Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3136302e302f31392d3139203d3e203135323336.roa
File:                     3134382e3231332e3136302e302f31392d3139203d3e203135323336.roa (raw, json)
Hash identifier:          zDxBvfq5UXlHDRw25ERD4MfLrZfMgKMsAnihdPS2QOU=
Subject key identifier:   D9:73:5C:BF:D7:A3:F0:B0:7B:EF:A2:C1:55:73:0E:BA:12:E5:79:44
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       43B0B1492F989CDC84D6D5240AA422A1D05E1628
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3136302e302f31392d3139203d3e203135323336.roa
Signing time:             Tue 04 Feb 2025 18:24:32 +0000
ROA not before:           Tue 04 Feb 2025 18:19:32 +0000
ROA not after:            Tue 03 Feb 2026 18:24:32 +0000
asID:                     15236
IP address blocks:        148.213.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b0:b1:49:2f:98:9c:dc:84:d6:d5:24:0a:a4:22:a1:d0:5e:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Feb  4 18:19:32 2025 GMT
            Not After : Feb  3 18:24:32 2026 GMT
        Subject: CN=D9735CBFD7A3F0B07BEFA2C155730EBA12E57944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:eb:e8:bb:df:31:d8:26:25:b1:62:f4:d2:
                    7d:38:fa:70:e1:b6:f5:a3:40:14:ce:73:1c:5a:fa:
                    e0:41:79:a2:04:54:af:5d:df:55:1d:13:f9:ec:b7:
                    7c:ad:84:92:46:00:a7:2b:ec:8d:52:7a:ba:0c:30:
                    73:c9:12:eb:83:c0:20:17:5e:c6:6a:b7:f5:5e:b5:
                    84:34:ab:a1:d5:aa:f1:ea:81:bb:fa:b0:3e:a9:46:
                    e6:d5:fe:e1:d0:15:de:15:6c:c9:ad:3d:bd:aa:be:
                    69:bc:f3:b0:ce:f1:8e:de:ef:d4:4f:2b:20:ea:04:
                    67:71:a3:92:59:72:2a:c1:56:e0:0c:41:3b:5f:41:
                    10:5a:e1:2c:a4:4f:4e:da:66:b4:36:82:1c:53:97:
                    f7:01:bb:e6:e2:86:43:fe:05:c0:6d:cc:e4:f7:d2:
                    b9:c2:5f:c0:c0:16:9d:ed:01:e3:dc:08:75:6f:b6:
                    99:e2:15:a5:48:29:32:fd:6d:11:35:35:d8:88:b2:
                    95:63:89:47:71:a0:94:3e:c0:60:0b:74:26:c8:1f:
                    23:19:6f:28:fb:90:de:2d:99:ee:ac:1b:25:d3:85:
                    d2:1d:5e:66:a8:a1:9c:f7:ca:f4:6d:1b:d9:ef:e0:
                    ef:b8:fd:65:31:49:98:a2:4e:75:ee:0b:45:2f:1e:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:5C:BF:D7:A3:F0:B0:7B:EF:A2:C1:55:73:0E:BA:12:E5:79:44
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3136302e302f31392d3139203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:81:4d:95:81:36:94:f7:8f:43:f8:8f:6e:99:54:1a:d5:19:
         cb:0a:0c:b4:db:9b:f7:fa:c1:e2:84:d9:07:3e:59:a7:d9:79:
         5d:3a:05:e9:f2:74:e3:e9:fd:5e:e6:0b:3f:bc:3f:5a:e9:0b:
         88:20:90:d3:df:b2:b9:fb:27:7d:b6:8e:67:90:66:63:be:e6:
         d4:2e:a3:74:5d:ff:e0:c4:64:c3:ed:ac:a9:f3:41:ed:3b:69:
         ee:9e:36:83:74:4e:09:66:38:4a:65:51:c6:90:18:29:f6:df:
         74:4a:da:c1:11:2f:9a:18:9d:d1:f9:bf:b3:ff:31:87:fd:12:
         9c:ff:8f:93:0f:fb:ac:06:f6:4f:09:5a:af:b9:7c:e9:b1:6f:
         ad:b1:5e:f2:1e:19:1d:80:b0:fb:2f:7d:b1:7f:90:3a:ce:1d:
         5c:c6:d1:c6:d3:3b:05:9d:9b:77:34:00:78:33:4c:87:66:f2:
         f3:8b:2d:c2:ca:d3:a5:a7:14:2b:9d:fc:99:79:71:bc:dc:00:
         ce:24:a1:93:44:b0:14:7b:bd:ef:35:28:2d:16:ed:2e:67:e6:
         06:d3:4f:58:7d:e3:62:18:b3:62:2e:e6:90:ff:2a:e9:d5:75:
         52:10:c1:81:82:a8:97:04:1e:04:b1:a4:7c:6b:fe:ff:33:a2:
         4f:61:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:12 2025 by rpki-client