Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34382e302f32322d3234203d3e203237383433.roa
File:                     3136382e3132312e34382e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          1InETyJ5pfCLdlayJji2gGN6US4tJOrykk6RLGoq4+U=
Subject key identifier:   D3:91:1C:3F:9D:2A:58:8E:8D:60:F6:4F:66:0D:07:B0:61:D9:31:0E
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       1FF30BF820F6CFE8F73A5142321807F84D678E8F
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34382e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:03 +0000
ROA not before:           Tue 04 Feb 2025 18:01:03 +0000
ROA not after:            Tue 03 Feb 2026 18:06:03 +0000
asID:                     27843
IP address blocks:        168.121.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:0b:f8:20:f6:cf:e8:f7:3a:51:42:32:18:07:f8:4d:67:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:03 2025 GMT
            Not After : Feb  3 18:06:03 2026 GMT
        Subject: CN=D3911C3F9D2A588E8D60F64F660D07B061D9310E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:bc:17:79:45:5c:b3:fd:bc:14:87:ac:5b:
                    8f:ad:55:fe:3c:4f:36:d3:3a:89:d0:43:89:dd:61:
                    1c:95:f3:2e:31:c7:1a:51:c1:92:3e:ae:36:ed:c4:
                    28:34:92:b5:d8:8f:d8:5f:fc:f1:05:b7:52:5b:08:
                    ee:54:e6:0f:b0:3a:4a:98:c3:bc:7c:b1:a5:d6:c4:
                    a0:e2:7a:32:8d:16:7b:e6:b3:8b:9b:5a:23:2a:37:
                    c9:05:8b:78:c5:75:57:77:c6:1b:f5:41:4d:61:9c:
                    f9:39:a5:d2:81:dd:57:cf:b9:ba:3a:d3:df:df:7f:
                    56:72:54:6c:81:e2:66:b8:bc:23:ff:d8:6b:95:cc:
                    c6:7d:15:e7:e6:38:89:24:12:d0:de:d8:9d:04:b9:
                    ec:25:dc:35:1a:47:31:50:44:e1:09:cf:29:c8:c3:
                    d3:af:87:3a:47:67:82:2a:dc:8f:f5:7d:ab:f6:ad:
                    a0:40:e1:e0:72:76:4c:ab:5f:bd:5f:c7:39:03:cd:
                    9e:3e:d6:60:9c:57:2d:43:fc:75:5f:55:41:73:b1:
                    0e:90:7f:c7:e5:d3:76:90:bd:02:53:eb:e1:d9:b1:
                    19:8f:96:70:7f:fe:75:de:54:ca:fe:d2:5d:1e:d0:
                    24:71:2e:25:0c:0f:51:a9:f9:df:83:02:c7:fb:e9:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:1C:3F:9D:2A:58:8E:8D:60:F6:4F:66:0D:07:B0:61:D9:31:0E
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34382e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:1a:d6:07:1d:11:84:d1:3b:33:a2:5d:f4:b7:a7:d9:20:
         21:39:19:5d:ee:ff:1f:37:4d:02:bb:2e:4c:9a:ca:a4:23:1e:
         6c:81:aa:d7:de:5c:23:7e:dd:44:6a:7c:a2:4a:44:cf:77:3e:
         90:fd:4d:e0:b3:06:6c:ec:90:6d:6c:2a:4c:8e:b4:38:9c:24:
         4f:8c:98:83:64:d5:92:3d:22:23:f6:ec:34:91:c9:f8:58:1b:
         83:99:45:30:50:1e:b5:9e:59:1b:b3:23:cb:8c:5b:67:78:4f:
         08:44:11:2f:33:8e:79:64:1c:15:1b:16:8e:31:10:ec:1d:19:
         dc:33:25:97:41:2c:a0:1a:91:5b:3f:5c:5d:c6:2a:90:a2:46:
         b6:c1:cb:70:9b:69:9f:bf:1d:30:b3:7b:19:18:97:c6:6d:33:
         17:68:a4:55:34:a6:64:5a:7d:92:85:7a:65:5a:c6:93:04:c6:
         9a:74:a8:e7:93:31:4d:fd:bf:89:40:21:0f:98:b4:5a:22:e8:
         38:0e:24:4a:3b:f4:2b:70:13:42:f7:5d:a7:ff:b7:52:ac:22:
         cb:76:c2:cb:be:c4:a1:0a:d5:72:b6:17:d7:c3:bc:9f:48:d2:
         2e:98:55:68:dd:ea:34:ee:14:a0:d5:c9:82:a7:af:54:43:e9:
         52:97:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----