Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa
File:                     3134382e3230392e33322e302f31392d3234203d3e203232313232.roa (raw, json)
Hash identifier:          YI2v5Y3az15a6FKJAB94MyEVJ3umhPkyQNJwK0mzmhg=
Subject key identifier:   37:14:0E:43:19:66:D0:6E:C0:FD:72:AC:D6:CC:FC:A0:3A:EB:A6:A9
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       6880AC53DDFB89990F3A7EDD587706C43A44F476
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:01 +0000
ROA not before:           Tue 04 Feb 2025 18:34:01 +0000
ROA not after:            Tue 03 Feb 2026 18:39:01 +0000
asID:                     22122
IP address blocks:        148.209.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:80:ac:53:dd:fb:89:99:0f:3a:7e:dd:58:77:06:c4:3a:44:f4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:01 2025 GMT
            Not After : Feb  3 18:39:01 2026 GMT
        Subject: CN=37140E431966D06EC0FD72ACD6CCFCA03AEBA6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:58:2f:72:00:8b:6d:97:bf:4a:07:ba:09:
                    c1:7c:bd:cf:fb:63:e2:76:22:b6:2d:d8:29:b9:c1:
                    df:f0:93:f2:f6:cb:a5:67:d9:c5:5b:84:ee:37:57:
                    bb:bd:93:88:c9:66:1b:0a:36:f3:93:3c:96:71:e2:
                    97:04:66:fe:38:e0:ba:78:eb:98:af:89:ad:a2:ff:
                    0d:34:f1:cf:db:30:b1:35:92:5c:2b:c9:3e:e4:ce:
                    28:f5:3d:a3:d4:d6:5e:58:77:11:7b:d0:c6:cf:80:
                    a4:f9:e6:95:3f:db:63:30:a2:b0:0d:44:00:18:02:
                    f0:98:01:22:20:6c:f6:18:e1:4c:ac:48:d9:4a:56:
                    77:27:2e:01:ea:e8:2c:a4:d9:67:c1:fb:57:ca:d9:
                    c1:df:f8:be:65:12:60:40:5d:7d:6f:4d:ce:c4:f7:
                    53:b4:1a:3c:3c:0c:eb:f8:38:2c:96:95:d3:20:01:
                    b4:de:bb:0d:c3:ba:f0:55:e4:54:3c:d6:4e:5d:6f:
                    91:83:33:3d:ab:2e:63:34:df:0e:9b:2d:ab:6a:56:
                    ab:6a:48:10:b9:fe:af:02:6b:0d:46:8b:90:b9:5e:
                    87:4b:7e:b4:b2:61:5b:90:a9:54:ad:94:73:ac:dd:
                    6c:65:e2:65:0d:22:2b:4b:7e:72:2f:79:4b:0d:67:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:0E:43:19:66:D0:6E:C0:FD:72:AC:D6:CC:FC:A0:3A:EB:A6:A9
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:38:e7:15:07:68:d1:6d:cf:89:e0:55:fd:3a:0a:f8:9a:17:
         ca:0f:80:c6:15:93:e6:de:30:54:94:0e:eb:35:8d:84:7d:68:
         26:76:bb:8e:4c:b4:35:76:1f:e5:09:02:a0:9f:fb:95:90:e3:
         de:3d:b7:f4:97:14:64:70:7a:55:47:b8:5c:a6:a8:a6:9e:c4:
         79:82:20:9b:8c:21:41:d8:d5:aa:a9:b9:c9:2b:96:2a:89:fb:
         12:f9:7c:e2:b8:de:cf:54:2c:b9:28:05:4c:bc:98:33:a9:69:
         82:56:14:e9:a5:e3:b9:d3:c3:38:cf:ff:f3:59:24:fb:96:e7:
         fa:54:84:91:98:f8:fb:2f:82:4b:57:74:05:73:79:a4:97:1a:
         6c:8b:73:3b:a3:b0:0c:8e:b7:ba:ea:ef:2b:2d:b1:73:92:fe:
         51:7f:19:a2:7f:88:c1:c3:c1:7e:02:c9:6e:0f:19:aa:b8:0f:
         40:b2:88:99:e0:22:78:8e:d3:57:d0:2b:64:a7:c0:0c:4c:35:
         d9:8f:3f:d6:8a:88:e4:8a:bd:bf:b4:b3:db:15:30:4e:5e:fb:
         54:e5:0b:c2:07:a8:69:93:27:ee:c4:06:84:20:4f:83:c5:f5:
         42:1f:72:c8:17:8e:f9:44:94:c4:f1:67:9f:54:a2:98:e6:bc:
         89:f1:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:26 2025 by rpki-client