Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323636373439.roa
File:                     3133382e3131382e3134342e302f32322d3234203d3e20323636373439.roa (raw, json)
Hash identifier:          AZQczs8mY5L1fYBoSvww+6DN7JYHijYVyXe4Fb7aeYI=
Subject key identifier:   A5:28:F7:44:B1:D6:2C:76:7F:B1:F4:87:FC:53:96:3E:CC:88:00:35
Certificate issuer:       /CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
Certificate serial:       6CDAEC33C61DC88DF12751198743DFF4291A8E78
Authority key identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323636373439.roa
Signing time:             Tue 04 Feb 2025 18:05:50 +0000
ROA not before:           Tue 04 Feb 2025 18:00:50 +0000
ROA not after:            Tue 03 Feb 2026 18:05:50 +0000
asID:                     266749
IP address blocks:        138.118.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:ec:33:c6:1d:c8:8d:f1:27:51:19:87:43:df:f4:29:1a:8e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
        Validity
            Not Before: Feb  4 18:00:50 2025 GMT
            Not After : Feb  3 18:05:50 2026 GMT
        Subject: CN=A528F744B1D62C767FB1F487FC53963ECC880035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:3b:86:b6:f4:8e:ab:ab:3b:45:12:24:a3:
                    92:81:c8:38:b8:40:41:3d:6d:a6:5b:d3:e4:de:0c:
                    87:44:e6:61:26:ba:84:37:8a:80:78:61:ca:5f:54:
                    8c:f8:86:13:3a:fa:9a:3e:b9:16:a7:c4:fd:5f:fa:
                    1b:0c:ad:53:7f:84:0d:6a:e6:1b:93:b9:f8:01:92:
                    94:78:db:0e:20:27:fb:67:e2:0c:94:c2:5f:6d:b1:
                    6d:87:6f:f3:6c:05:4e:93:5b:a7:d0:a0:7b:88:41:
                    4f:b6:2f:96:e7:25:6f:1a:9e:2f:8b:62:0c:b8:1a:
                    92:af:ca:62:3a:a4:65:87:c3:f1:38:61:ea:a9:97:
                    b2:2d:f1:25:b3:89:e8:c9:5f:51:dd:98:45:de:4c:
                    73:3c:2c:ff:6e:88:0e:62:07:c1:d7:db:e5:7c:a0:
                    92:7b:5d:3d:05:6f:84:e8:62:fd:9d:9b:3e:32:6f:
                    d2:ed:2e:de:b3:c1:54:91:4c:b4:24:cc:70:a4:a7:
                    81:88:07:7a:ae:7c:98:9b:16:55:d8:b2:fd:62:3a:
                    de:7b:02:78:3b:73:8f:2b:48:82:49:54:ea:f9:7a:
                    20:2f:99:57:7f:e6:a9:dd:76:3e:10:60:fd:a7:90:
                    43:34:d3:a0:01:69:28:5e:cc:bd:a3:d5:19:3c:70:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:F7:44:B1:D6:2C:76:7F:B1:F4:87:FC:53:96:3E:CC:88:00:35
            X509v3 Authority Key Identifier:
                keyid:80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:10:93:35:e1:fc:08:f4:b5:25:c1:df:7a:65:91:ef:35:f0:
         88:27:55:c6:21:1a:be:25:7d:5a:cd:6f:d6:5c:f0:28:53:84:
         5f:85:b7:90:4c:ed:5d:86:d9:85:42:56:04:9d:62:5e:4f:7f:
         c0:0e:8b:eb:45:56:3a:ae:a2:ac:e5:fb:ea:2a:8e:2f:c3:11:
         5f:fb:54:a2:86:66:38:c8:4c:4e:bc:55:6f:50:d8:5f:b1:06:
         fb:e9:51:37:3c:97:5e:91:6e:46:c5:15:9e:52:11:4e:2d:7d:
         39:98:92:ac:5c:b5:8f:50:4a:58:ed:fa:23:7f:e9:9d:a6:b4:
         71:2e:30:e5:72:e3:00:9e:bd:46:d1:8d:f0:f9:2c:90:ad:7a:
         df:bc:08:d1:28:b1:1b:de:f4:96:c0:f2:a5:75:e6:cc:36:fa:
         b7:b8:ad:3d:34:3e:c4:a9:22:77:36:db:ee:28:98:8a:16:ea:
         97:5d:47:13:37:2b:e1:8e:22:26:15:35:77:51:28:6d:ee:43:
         2f:bd:cb:6e:7b:71:4e:ee:fe:fa:84:71:50:87:69:58:be:ad:
         46:05:2c:74:8a:4f:68:89:1a:34:d8:7e:2f:c7:3b:91:f5:40:
         a6:8c:20:2c:c7:a1:a9:d7:d3:a3:b4:53:00:17:25:05:7d:5c:
         1c:13:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:43 2025 by rpki-client