Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134392e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3134392e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          q9j4s57MZdZizOEHCsKIgznQZxhfitSsnZ0PQT4tOS8=
Subject key identifier:   14:51:1F:FD:E3:54:EE:FC:16:AE:FB:A1:BD:0B:27:C6:9D:18:C7:B7
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       4825C93EFBA6CB20B4E952FC01F117B58EA21E0A
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134392e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:54:17 +0000
ROA not before:           Tue 04 Feb 2025 18:49:17 +0000
ROA not after:            Tue 03 Feb 2026 18:54:17 +0000
asID:                     264744
IP address blocks:        168.194.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:25:c9:3e:fb:a6:cb:20:b4:e9:52:fc:01:f1:17:b5:8e:a2:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Feb  4 18:49:17 2025 GMT
            Not After : Feb  3 18:54:17 2026 GMT
        Subject: CN=14511FFDE354EEFC16AEFBA1BD0B27C69D18C7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:78:26:dc:d3:25:86:96:55:46:1c:eb:dc:
                    b3:9e:57:11:f8:52:9c:c2:cc:ce:72:3d:cb:8b:c2:
                    de:e1:47:4e:3d:3e:9f:e9:4d:58:7d:af:37:aa:a5:
                    d6:0b:76:1c:48:2b:11:e9:5a:83:e3:ef:b0:12:9a:
                    71:ad:e7:b9:37:17:3c:9c:57:67:7a:80:81:5d:79:
                    fd:32:16:d5:75:49:9b:48:56:56:d5:46:f0:1b:67:
                    ab:73:bd:a4:ba:7a:9c:9f:ca:31:c3:6d:14:d3:cf:
                    cb:1d:4c:eb:7c:9d:8d:07:48:f8:33:30:98:5f:4d:
                    52:dd:94:bc:2a:2a:ac:09:96:eb:42:c9:95:e3:35:
                    9e:20:ec:03:27:3f:fd:f4:ce:6f:7d:f5:30:00:49:
                    6d:c0:e3:7e:57:af:cb:a1:fe:db:2d:93:73:f0:41:
                    a4:b4:55:13:53:0e:27:0b:d6:bc:78:53:ce:3e:8c:
                    cf:6c:f2:dd:b9:3b:08:32:97:51:a9:e6:fe:5d:5d:
                    31:41:26:42:7b:a6:de:cf:7e:7b:43:ee:90:bf:c1:
                    a1:d6:6a:0d:6d:7c:8e:92:29:1e:00:ca:e2:64:53:
                    9b:b6:b5:6e:bf:42:84:61:97:81:2b:f1:f2:cd:b5:
                    88:e4:1f:0c:7a:6e:54:88:97:e6:74:49:35:50:c3:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:1F:FD:E3:54:EE:FC:16:AE:FB:A1:BD:0B:27:C6:9D:18:C7:B7
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134392e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:12:53:a7:ef:44:f3:4e:3b:ac:e9:2c:7b:30:fb:e0:ba:6b:
         db:76:6c:d5:c0:80:5e:4a:e2:c8:c7:1b:25:26:63:a7:c6:07:
         44:76:31:23:46:9c:d0:c4:58:93:e5:9c:1a:d6:fb:29:43:94:
