Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
File:                     3138362e3134382e302e302f31382d3234203d3e2037303034.roa (raw, json)
Hash identifier:          pHjyXz8qe0S6v1DDQwJgZK1uCFQu/pCJ+X42nzuG4Kg=
Subject key identifier:   03:B1:F7:4C:25:BE:53:13:C8:A0:21:71:58:C8:05:1C:D6:C9:93:39
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       58A92ACEAE5225820E70E822F37CAF75506BDA3C
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
Signing time:             Wed 22 Jan 2025 19:55:00 +0000
ROA not before:           Wed 22 Jan 2025 19:50:00 +0000
ROA not after:            Wed 21 Jan 2026 19:55:00 +0000
asID:                     7004
IP address blocks:        186.148.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a9:2a:ce:ae:52:25:82:0e:70:e8:22:f3:7c:af:75:50:6b:da:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan 22 19:50:00 2025 GMT
            Not After : Jan 21 19:55:00 2026 GMT
        Subject: CN=03B1F74C25BE5313C8A0217158C8051CD6C99339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:7e:a3:dd:aa:eb:ca:78:76:a5:74:25:bd:
                    01:d0:af:d1:f6:ab:fa:ad:d0:6d:09:c0:8b:0f:f7:
                    c4:fe:a5:04:c3:d7:42:a5:6d:6b:39:a7:3b:d7:bd:
                    8b:20:70:e3:0a:e4:7a:5c:57:5f:f6:ee:1e:bd:79:
                    12:a0:c6:5a:7d:fe:2c:21:78:b4:90:94:d9:bf:6e:
                    60:80:63:bc:1b:5f:03:f5:9a:40:3d:0d:b6:f6:8b:
                    0b:af:95:c4:dd:75:66:24:21:ed:32:1c:64:99:99:
                    8e:d3:df:23:1f:1d:33:af:43:de:f7:57:bc:ef:ae:
                    ef:b1:53:16:41:1e:42:3b:08:86:af:49:59:fb:55:
                    ee:a4:a6:e7:86:0b:c4:ba:42:9f:20:06:b1:bb:12:
                    4a:2a:19:8e:b9:b3:84:fe:ff:48:b9:5d:26:62:dd:
                    a2:87:15:79:bc:c9:78:ce:7a:0b:4a:a4:00:08:42:
                    8b:c8:3e:22:c2:ea:ef:39:8e:d3:fa:76:5f:4d:87:
                    79:93:a8:ac:f4:61:5e:a4:49:d0:99:99:ed:08:4b:
                    36:72:e7:68:34:87:0d:2a:72:59:4b:ab:2e:93:a5:
                    1c:2a:ad:0a:e8:c5:7f:50:0e:31:1c:79:6e:53:28:
                    50:e5:7b:26:1d:a3:84:d8:e7:c1:8f:02:0a:88:72:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:F7:4C:25:BE:53:13:C8:A0:21:71:58:C8:05:1C:D6:C9:93:39
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:a3:a3:0e:96:08:7b:c5:94:a0:56:ff:20:64:51:d3:55:
         e9:e2:d9:7f:c8:54:83:b5:7d:a8:2f:ed:f7:43:09:1f:63:ca:
         48:72:60:34:86:8b:01:ef:b5:49:8c:5e:8c:f1:53:da:3e:13:
         82:68:78:fc:60:ca:9c:5f:49:43:dc:49:a0:33:de:e1:49:0b:
         b3:98:9f:1f:01:e5:a4:a7:82:60:ae:a0:8f:29:99:03:b3:48:
         3f:6a:4b:48:51:87:8b:4c:4a:07:1b:32:38:5a:06:43:30:cf:
         1c:ef:3c:e1:d6:ff:f4:e0:cc:94:0c:76:c9:ab:93:09:c0:93:
         be:87:a9:9d:50:34:f8:68:ac:e3:7b:89:0a:bc:28:f9:59:e8:
         48:a7:77:02:ec:d5:28:b2:57:ce:33:0d:9b:4d:ae:b4:30:67:
         23:0e:4c:f2:96:ac:e8:2f:1f:8d:84:21:b7:c1:8d:9d:a1:a4:
         1d:ee:3d:a4:be:87:25:41:99:a2:e0:bc:08:b6:5b:7a:c3:e5:
         55:32:47:32:f8:a9:37:6f:22:8e:9b:ed:25:26:81:34:58:05:
         1a:01:28:25:7d:a0:74:f0:1c:4a:cb:91:7d:88:04:17:1a:5e:
         66:ea:88:ca:cb:5f:87:ee:ac:fd:80:d2:ee:5f:22:e3:fd:fd:
         ee:bb:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----