Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
File:                     3134382e3233342e302e302f31362d3136203d3e2033343534.roa (raw, json)
Hash identifier:          ViP6jDn078OIwFYTIZriB8lQ7NnRP3aT+0x3C4En0HA=
Subject key identifier:   D3:8D:4D:CA:BA:1E:EF:11:1B:65:2E:D9:C2:03:8B:65:76:6A:14:77
Certificate issuer:       /CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
Certificate serial:       4DD1078D96A8EF8A2F2B78E4E31E696AA3DDCF06
Authority key identifier: 50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
Signing time:             Tue 04 Feb 2025 18:08:34 +0000
ROA not before:           Tue 04 Feb 2025 18:03:34 +0000
ROA not after:            Tue 03 Feb 2026 18:08:34 +0000
asID:                     3454
IP address blocks:        148.234.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:07:8d:96:a8:ef:8a:2f:2b:78:e4:e3:1e:69:6a:a3:dd:cf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
        Validity
            Not Before: Feb  4 18:03:34 2025 GMT
            Not After : Feb  3 18:08:34 2026 GMT
        Subject: CN=D38D4DCABA1EEF111B652ED9C2038B65766A1477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:d2:74:5c:35:66:15:41:db:a9:b3:7a:06:
                    0d:9c:46:41:74:b7:49:30:52:40:1b:24:67:76:44:
                    da:03:9a:c4:32:3c:f8:4b:36:d4:c5:86:6c:e0:85:
                    b0:2f:f8:96:f0:ef:e6:38:31:5b:2f:75:47:ab:71:
                    5b:3f:49:76:c8:c4:ac:a0:43:d1:b8:6c:69:d6:39:
                    96:62:2a:0d:a4:73:59:02:29:a2:1a:1b:ca:16:4a:
                    dd:b7:e5:ef:88:16:65:16:01:42:88:24:66:36:d4:
                    5b:a5:d9:3e:b7:68:6d:94:d4:53:79:bc:a9:0e:c9:
                    b6:53:08:b5:d4:b6:24:04:f7:dc:d6:13:7e:77:25:
                    e0:35:ee:71:f4:0b:d8:47:c2:10:af:ef:61:67:50:
                    59:be:57:96:24:01:6d:fb:dd:f2:d8:96:eb:b4:2e:
                    c6:29:d5:ba:37:4e:e7:97:2e:91:25:3c:c2:23:5e:
                    68:92:14:5f:ce:48:66:4c:e0:b7:ea:80:65:c7:b3:
                    f0:ff:aa:7a:dd:7c:a2:39:f1:39:0b:92:37:f5:2b:
                    b1:11:ce:1c:8e:3c:8c:95:c4:8a:dd:1c:7a:98:39:
                    50:fa:d1:45:58:a5:b4:9f:49:7e:02:5a:56:4b:f1:
                    6d:ee:ea:f9:92:95:b0:4b:92:48:18:e1:e4:2f:3d:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8D:4D:CA:BA:1E:EF:11:1B:65:2E:D9:C2:03:8B:65:76:6A:14:77
            X509v3 Authority Key Identifier:
                keyid:50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:6e:4b:eb:da:c6:f7:ba:f8:aa:2b:96:a6:24:88:57:aa:
         96:9b:28:bd:d5:cb:c0:b2:63:97:7c:85:59:14:9b:f3:ae:62:
         80:44:42:5b:3e:6e:37:72:28:83:3b:cf:b7:02:b2:61:a0:ae:
         a7:e3:a4:b8:fb:4c:f7:1d:60:a8:a5:7b:ef:f7:bc:b1:69:cf:
         0e:a0:d1:83:1e:51:4c:25:26:88:79:d4:19:06:75:dc:0a:82:
         1c:be:93:0c:12:d6:77:c9:ad:7b:3d:83:43:48:8c:dc:50:22:
         9d:f2:17:f3:db:99:01:eb:b4:ea:23:a7:58:7d:cc:77:b7:79:
         51:cf:27:07:1d:93:b1:f2:f4:ca:75:fc:a2:f5:18:80:ff:b0:
         f6:03:78:af:0b:23:b7:de:9d:52:4f:d7:74:fe:69:dc:1b:d2:
         45:27:fd:6d:5e:20:7b:a4:12:a8:bd:59:13:22:9e:a2:d4:61:
         f6:49:58:9b:8a:2a:92:0d:5a:20:35:23:e5:52:0c:33:a9:6c:
         48:90:a1:42:88:a2:83:08:bb:6d:92:a1:47:b2:cf:35:6c:ea:
         2b:04:a4:0d:00:26:96:79:66:93:b3:3e:cd:61:af:4c:65:1e:
         75:ba:37:41:26:21:83:18:51:b0:fa:f4:db:cd:1e:c5:59:35:
         19:07:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:10 2025 by rpki-client