         2d:2c:99:0d:f5:9b:0a:97:ab:8a:ce:a2:70:f4:e8:af:f2:c1:
         f4:2b:4c:a8:54:c9:c9:eb:78:3d:f2:48:1f:78:e9:0a:93:60:
         eb:a2:ad:ea:91:ad:be:1d:ff:a9:a9:9e:87:7f:3a:73:e3:45:
         4a:6b:34:b9:8e:ab:75:9e:ee:43:1b:ee:55:77:69:f6:d0:c6:
         ea:91:d7:14:e5:59:8b:d5:11:95:30:ff:36:82:87:cd:45:f3:
         29:8c:8e:82:d1:1d:d3:22:9c:bd:93:a8:54:27:81:4b:4a:e9:
         a8:99:20:f9:c3:33:96:f4:13:39:07:9a:4f:ce:14:24:37:93:
         97:5e:be:06:40:61:56:e6:b6:e4:ab:fa:32:51:71:98:9c:00:
         43:79:37:5b:67:76:9a:ac:60:c0:4d:10:d6:9e:e3:d8:38:06:
         48:83:95:eb:ae:a3:21:34:b7:04:01:7e:3e:9d:0f:41:a2:71:
         17:e1:e4:4c:a1:d5:f3:8e:2e:67:e3:6e:10:66:9a:38:d7:44:
         fc:a8:5d:2a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSCXJPvumyyC06VL8AfEXtY6iHgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgzRDBCMTM0QkYyNTYzNjdEM0ZEQTVFMzkyNTY1Q0FB
ODlENUQzQzAeFw0yNTAyMDQxODQ5MTdaFw0yNjAyMDMxODU0MTdaMDMxMTAvBgNV
BAMTKDE0NTExRkZERTM1NEVFRkMxNkFFRkJBMUJEMEIyN0M2OUQxOEM3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdXgm3NMlhpZVRhzr3LOeVxH4
UpzCzM5yPcuLwt7hR049Pp/pTVh9rzeqpdYLdhxIKxHpWoPj77ASmnGt57k3Fzyc
V2d6gIFdef0yFtV1SZtIVlbVRvAbZ6tzvaS6epyfyjHDbRTTz8sdTOt8nY0HSPgz
MJhfTVLdlLwqKqwJlutCyZXjNZ4g7AMnP/30zm999TAASW3A435Xr8uh/tstk3Pw
QaS0VRNTDicL1rx4U84+jM9s8t25Owgyl1Gp5v5dXTFBJkJ7pt7PfntD7pC/waHW
ag1tfI6SKR4AyuJkU5u2tW6/QoRhl4Er8fLNtYjkHwx6blSIl+Z0STVQw2qbAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUFFEf/eNU7vwWrvuhvQsnxp0Yx7cwHwYDVR0j
BBgwFoAU6D0LE0vyVjZ9P9peOSVlyqidXTwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkVBNUMzNkNDNDY2RENFMEMxOEI3QUUwOURDRDk2MzEz
QzQ0QjVCNUM2ODhENDRBQ0Q0RjM2Rjc5QjlFNEQzLzAvRTgzRDBCMTM0QkYyNTYz
NjdEM0ZEQTVFMzkyNTY1Q0FBODlENUQzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODNEMEIxMzRCRjI1NjM2N0Qz
RkRBNUUzOTI1NjVDQUE4OUQ1RDNDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZFQTVDMzZDQzQ2NkRDRTBDMThCN0FFMDlEQ0Q5NjMxM0M0NEI1QjVD
Njg4RDQ0QUNENEYzNkY3OUI5RTREMy8wLzMxMzYzODJlMzEzOTM0MmUzMTM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM0MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wpUwDQYJKoZIhvcNAQELBQADggEBAHkSU6fvRPNOO6zpLHsw++C6a9t2bNXAgF5K
4sjHGyUmY6fGB0R2MSNGnNDEWJPlnBrW+ylDlC0smQ31mwqXq4rOonD06K/ywfQr
TKhUycnreD3ySB946QqTYOuireqRrb4d/6mpnod/OnPjRUprNLmOq3We7kMb7lV3
afbQxuqR1xTlWYvVEZUw/zaCh81F8ymMjoLRHdMinL2TqFQngUtK6aiZIPnDM5b0
EzkHmk/OFCQ3k5devgZAYVbmtuSr+jJRcZicAEN5N1tndpqsYMBNENae49g4BkiD
leuuoyE0twQBfj6dD0GicRfh5Eyh1fOOLmfjbhBmmjjXRPyoXSo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:44 2025 by rpki-client