Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
File:                     3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa (raw, json)
Hash identifier:          onAXhoq/MaCQTSk9FTe/riudZ04By5MjPaa8C/s4bHQ=
Subject key identifier:   74:6F:10:52:22:74:25:E5:7D:53:3F:22:A8:69:73:36:96:E6:CD:23
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       7C710E367979B82E6267F957487EE21CD56B6484
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
Signing time:             Tue 04 Feb 2025 18:24:33 +0000
ROA not before:           Tue 04 Feb 2025 18:19:33 +0000
ROA not after:            Tue 03 Feb 2026 18:24:33 +0000
asID:                     15236
IP address blocks:        148.213.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:0e:36:79:79:b8:2e:62:67:f9:57:48:7e:e2:1c:d5:6b:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Feb  4 18:19:33 2025 GMT
            Not After : Feb  3 18:24:33 2026 GMT
        Subject: CN=746F1052227425E57D533F22A869733696E6CD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:8e:57:ee:8c:29:13:fb:96:62:bc:2d:25:
                    55:54:f1:d2:cb:65:4a:e1:ba:6e:89:4f:90:bf:bf:
                    df:1b:bb:e0:e0:e3:41:11:30:22:33:4f:c5:45:ef:
                    49:10:5e:22:06:ab:fd:a5:5d:e4:2f:e9:af:ea:6d:
                    82:c6:78:29:dd:27:95:5d:0d:6f:a1:4d:66:af:f5:
                    f4:16:6a:15:e3:52:a7:51:fe:79:6b:ce:0c:42:d4:
                    4e:1a:f1:1a:99:09:66:0a:87:fa:4c:a6:5c:bb:08:
                    34:c8:d6:9d:89:15:39:33:62:aa:5a:f3:45:05:bf:
                    3c:fb:79:0e:1a:12:ec:52:a3:82:06:67:1b:f0:4c:
                    aa:d3:9b:de:fb:5c:7e:6f:b9:ea:9e:8d:7c:90:2a:
                    c7:81:9d:a5:b9:e1:ab:07:ac:eb:a2:e6:33:f5:98:
                    df:b3:fe:0f:10:1a:22:0e:13:b8:1b:0e:ac:73:2f:
                    29:f5:dc:7e:ca:be:97:1a:9d:54:b3:ae:f3:38:13:
                    7b:dc:03:db:46:e1:52:34:0c:14:08:88:5e:8c:6e:
                    ca:ad:b8:48:91:b8:7c:19:39:ca:bc:c7:46:04:f4:
                    0a:36:ba:7f:05:79:3e:4e:4d:f3:29:5a:02:a5:07:
                    15:64:af:2e:1d:26:0f:1a:28:71:ee:1f:51:34:5e:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:10:52:22:74:25:E5:7D:53:3F:22:A8:69:73:36:96:E6:CD:23
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:84:7f:58:16:60:dc:4b:63:c3:0c:27:34:8a:cb:5f:2f:5e:
         6d:d4:99:2a:c1:d3:a3:63:10:16:07:cb:53:29:63:88:ff:ac:
         9c:29:d6:05:e5:c0:f7:e9:c9:5b:f9:ce:56:75:e3:3e:85:20:
         28:54:4e:ea:cb:95:6b:d2:d8:b7:94:04:9b:b0:b9:d2:5f:fa:
         b0:0e:f2:0c:c3:35:21:35:fa:72:f8:4a:9a:22:b1:dc:d8:2a:
         92:c2:95:68:fd:50:5e:bd:98:3a:8f:e1:a2:3a:3d:2a:64:c8:
         14:ce:a8:67:84:59:20:84:d0:3d:18:63:ce:2f:ba:fa:59:cb:
         17:81:7b:a0:79:e2:73:fb:22:bc:ce:6d:85:dd:b7:9c:0f:9d:
         83:43:37:fd:2d:b0:66:63:41:18:40:7c:48:ef:1e:50:98:f4:
         92:c7:f0:34:cf:8e:ac:2f:74:d0:f3:43:6e:a5:fd:96:55:7e:
         9e:09:76:ef:79:d3:36:c3:b1:df:26:5d:55:3f:43:4c:db:76:
         a0:21:5c:bc:b6:ee:1c:59:09:6d:ce:68:17:fe:1e:34:44:e3:
         00:cf:fd:3a:2a:4a:ca:60:79:61:da:b3:c1:2d:e8:f8:f8:b2:
         13:48:99:ef:5d:68:e1:f4:4e:45:c5:d5:04:58:83:c7:95:85:
         a8:9b:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:42 2025 by rpki-client