Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38322e302f32332d3233203d3e203232313232.roa
File:                     3134382e3230392e38322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier:          PHnenrkW6UOOi4JQJ9RrH3NYyMhR1FSN7mv2T+vWdCg=
Subject key identifier:   C0:57:53:61:C4:38:EB:E4:FE:A9:82:3E:C1:48:7E:2E:58:1B:A5:E3
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       2DD1E5F72C41AE7079BD8C0850A99A3AAD01AF46
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38322e302f32332d3233203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:53 +0000
ROA not before:           Tue 04 Feb 2025 18:33:53 +0000
ROA not after:            Tue 03 Feb 2026 18:38:53 +0000
asID:                     22122
IP address blocks:        148.209.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d1:e5:f7:2c:41:ae:70:79:bd:8c:08:50:a9:9a:3a:ad:01:af:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:53 2025 GMT
            Not After : Feb  3 18:38:53 2026 GMT
        Subject: CN=C0575361C438EBE4FEA9823EC1487E2E581BA5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:1a:cc:91:5f:15:1d:8b:fe:12:74:23:26:
                    9f:1a:98:50:ae:3e:d0:4b:53:ef:a9:14:0e:5c:76:
                    87:54:eb:5d:22:46:8c:30:a9:07:37:55:6a:49:dc:
                    5d:42:28:28:9b:9f:1c:36:65:c9:c4:a5:15:6c:0a:
                    74:13:56:63:e4:54:45:75:3a:31:de:06:61:68:f2:
                    e6:ac:b6:89:dc:8f:49:c2:dd:df:0d:88:c4:ed:c1:
                    4a:39:3a:ad:80:7a:63:be:53:c8:8c:2d:cb:ba:45:
                    6e:dc:b0:17:53:ff:ea:e9:97:e5:82:03:23:41:b2:
                    7f:32:86:e7:82:3d:4d:ee:8a:d9:d2:7f:bc:36:e4:
                    83:fd:4a:96:fb:2c:46:b4:67:17:0c:46:f9:b8:71:
                    64:4c:eb:27:7c:c7:f0:c7:33:68:d5:7d:d8:b5:f0:
                    66:d6:7a:18:4a:1e:05:98:28:e3:c5:29:39:18:9f:
                    fc:47:8a:85:1c:4a:35:a3:7a:f5:65:3b:f8:f8:cf:
                    9f:6c:20:f3:1d:ee:3e:ff:cd:71:0e:e5:6d:f5:26:
                    64:75:99:62:9c:31:36:39:1d:a8:95:f7:76:e4:bd:
                    fc:8f:f9:aa:04:3d:17:21:df:41:af:17:23:9d:64:
                    dc:bb:5f:92:df:55:9a:73:63:57:14:7d:a6:bd:1e:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:53:61:C4:38:EB:E4:FE:A9:82:3E:C1:48:7E:2E:58:1B:A5:E3
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38322e302f32332d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:80:c7:ed:fb:15:32:af:2a:48:5d:d3:56:d0:38:53:6f:
         42:c9:8d:a2:cd:aa:9a:67:38:58:b8:ce:2c:82:2c:70:83:3f:
         d7:2d:c0:0f:a1:83:8a:d8:fe:17:7a:64:f7:69:c4:9a:67:6f:
         b5:fc:4b:7e:4f:1c:48:16:4d:10:33:92:28:c2:b3:92:3e:77:
         cd:ab:4d:3d:eb:f8:96:e6:8e:2b:54:5f:54:a9:11:3a:82:83:
         27:11:aa:f3:22:c6:9c:ae:28:fc:60:c4:49:2d:f7:50:69:b7:
         3e:9f:d3:77:a9:11:40:45:9c:f3:21:79:6f:a1:d1:86:92:11:
         95:76:14:ff:eb:da:df:7d:3f:25:ce:f1:90:5c:6b:9d:ee:13:
         a6:d5:6d:c7:d4:e0:3d:f0:a3:66:09:cd:ff:33:79:ac:e5:08:
         e9:44:58:88:c5:86:42:bb:6c:16:b4:99:62:bc:50:f7:b4:26:
         62:dd:86:0c:d5:f9:16:e2:f5:d2:91:29:df:e5:c8:71:69:3a:
         cd:7d:bf:19:40:94:29:c7:1f:47:2e:e2:c3:e4:a7:d1:d7:6e:
         aa:58:91:3e:b8:9e:3e:8d:a9:7d:9f:23:4b:c4:e6:d0:ca:77:
         ed:b6:d0:ba:32:15:71:d3:e9:0f:aa:4d:a2:8c:a7:b4:57:b2:
         04:65:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:21 2025 by rpki-client