Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e302e302f31362d3137203d3e2032353439.roa
File:                     3134382e3230322e302e302f31362d3137203d3e2032353439.roa (raw, json)
Hash identifier:          qp+DG0ZQaYT8BBJh7j3+y5YkwpgminZExbXCzMb8yKg=
Subject key identifier:   7F:48:1E:3B:B7:41:03:18:0F:DF:D0:D2:27:16:6E:CC:B7:FE:5A:F7
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       7E164D3DE0ABE64C67BE2CAA4AE90490DC6CB428
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e302e302f31362d3137203d3e2032353439.roa
Signing time:             Tue 04 Feb 2025 20:00:34 +0000
ROA not before:           Tue 04 Feb 2025 19:55:34 +0000
ROA not after:            Tue 03 Feb 2026 20:00:34 +0000
asID:                     2549
IP address blocks:        148.202.0.0/16 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:16:4d:3d:e0:ab:e6:4c:67:be:2c:aa:4a:e9:04:90:dc:6c:b4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Feb  4 19:55:34 2025 GMT
            Not After : Feb  3 20:00:34 2026 GMT
        Subject: CN=7F481E3BB74103180FDFD0D227166ECCB7FE5AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:c1:33:f3:ed:67:5e:58:9d:6d:f4:6a:9f:
                    ca:10:00:ec:98:7f:20:4d:fe:71:7c:5f:0f:11:74:
                    a8:25:5e:2f:75:32:19:19:da:22:12:af:6f:42:08:
                    9f:a1:32:b0:82:77:43:73:96:8e:20:0c:5e:3c:c0:
                    61:d1:d7:b6:b3:82:1f:cb:0a:a3:d9:0e:d5:ce:ff:
                    4c:b6:8a:53:9f:60:39:32:53:ff:8c:4d:cd:16:4b:
                    48:a3:08:86:4c:21:a9:00:ab:71:c5:b8:70:2d:92:
                    77:3f:43:6b:d2:d7:1a:bb:b2:6a:c0:31:73:d9:65:
                    ed:7f:72:3f:cd:b4:7d:09:97:94:1b:a6:f7:96:8a:
                    7e:ce:42:2a:0e:d2:7b:f7:ed:a4:5c:28:c3:68:0c:
                    18:c9:aa:50:fb:b6:d2:a1:7b:e9:f9:11:ef:50:ad:
                    06:c2:cc:1b:48:bc:2e:7d:e6:e9:f8:65:0a:bf:72:
                    36:b0:be:43:47:36:ba:44:e8:1c:88:7f:49:13:b8:
                    ff:e2:0a:a4:56:1b:90:ca:eb:ef:86:41:be:4f:fb:
                    d6:5c:ee:df:c4:66:d6:4d:d8:32:4d:f7:67:63:bd:
                    72:3a:a3:0c:e1:5a:76:77:71:b2:9b:a8:60:db:31:
                    e9:0f:49:e8:66:28:dd:66:71:c0:6d:3a:1b:93:76:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:1E:3B:B7:41:03:18:0F:DF:D0:D2:27:16:6E:CC:B7:FE:5A:F7
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e302e302f31362d3137203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:57:12:21:2b:20:20:49:7f:6e:17:20:68:77:ca:ee:06:
         b2:ca:1a:2b:d0:51:7c:f0:68:9a:28:9d:8e:03:9d:4c:08:f1:
         00:8a:11:49:60:c1:00:a1:59:90:f5:e2:6e:fa:72:9c:78:a8:
         bc:fb:81:6f:96:34:c6:e0:1c:06:ea:05:10:69:90:b1:2a:6c:
         5c:ac:4d:9e:0b:cc:f0:be:a1:21:52:f2:c1:4e:bc:19:d4:16:
         7d:21:e9:89:b7:c2:ac:bb:e5:9a:88:59:40:44:9c:73:fd:13:
         74:79:42:07:a4:73:ec:4e:4b:22:1b:31:c4:c9:c3:6d:7e:3b:
         bf:69:42:fc:4a:7c:cc:6c:1a:78:d9:6e:c1:b7:cc:c6:37:85:
         c8:2f:ed:9a:85:49:50:c7:68:b1:9e:1d:f2:3e:b2:10:c4:db:
         60:92:0e:a3:97:26:c2:32:d3:a1:cb:ae:d7:87:58:6b:e5:ed:
         9e:a1:33:8f:15:eb:26:34:a9:57:6a:52:67:09:32:a9:ce:a0:
         99:be:96:47:66:05:16:28:64:2c:d1:0f:8c:17:05:88:40:e1:
         56:dc:98:06:b2:5e:27:a6:a1:e7:e3:bd:f4:f7:5a:25:2b:03:
         82:af:41:ff:2b:9a:14:b8:e2:2d:7d:59:bd:dc:08:8e:a5:22:
         93:73:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:36 2025 by rpki-client