Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa
File:                     3134382e3231332e302e302f31382d3138203d3e203135323336.roa (raw, json)
Hash identifier:          EBbPcHFpfHzAcNgASi1NuZLhhE+iIHhdQVqbhT2ZHTc=
Subject key identifier:   8D:FB:E3:CE:FF:A8:76:D7:E6:41:A9:B1:3B:56:EF:3C:ED:34:0E:6D
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       5DACAE309F216FF9EA337214B436FB4D0447F55F
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa
Signing time:             Tue 04 Feb 2025 18:24:32 +0000
ROA not before:           Tue 04 Feb 2025 18:19:32 +0000
ROA not after:            Tue 03 Feb 2026 18:24:32 +0000
asID:                     15236
IP address blocks:        148.213.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:ae:30:9f:21:6f:f9:ea:33:72:14:b4:36:fb:4d:04:47:f5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Feb  4 18:19:32 2025 GMT
            Not After : Feb  3 18:24:32 2026 GMT
        Subject: CN=8DFBE3CEFFA876D7E641A9B13B56EF3CED340E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:aa:5f:24:45:fb:97:ad:8e:11:c6:1c:35:
                    53:94:80:10:a1:2b:01:e0:96:63:4c:f0:50:81:6b:
                    67:10:d2:67:56:b5:11:66:a4:fc:93:7e:74:62:6a:
                    be:e3:92:c5:d4:3c:f6:56:ab:c0:5b:94:a3:62:21:
                    07:54:68:e6:2d:6d:e1:9b:fc:66:b9:c2:fe:01:ca:
                    f8:ed:e6:55:c0:ce:4e:88:4b:5b:75:e5:e9:25:77:
                    7c:b0:ee:33:88:0c:2e:7e:a7:22:1f:c1:66:36:4a:
                    be:60:9d:a1:54:5b:b3:d0:49:9b:89:95:9c:4b:f8:
                    bf:81:50:79:d6:34:36:c9:c1:1c:2e:e4:f1:00:83:
                    18:c4:17:74:6b:25:3b:73:25:dd:69:d6:01:ce:47:
                    0d:98:bd:38:cb:33:d1:79:e1:d6:04:98:cb:b2:36:
                    bc:4d:ed:23:56:af:3e:f7:9b:d9:1e:09:14:4d:0d:
                    02:ce:3a:36:8f:e7:e2:ab:22:49:9a:9a:8c:af:a4:
                    ab:41:6c:26:68:e6:32:8b:a0:6b:b6:cf:4a:63:43:
                    13:0a:e4:40:25:61:98:d2:25:62:bb:e8:3b:2b:c3:
                    e5:4a:58:6a:6b:b5:10:a8:e6:7f:5c:33:0a:54:90:
                    0d:0e:54:1f:2d:c4:ce:b0:80:37:db:0f:4b:1a:f6:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FB:E3:CE:FF:A8:76:D7:E6:41:A9:B1:3B:56:EF:3C:ED:34:0E:6D
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:79:92:b9:c7:f8:b6:ad:ae:b6:f1:e9:0f:b4:45:0b:4f:
         35:b2:6b:05:0e:0d:9a:17:71:1d:97:88:d7:80:ab:86:37:3c:
         17:83:1e:7d:70:f5:49:c0:35:ca:a4:17:23:21:c1:df:99:50:
         f6:01:fe:98:01:17:7a:f3:09:8a:00:8a:7f:46:cf:7b:59:0f:
         8e:67:3a:a6:14:4b:c3:a0:77:74:c8:85:06:31:99:15:21:1c:
         6e:a8:75:1d:de:97:ee:5a:f5:34:88:f9:ad:a0:0b:cc:74:be:
         f2:28:e3:78:23:84:5e:fb:9f:91:dd:13:af:99:ae:56:46:0d:
         e0:bf:22:bf:4f:d8:2e:ce:b3:26:bd:b5:8e:9e:c8:a6:e7:c3:
         22:f8:f4:06:0b:19:a1:52:50:d5:c4:cf:ff:47:1d:43:40:c3:
         bd:63:77:a6:90:49:4d:72:c9:dc:2f:00:d9:05:3c:38:29:57:
         0f:84:ac:f2:85:1b:d2:1e:f0:ab:44:7f:d5:89:2e:ce:ae:ba:
         bc:f1:2b:86:b6:b8:2c:5d:97:c8:b6:56:35:a2:b9:a2:d3:d7:
         e2:8b:ec:79:56:a8:bb:d4:98:72:a1:25:d9:7f:77:9d:16:bc:
         58:c9:63:0b:f5:c9:76:b9:2b:c1:07:cf:b8:3f:10:c0:83:f7:
         bb:47:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:01 2025 by rpki-client