Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          CrdHTX9eYG0q3LrcVwrnpmoDBxeIfh0mLB4WAgxpSMU=
Subject key identifier:   80:68:82:66:DC:04:C6:D1:81:95:03:22:7D:05:69:DF:FB:D7:AA:86
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       35CA3EA102C785F26432D2EB776761F79CD2700E
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:54:18 +0000
ROA not before:           Tue 04 Feb 2025 18:49:18 +0000
ROA not after:            Tue 03 Feb 2026 18:54:18 +0000
asID:                     264744
IP address blocks:        168.194.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:3e:a1:02:c7:85:f2:64:32:d2:eb:77:67:61:f7:9c:d2:70:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Feb  4 18:49:18 2025 GMT
            Not After : Feb  3 18:54:18 2026 GMT
        Subject: CN=80688266DC04C6D1819503227D0569DFFBD7AA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:30:42:ed:c8:ef:f8:e0:d8:bc:2d:0e:97:
                    53:5b:69:c5:bb:7d:4e:db:f9:92:95:46:41:93:41:
                    43:6f:c8:e2:de:77:c6:72:e1:e4:e5:39:f4:0b:d9:
                    25:82:cd:44:2e:9d:8b:1a:86:a3:96:59:71:50:c4:
                    08:83:f7:05:10:c4:4e:20:ee:43:09:25:05:82:d6:
                    25:91:7e:d2:31:c6:ce:be:b2:0c:11:be:6d:0d:00:
                    dd:6b:98:53:5c:2f:ea:a2:91:8d:54:41:1f:29:a2:
                    42:4d:30:d2:17:8e:64:d5:2f:88:2d:50:88:ed:e5:
                    24:fb:13:e0:9e:a3:c4:3d:66:6e:6f:bd:46:b5:f1:
                    6a:95:48:62:e0:df:ac:5d:ff:0f:8c:78:b6:42:9e:
                    9c:cb:60:dd:a2:1a:ac:9e:b6:8e:2b:90:7e:5a:72:
                    82:3c:9b:92:68:68:92:6c:fa:58:a2:f8:3a:ad:2a:
                    24:e3:2c:af:b4:95:70:ee:18:be:a4:e4:f7:f7:56:
                    02:2b:c2:0a:18:e9:bf:d0:9b:dd:34:58:f5:83:a1:
                    64:3e:65:90:5f:8f:c2:08:80:61:52:1e:fc:d2:d9:
                    42:a1:fa:0b:c9:29:e0:42:fe:43:66:3a:e2:1a:c3:
                    d1:33:9d:f0:79:f7:28:59:07:70:d1:03:19:5e:34:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:82:66:DC:04:C6:D1:81:95:03:22:7D:05:69:DF:FB:D7:AA:86
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:c4:d6:14:0b:60:77:a7:65:88:95:fc:e7:49:70:83:98:
         ce:6c:c9:f6:dc:b8:e2:b6:d1:9d:20:58:ed:5a:38:bd:a8:81:
         90:f8:c1:89:9b:e1:eb:69:12:5b:57:2e:bc:91:bb:6e:a2:4f:
         2a:1a:26:40:0c:cf:ce:d4:58:3d:d3:80:de:da:0d:02:93:15:
         cf:e5:02:72:95:d1:4f:54:52:ac:1f:f7:cd:5f:1d:5f:a5:e4:
         7d:c4:8f:88:84:94:f2:c8:20:2f:dc:24:2e:d8:e8:36:1d:43:
         0b:e3:9b:27:41:11:d6:be:96:99:85:cf:70:07:f6:3c:7b:19:
         fd:3a:0f:ef:47:29:0f:6a:84:eb:3f:8b:24:94:26:1a:ee:a7:
         19:11:39:7b:f9:f3:52:3d:ac:7b:33:00:40:3d:7a:00:0c:75:
         d6:71:19:ea:da:3e:5a:83:df:8e:a7:f3:32:88:47:c9:5e:1f:
         36:82:32:ab:af:33:60:d6:f7:61:d5:45:ff:f7:6f:5a:ec:ea:
         f4:7c:34:1a:88:3f:f8:d6:d0:33:0e:36:2d:8c:48:31:d6:33:
         ef:b8:89:78:d7:bf:6c:71:89:22:b3:bd:0e:be:4f:c4:ad:ac:
         72:4f:2a:3a:5a:ee:31:be:e5:9c:30:33:1d:dc:d8:9c:06:ec:
         fe:d1:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:04:27 2025 by rpki-client