Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
File:                     3135302e3138382e302e302f31362d3234203d3e203230333132.roa (raw, json)
Hash identifier:          ln/BfL9Pf0QcVFFRtdjvAuqW9+mrqkEu9s3rUEKIfIg=
Subject key identifier:   17:3E:81:37:51:D4:7A:DC:C0:2C:59:21:81:4B:B6:5E:01:09:17:60
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       19E9760B4A1D17006375D8820DDDF6CF26B23EA3
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
Signing time:             Tue 04 Feb 2025 18:21:38 +0000
ROA not before:           Tue 04 Feb 2025 18:16:38 +0000
ROA not after:            Tue 03 Feb 2026 18:21:38 +0000
asID:                     20312
IP address blocks:        150.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e9:76:0b:4a:1d:17:00:63:75:d8:82:0d:dd:f6:cf:26:b2:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:38 2025 GMT
            Not After : Feb  3 18:21:38 2026 GMT
        Subject: CN=173E813751D47ADCC02C5921814BB65E01091760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:5d:1b:2a:b9:1e:c0:10:53:38:fd:1a:fb:
                    8b:70:11:f7:19:26:02:ce:39:85:74:18:bc:41:81:
                    cb:38:a9:56:73:87:8d:bb:85:28:1e:2a:7f:0c:03:
                    91:ac:81:aa:5e:ce:56:c2:08:4c:0d:ff:ec:16:c5:
                    b4:0c:9a:45:48:04:67:e3:65:3d:1c:f1:a1:fb:21:
                    3b:61:fe:f2:0e:c4:fc:98:f6:30:a9:1a:bb:3e:c4:
                    c3:ca:c6:3b:5c:bc:de:1e:e8:c8:ef:e5:01:8e:22:
                    6f:7b:26:5c:55:3f:8a:5a:1a:7f:f5:e8:1e:ce:e7:
                    cd:67:ec:47:7c:b3:a6:6c:88:f8:49:45:16:16:1b:
                    49:69:7a:d9:58:0a:70:da:89:c0:bb:db:c1:a2:0e:
                    1e:ec:71:9c:87:87:01:08:78:b0:68:57:aa:06:41:
                    db:f9:13:af:bc:7f:5a:bd:c4:05:40:0c:47:39:77:
                    7b:81:7f:63:1b:05:3d:4d:96:4c:a8:0b:1d:68:29:
                    54:df:c2:ef:ec:ec:c7:f9:e8:e9:5b:65:4e:e2:c0:
                    f9:15:14:0d:e4:bf:f3:63:06:24:25:fe:e4:6e:a8:
                    12:54:ba:7e:2c:bd:c5:d0:a0:e4:42:98:54:0d:d7:
                    78:6e:43:49:2c:2d:63:e5:0d:a2:34:a8:d4:e7:77:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:81:37:51:D4:7A:DC:C0:2C:59:21:81:4B:B6:5E:01:09:17:60
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dc:16:27:e2:63:ae:d6:03:79:30:75:07:e2:c0:7f:68:6a:22:
         9d:a8:92:40:8e:a5:26:36:76:80:3a:90:6b:bb:97:46:db:bc:
         3c:fe:c3:53:02:a2:25:6c:71:91:15:7d:da:1f:40:08:4d:b5:
         33:59:81:ab:7a:a4:df:76:f1:f3:94:89:ed:5b:98:9b:17:d2:
         66:8e:ef:72:de:53:a1:5d:20:70:a5:1c:0d:82:d4:6a:62:60:
         ee:2e:db:51:4f:8a:7a:46:a1:53:3c:46:45:80:7a:76:3f:e3:
         db:7d:5d:b0:29:9f:61:c5:b4:ca:b7:a2:d1:b2:65:a2:7e:96:
         49:5f:8f:26:e7:2b:35:2a:d4:35:82:28:79:5d:bd:e8:25:03:
         1c:31:84:6a:ed:b7:af:a7:47:b2:5f:6a:7a:c6:e4:3b:1d:f2:
         56:8e:9d:69:e1:db:83:a6:20:2b:8c:0e:ae:4a:a9:a8:b1:2d:
         73:c4:2e:8b:11:c5:70:e9:52:74:42:4c:23:fb:d4:3e:c4:3f:
         29:25:c4:6a:f8:60:8b:3f:66:f4:ee:32:77:9d:96:8b:15:3c:
         c4:d9:85:9e:bf:99:4e:ed:58:44:c7:7c:41:d1:79:54:af:48:
         90:a4:53:14:4d:d4:ba:5a:e9:e2:ae:4b:49:47:f3:6b:4f:70:
         d8:b6:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:08 2025 by rpki-client