Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          RKLQH1s1lOEWurwIi4Or80wig6LMXQkhJktamW85Nps=
Subject key identifier:   2D:4E:14:F8:9E:2D:F7:63:BE:F7:5C:B6:2C:55:AA:B7:84:1D:8F:D2
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       1E808F2054F2E95EA275A4E462CF8F9442AC2F7D
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 04 Feb 2025 18:21:39 +0000
ROA not before:           Tue 04 Feb 2025 18:16:39 +0000
ROA not after:            Tue 03 Feb 2026 18:21:39 +0000
asID:                     27891
IP address blocks:        150.187.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:80:8f:20:54:f2:e9:5e:a2:75:a4:e4:62:cf:8f:94:42:ac:2f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:39 2025 GMT
            Not After : Feb  3 18:21:39 2026 GMT
        Subject: CN=2D4E14F89E2DF763BEF75CB62C55AAB7841D8FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:05:42:a9:71:7e:12:72:cd:34:54:c0:39:
                    2d:68:73:b5:3e:c1:9d:2d:06:83:3e:e2:b4:da:e3:
                    56:1c:9a:22:83:dd:a7:70:f2:c4:81:a8:70:c9:d9:
                    2d:8d:9f:72:0f:6e:18:0e:93:6e:9c:ee:0a:6f:d4:
                    fb:24:28:50:a8:7a:0b:72:da:c4:a7:c9:f9:66:da:
                    98:64:80:38:e1:56:04:25:1d:60:76:48:09:3f:ae:
                    bd:55:8b:16:93:b5:76:4b:7b:4d:db:e1:f0:15:88:
                    d1:af:6c:f2:6a:e8:5c:45:5d:29:c7:7a:ea:b0:c7:
                    fd:00:61:2d:b5:71:be:0a:fc:26:f0:f1:12:14:87:
                    c5:21:b8:c7:24:5e:8a:08:4b:a6:74:cd:b8:81:f8:
                    0a:94:d6:d8:57:16:86:ef:90:c3:a6:38:ed:78:2b:
                    3e:78:37:3d:d0:da:b4:a2:17:b6:5e:15:a1:5a:4d:
                    43:18:a2:22:cf:1c:bb:3d:03:1f:e0:85:e0:ef:41:
                    ec:65:dc:4b:67:51:32:76:ed:89:96:36:85:1d:e2:
                    cc:3d:fc:e0:b2:14:79:bc:eb:ef:8a:3d:65:dc:4f:
                    ee:45:17:c5:82:00:c8:f1:81:6a:45:bb:76:4b:51:
                    ec:66:78:94:51:77:49:d8:20:db:dc:33:ae:de:02:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:14:F8:9E:2D:F7:63:BE:F7:5C:B6:2C:55:AA:B7:84:1D:8F:D2
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:3d:c0:df:7a:df:54:42:f4:ac:11:54:e2:8a:cc:f4:f2:6a:
         76:97:fc:65:c6:8a:26:fd:2a:b6:a3:5f:a7:3d:cf:f9:53:66:
         29:90:dc:a4:bc:76:11:d2:11:be:d9:7a:d8:12:86:f7:8c:b5:
         92:e0:47:c8:00:c1:ad:0b:61:3a:80:15:b8:01:72:13:ec:82:
         86:ed:40:38:e9:2d:ad:1e:12:f1:e3:fc:28:65:13:85:6b:2a:
         1f:b3:ce:e1:52:ac:58:7e:43:07:a3:2b:58:73:f1:d2:5f:19:
         23:8b:38:23:02:48:fb:c7:59:c1:8d:ca:1d:34:39:c5:5e:cb:
         1f:a9:1e:be:8a:25:5b:c3:f4:ae:4a:43:62:85:2a:8f:f1:55:
         d2:47:bd:f6:9e:56:cf:3a:30:20:38:68:2f:16:4f:57:e2:93:
         0d:46:1b:44:96:5c:5d:d3:c2:c0:96:6d:0c:47:1b:78:47:6d:
         83:39:a9:d3:18:af:1d:99:58:c2:3b:3f:08:2a:98:16:99:65:
         30:23:e7:f8:ff:91:2a:13:d4:ff:ac:23:88:b7:5f:59:b4:d6:
         84:7a:3f:d8:46:f5:21:d6:a9:ba:bf:7a:30:f4:a7:e1:4a:83:
         e2:cc:68:49:18:a3:45:fe:1b:ef:58:37:35:10:28:ba:d8:31:
         98:84:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:49 2025 by rpki-client