Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
File:                     3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa (raw, json)
Hash identifier:          8G1qkV8YxLigOtPXYimrr8D6oLcnmy10M4ZFLnwptME=
Subject key identifier:   C7:D8:5A:82:14:E0:BC:5C:55:55:DA:B1:34:97:4A:8B:55:1E:27:D7
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       22858FCCE5FB6CB7501473DCE081138356534605
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
Signing time:             Fri 29 Nov 2024 13:35:00 +0000
ROA not before:           Fri 29 Nov 2024 13:30:00 +0000
ROA not after:            Fri 28 Nov 2025 13:35:00 +0000
asID:                     273993
IP address blocks:        148.222.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:8f:cc:e5:fb:6c:b7:50:14:73:dc:e0:81:13:83:56:53:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Nov 29 13:30:00 2024 GMT
            Not After : Nov 28 13:35:00 2025 GMT
        Subject: CN=C7D85A8214E0BC5C5555DAB134974A8B551E27D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:ff:96:db:98:93:a4:c8:fc:cc:da:01:52:
                    3d:f4:4d:aa:0b:85:22:68:25:1c:7f:82:6f:f4:bf:
                    38:97:95:5c:c2:dd:dc:4a:a5:d7:d2:77:02:61:30:
                    b3:03:df:95:9d:ff:c3:cb:b6:71:63:83:81:03:91:
                    e5:e1:e1:1b:4b:85:2e:8d:57:f2:f1:ac:83:58:74:
                    a6:bc:ab:59:02:42:b1:68:5c:95:ad:70:e1:91:a2:
                    f5:32:20:f7:45:a7:a3:e6:b8:ac:ca:1d:db:a6:80:
                    d0:60:4f:94:30:3e:c1:31:fa:9f:54:63:46:da:74:
                    f0:e4:43:3b:a2:c2:f5:bc:ff:9a:cd:e3:90:d0:d9:
                    32:6a:9e:3c:b0:73:d3:66:bb:48:aa:3b:34:f7:89:
                    be:04:d8:12:ff:a9:4f:cf:4c:70:9b:71:37:08:51:
                    d4:c2:71:85:4d:77:69:e4:2d:34:fe:bf:ac:ab:6a:
                    d9:7d:2d:1c:26:c7:1d:ff:48:53:76:1e:02:a5:7a:
                    a2:92:fe:f4:64:76:8f:68:1d:ee:d6:2e:1b:85:93:
                    a2:6a:e0:4d:32:1c:4f:1e:cf:ac:b6:e2:93:a6:eb:
                    c7:7b:15:3b:9d:2f:9a:97:85:75:4f:62:66:e2:c2:
                    d7:4c:5d:eb:4f:55:67:a4:e1:f5:23:2b:f3:68:3f:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:5A:82:14:E0:BC:5C:55:55:DA:B1:34:97:4A:8B:55:1E:27:D7
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:58:b7:2c:c4:e7:78:43:6c:4f:3d:f0:1e:bd:0e:13:88:
         a8:a0:60:9d:61:5a:45:ee:56:28:f3:2d:c3:78:e6:58:8c:e6:
         ca:ab:ae:d2:01:24:b4:04:62:35:2b:76:75:70:87:c8:fe:2a:
         55:bf:48:1e:d1:bd:75:0d:8a:5d:48:22:b7:f6:72:eb:bf:09:
         84:ee:54:3c:aa:ec:22:fa:e7:e7:49:15:24:6e:ec:37:42:a6:
         30:ee:0c:db:ed:bb:d5:02:f7:28:62:32:15:de:7c:cf:de:f7:
         90:69:57:4d:3e:37:24:b6:36:eb:e8:66:bc:77:7c:24:3e:72:
         37:9d:d7:8c:3f:a3:9b:06:f8:9e:df:4a:9e:6d:66:6e:e3:d9:
         37:82:7e:c1:c1:8f:fd:77:82:e6:93:00:f8:0b:3c:24:b1:c2:
         e0:1d:de:2b:ae:5c:09:19:7a:b5:21:b4:f5:cc:74:da:d7:8c:
         63:d6:03:89:e5:10:6e:76:96:86:18:88:2e:46:ca:27:a0:6e:
         69:6a:91:ec:1f:a1:69:ac:4a:ce:74:e7:15:6d:5a:00:8d:de:
         5c:f6:3f:1c:cf:b3:18:84:bb:ef:21:c1:3d:86:86:c0:0a:f1:
         1c:65:0e:c5:d7:5c:8e:77:4a:b7:e3:cf:24:f1:e8:86:e2:18:
         37:15:45:c3
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIoWPzOX7bLdQFHPc4IETg1ZTRgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNDExMjkxMzMwMDBaFw0yNTExMjgxMzM1MDBaMDMxMTAvBgNV
BAMTKEM3RDg1QTgyMTRFMEJDNUM1NTU1REFCMTM0OTc0QThCNTUxRTI3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIf+W25iTpMj8zNoBUj30TaoL
hSJoJRx/gm/0vziXlVzC3dxKpdfSdwJhMLMD35Wd/8PLtnFjg4EDkeXh4RtLhS6N
V/LxrINYdKa8q1kCQrFoXJWtcOGRovUyIPdFp6PmuKzKHdumgNBgT5QwPsEx+p9U
Y0badPDkQzuiwvW8/5rN45DQ2TJqnjywc9Nmu0iqOzT3ib4E2BL/qU/PTHCbcTcI
UdTCcYVNd2nkLTT+v6yratl9LRwmxx3/SFN2HgKleqKS/vRkdo9oHe7WLhuFk6Jq
4E0yHE8ez6y24pOm68d7FTudL5qXhXVPYmbiwtdMXetPVWek4fUjK/NoP+6bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUx9haghTgvFxVVdqxNJdKi1UeJ9cwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMxMzQzODJlMzIzMjMyMmUzMjMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzOTM5MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
3u4wDQYJKoZIhvcNAQELBQADggEBAA6yWLcsxOd4Q2xPPfAevQ4TiKigYJ1hWkXu
VijzLcN45liM5sqrrtIBJLQEYjUrdnVwh8j+KlW/SB7RvXUNil1IIrf2cuu/CYTu
VDyq7CL65+dJFSRu7DdCpjDuDNvtu9UC9yhiMhXefM/e95BpV00+NyS2NuvoZrx3
fCQ+cjed14w/o5sG+J7fSp5tZm7j2TeCfsHBj/13guaTAPgLPCSxwuAd3iuuXAkZ
erUhtPXMdNrXjGPWA4nlEG52loYYiC5GyiegbmlqkewfoWmsSs505xVtWgCN3lz2
PxzPsxiEu+8hwT2GhsAK8RxlDsXXXI53SrfjzyTx6IbiGDcVRcM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:43 2025 by rpki-client