Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e37302e302e302f31352d3234203d3e203134353232.roa
File:                     3138362e37302e302e302f31352d3234203d3e203134353232.roa (raw, json)
Hash identifier:          L2qeI5uNVBwINwmCJgiZ0yI7vB4NhSedu/y5e5p4LH4=
Subject key identifier:   E3:EC:DD:D0:93:80:04:BF:2A:09:4D:7A:CA:F7:A1:DE:46:43:44:E0
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       1DA24943253526E0D1BFBBFDCF62AA9EF0B85A4C
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e37302e302e302f31352d3234203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:44 +0000
ROA not before:           Tue 04 Feb 2025 20:03:44 +0000
ROA not after:            Tue 03 Feb 2026 20:08:44 +0000
asID:                     14522
IP address blocks:        186.70.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:49:43:25:35:26:e0:d1:bf:bb:fd:cf:62:aa:9e:f0:b8:5a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:44 2025 GMT
            Not After : Feb  3 20:08:44 2026 GMT
        Subject: CN=E3ECDDD0938004BF2A094D7ACAF7A1DE464344E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:fb:30:09:cb:f6:a8:f4:23:6c:92:c8:13:
                    04:79:e8:9d:68:bf:e4:bd:c7:95:9f:40:f5:da:99:
                    66:75:20:76:d9:5e:13:fe:ec:41:6a:5a:e0:0a:14:
                    1c:48:33:7e:4e:33:e1:7a:ff:4c:a8:f8:07:58:fe:
                    41:09:b7:67:e0:0f:41:3e:1f:08:34:21:6b:13:3d:
                    6f:19:b1:0c:2e:72:2e:2f:cb:22:9d:c8:00:0d:91:
                    50:79:5d:0b:2d:74:74:c7:9a:f6:34:60:50:78:d9:
                    e4:34:6f:fe:e2:84:29:72:e1:ff:f5:5f:16:2b:7d:
                    ed:0f:1b:49:89:d9:db:b5:32:90:64:d6:26:f3:27:
                    48:07:a9:99:1c:46:2c:8f:6f:9a:2e:95:17:87:33:
                    f5:1c:ec:54:14:ff:95:7a:66:98:7b:c9:a6:d2:a7:
                    47:6a:30:49:69:82:a4:3a:a9:d1:b6:6c:25:67:69:
                    8a:ad:21:ea:f0:c0:a5:6c:04:94:e4:f9:88:12:92:
                    f6:65:eb:ae:80:cf:a7:2b:ba:80:27:ac:70:a4:9c:
                    c0:ed:0d:33:d8:c2:bf:1a:bc:1c:0c:28:22:ee:a2:
                    3b:c5:19:f9:b6:a6:5c:71:87:c7:5a:2d:cf:e3:67:
                    85:af:36:f3:3b:7b:d9:0f:a8:c4:e9:a4:69:cc:c9:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:DD:D0:93:80:04:BF:2A:09:4D:7A:CA:F7:A1:DE:46:43:44:E0
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e37302e302e302f31352d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         48:26:42:aa:72:d1:7a:d1:c3:39:66:3e:e8:dc:90:88:25:47:
         12:49:7d:6e:a3:03:93:9d:06:f4:51:d4:46:ce:e7:3b:fc:ba:
         33:c2:98:a8:ae:d8:26:24:68:00:46:3b:2a:63:42:54:2c:8a:
         67:62:31:a8:91:dd:83:0c:ed:46:61:09:18:a5:c1:f3:47:b3:
         a4:c6:f1:fb:ca:f9:84:89:3c:02:b6:15:98:9c:de:c3:5f:82:
         8e:83:27:97:6d:27:99:94:00:8b:60:86:50:04:ac:a7:5b:a8:
         ad:08:29:08:ee:5f:79:83:b4:67:35:a9:d1:43:d8:fb:da:97:
         98:10:2e:36:1d:84:da:ae:ad:ba:e0:77:b5:31:1d:fe:38:30:
         79:14:dd:17:e9:bf:36:73:5f:e8:68:cb:db:1a:9e:3d:99:50:
         69:e3:69:ae:15:7f:cb:b4:34:b1:2d:1f:90:18:ba:38:4d:3d:
         37:ba:48:00:2a:dc:c6:21:52:dc:b0:bf:e6:69:04:f3:df:5f:
         76:b8:47:2c:8f:04:e6:b1:89:4e:56:35:0e:b8:1e:eb:59:39:
         fa:d1:01:43:4f:bf:db:46:1b:96:a5:cd:35:84:8a:d0:27:be:
         6f:c2:ce:eb:f4:49:bf:6a:1a:99:95:4c:59:dc:bc:69:a3:4e:
         5d:14:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----