Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233362e302f32342d3234203d3e20323639393831.roa
File:                     3134382e3232322e3233362e302f32342d3234203d3e20323639393831.roa (raw, json)
Hash identifier:          ivGzN3ha2AQWwQZplWv4tuhCHw5gwQlWSSCowjCdUoo=
Subject key identifier:   54:D0:72:13:13:63:85:3B:85:D2:1D:A9:40:AE:71:E9:1F:A4:39:25
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       02D4123086C1ADDED9016D9C629D0D79B87F7FC5
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233362e302f32342d3234203d3e20323639393831.roa
Signing time:             Fri 10 Jan 2025 01:40:00 +0000
ROA not before:           Fri 10 Jan 2025 01:35:00 +0000
ROA not after:            Fri 09 Jan 2026 01:40:00 +0000
asID:                     269981
IP address blocks:        148.222.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d4:12:30:86:c1:ad:de:d9:01:6d:9c:62:9d:0d:79:b8:7f:7f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jan 10 01:35:00 2025 GMT
            Not After : Jan  9 01:40:00 2026 GMT
        Subject: CN=54D072131363853B85D21DA940AE71E91FA43925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:4a:81:27:56:9a:60:98:08:e4:d6:8c:2b:
                    f4:9b:eb:ce:89:1d:4f:c8:86:65:33:5a:f0:87:64:
                    ca:2f:71:ac:1c:ec:15:d9:c8:ee:9d:a2:b7:c3:8a:
                    91:d8:95:c6:4f:1b:4b:9e:77:cd:28:23:e2:be:23:
                    38:03:86:5c:5c:dc:7a:25:89:b2:30:bd:50:54:54:
                    85:ac:34:c5:49:06:1c:1c:41:bc:2b:25:ce:dc:b2:
                    8b:16:5e:df:b8:05:3f:a8:4c:27:82:d3:91:66:a3:
                    32:90:33:af:eb:d4:03:da:a4:dd:7d:6a:69:6d:3a:
                    e2:42:0a:a2:19:4f:f1:4d:88:68:32:a4:6f:01:7f:
                    8c:c8:cb:cb:0d:a5:a7:04:f9:cd:dd:f9:07:13:98:
                    c0:71:96:cc:e7:d7:65:1e:92:5e:fe:1a:ca:d1:89:
                    0d:59:22:9d:ef:bf:28:9f:a9:46:55:10:ed:fb:a2:
                    17:2d:2f:c1:80:9a:39:bb:a4:a0:63:e6:8a:47:2e:
                    2b:7b:dc:c6:c5:60:4d:4e:2a:fa:9f:fe:4d:2a:f9:
                    18:91:87:45:2a:65:14:0b:0c:40:0b:fe:02:bb:58:
                    1b:c4:bb:91:49:3e:55:31:55:e9:73:10:8c:fa:c0:
                    49:8c:4a:eb:b0:cd:7c:70:03:cc:82:df:e5:44:cf:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:72:13:13:63:85:3B:85:D2:1D:A9:40:AE:71:E9:1F:A4:39:25
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233362e302f32342d3234203d3e20323639393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:13:b5:4a:18:f6:95:bf:ea:68:ef:b6:8a:cf:ca:5c:5a:41:
         72:58:fe:03:bf:d4:96:54:fd:b8:c9:e1:09:d3:4a:0b:da:ce:
         a2:d7:39:71:99:85:08:ee:fb:f5:fb:71:20:20:cb:7a:ac:31:
         43:96:4c:34:d3:95:33:ec:27:19:31:dd:42:2c:b8:44:7d:d4:
         cf:84:b5:cb:d2:9b:b2:8c:5d:1a:2c:90:bb:76:66:fc:92:39:
         ec:10:0a:1e:2f:80:c8:68:73:93:4a:62:63:ff:95:9d:8d:20:
         63:76:07:62:b8:69:c7:ae:ca:0d:4c:11:69:e9:fd:e5:b5:70:
         09:be:6b:1a:01:eb:d3:fe:44:80:8e:3c:80:f0:54:0f:11:7e:
         1f:0f:a2:79:a9:3f:ca:31:c2:48:a0:d2:42:94:fc:8c:31:c0:
         31:10:ac:4d:0c:4e:c0:29:97:58:30:ba:8c:82:83:0e:30:8e:
         5f:b0:b7:63:43:2e:c3:fe:3d:3d:23:ec:3b:a9:cb:94:1d:95:
         6d:3b:1d:c5:12:f2:9f:00:70:a9:bb:36:4e:a4:19:bc:b0:6b:
         85:98:a0:1d:84:0a:2f:4b:3b:a3:3c:2e:2b:a3:86:dd:f7:35:
         e5:80:e6:c2:7a:1f:75:ca:09:64:01:0b:44:c0:12:e2:1e:b3:
         c5:e6:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:32:28 2025 by rpki-client