a:
                    e9:58:e0:b2:9d:d2:ec:76:e5:6d:0d:12:02:8e:69:
                    e1:34:96:48:c7:72:96:d7:03:55:4d:67:d2:49:06:
                    55:04:3e:72:51:97:df:46:54:83:9c:40:a2:b7:5c:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:99:13:B3:0F:53:3A:BC:AC:50:CD:46:A2:F2:4D:55:F6:F0:CC
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233312e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:43:66:55:ab:2a:68:19:ee:76:d7:3d:d7:42:df:95:fe:
         73:3b:8a:5e:86:24:d7:a0:9c:2a:2d:47:dd:63:eb:b8:7e:49:
         27:c0:31:79:6c:8b:ff:04:8b:a2:d8:9b:9d:e2:c9:6f:6b:0e:
         77:05:d4:04:73:48:b1:82:d1:b4:d7:8c:b6:c5:1f:ba:bc:55:
         cc:f7:1a:98:93:32:69:19:a9:3a:ee:0f:de:5d:61:3e:a8:38:
         94:0d:f0:ac:7b:33:99:e8:cc:e9:72:14:a8:60:53:61:6c:12:
         b8:78:e1:11:8f:47:c7:97:fb:45:14:f8:c7:26:ce:5d:15:78:
         ff:b6:1d:41:e1:59:4f:88:4a:56:a6:b5:80:37:71:71:9d:36:
         87:16:8c:c2:ae:c5:11:db:76:aa:7e:50:ac:cd:40:ba:48:de:
         70:1c:40:91:10:16:50:1a:8f:df:a0:e9:98:b9:88:0f:97:f8:
         54:10:e6:7c:62:c0:ab:0d:ee:f8:90:9f:df:ac:62:6d:65:05:
         02:81:00:39:ad:63:a2:80:2b:f7:c7:c7:02:e2:8e:4a:ba:47:
         6d:82:d1:32:ba:ee:5c:85:02:35:87:35:4e:05:62:71:c5:8e:
         23:5c:ea:bb:27:8c:1f:31:81:f7:ba:19:29:81:94:a1:8d:4a:
         5c:9f:d6:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZb7BH14MBdX4rLtulPsz8MlHKswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODMzNDlaFw0yNjAyMDMxODM4NDlaMDMxMTAvBgNV
BAMTKEYyMDY5OTEzQjMwRjUzM0FCQ0FDNTBDRDQ2QTJGMjRENTVGNkYwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXaO2vqiVyE0eKNvAv0xKi8YZ4
LrzGZIdyBIIcjlNZUy2GpGvSwq8mVBo2qJpA57aX1oDC6GDLSx8kF25vliqy1WyP
7bwnbwJ5PTfTomsjJ1j0w49i60+cxPbt7pMfCdpTDiKW9ogHPDlgVCTMlATUjLeU
/DUYgMbhQjyvFLvjrtcBM/0X+jgT586m6VvdAqPZX1L4utUnSVEQ1GFE/V355C8F
6UAygCSrdvlDMF64vefK2e1mIKU8yUNVilGj3BaelVM96EgnU41Jcmjqq3s9aulY
4LKd0ux25W0NEgKOaeE0lkjHcpbXA1VNZ9JJBlUEPnJRl99GVIOcQKK3XDO/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8gaZE7MPUzq8rFDNRqLyTVX28MwwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMzMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNHn
MA0GCSqGSIb3DQEBCwUAA4IBAQCNAENmVasqaBnudtc910Lflf5zO4pehiTXoJwq
LUfdY+u4fkknwDF5bIv/BIui2Jud4slvaw53BdQEc0ixgtG014y2xR+6vFXM9xqY
kzJpGak67g/eXWE+qDiUDfCsezOZ6MzpchSoYFNhbBK4eOERj0fHl/tFFPjHJs5d
FXj/th1B4VlPiEpWprWAN3FxnTaHFozCrsUR23aqflCszUC6SN5wHECREBZQGo/f
oOmYuYgPl/hUEOZ8YsCrDe74kJ/frGJtZQUCgQA5rWOigCv3x8cC4o5KukdtgtEy
uu5chQI1hzVOBWJxxY4jXOq7J4wfMYH3uhkpgZShjUpcn9be
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:08 2025 by rpki-client