Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa
File:                     3135302e3138362e33322e302f31392d3139203d3e203137323837.roa (raw, json)
Hash identifier:          Im8O1YceOk8yWkYUN6huD6Ds4McP87wSbe1UK7zb9/w=
Subject key identifier:   73:8E:F6:1F:C1:8F:85:8D:A6:2D:06:08:3E:D8:A5:EC:6E:D1:F0:80
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       6DFCE6AA0066C042EE466F14894BFB68BD7611
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa
Signing time:             Tue 04 Feb 2025 18:21:40 +0000
ROA not before:           Tue 04 Feb 2025 18:16:40 +0000
ROA not after:            Tue 03 Feb 2026 18:21:40 +0000
asID:                     17287
IP address blocks:        150.186.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fc:e6:aa:00:66:c0:42:ee:46:6f:14:89:4b:fb:68:bd:76:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:40 2025 GMT
            Not After : Feb  3 18:21:40 2026 GMT
        Subject: CN=738EF61FC18F858DA62D06083ED8A5EC6ED1F080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:0f:93:76:6a:39:27:79:9a:2b:09:e2:03:
                    da:c1:00:fe:07:e6:ed:77:89:3b:1f:fb:07:d6:07:
                    04:2b:74:ee:e4:fa:99:6d:50:09:39:c8:c3:8b:11:
                    b7:b2:d8:e0:48:2a:48:28:26:41:e4:33:5d:6b:12:
                    fe:3e:ac:c8:19:47:27:4c:34:fa:78:ac:ca:58:2c:
                    1c:85:e9:5c:f8:ff:0d:9d:26:9a:9b:aa:ad:85:53:
                    37:9d:26:aa:19:0b:db:9f:4d:3e:9c:e5:ce:73:0b:
                    78:f2:75:2d:0d:bb:3b:59:3f:9a:0e:4a:32:79:33:
                    64:af:bc:b7:f1:3e:d9:68:c0:0b:ed:e7:31:5e:a1:
                    49:fb:5e:64:fc:77:e5:fa:a7:b5:cd:6d:3c:56:74:
                    0d:b5:7b:99:69:e8:52:94:09:3b:15:3c:02:6c:55:
                    fa:fe:04:fd:f2:d5:d5:c4:06:fb:d5:a3:d7:31:8b:
                    b3:80:c3:51:12:1d:b1:f6:6f:a5:7a:4f:a3:72:9f:
                    33:b0:ab:36:1f:32:55:78:d4:3b:86:1a:2e:ca:58:
                    5e:b5:be:d4:78:f0:d0:30:a4:77:65:5c:bc:ce:da:
                    6d:64:4e:9d:a7:a7:66:14:d9:15:20:55:33:07:b9:
                    0b:e0:aa:fe:5c:e4:4a:3f:4b:a2:00:68:0f:49:83:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8E:F6:1F:C1:8F:85:8D:A6:2D:06:08:3E:D8:A5:EC:6E:D1:F0:80
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e2:ef:a0:f9:58:8d:6d:d0:ce:60:24:bb:7f:8b:30:5a:d4:67:
         c6:e3:24:15:d9:de:d9:43:4b:54:9b:4c:bc:6c:df:98:8b:7a:
         5c:a7:ea:cd:3c:57:34:68:9f:fc:e2:34:de:19:e6:69:24:6e:
         07:77:69:5a:24:6a:b2:0d:2d:ab:04:d8:6f:ae:40:4e:f5:2a:
         8a:28:87:bf:6a:77:4a:34:b3:b7:e3:70:20:ab:db:b4:ff:3a:
         f6:b0:d5:2a:ae:cd:84:58:53:00:c1:0f:2a:cc:78:e6:9e:0c:
         d3:ea:4b:b0:bb:2b:01:87:15:fd:3c:8f:ce:bf:ce:82:b9:63:
         b3:e9:66:0f:05:af:50:69:9f:6d:66:1b:0f:f5:fd:1b:5b:f7:
         7f:cb:bd:2e:15:dd:95:21:84:1d:c8:54:c1:56:60:c1:0e:f3:
         72:0b:54:d1:af:0c:96:b5:d7:22:2e:d0:a8:b9:cc:d9:0e:97:
         1f:70:3a:77:21:9b:79:94:85:20:d0:4b:4b:47:1a:25:17:1b:
         a2:ba:ac:e6:c1:0e:ce:43:c4:78:48:57:09:f9:7c:2d:a3:75:
         7f:33:c4:5f:be:eb:6e:8a:b9:43:39:fb:57:a8:2b:9e:58:bc:
         e5:19:6c:26:a4:83:66:cc:74:84:7a:42:50:00:78:84:7e:8b:
         b7:10:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client