Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa
File:                     3134382e3231382e302e302f31372d3234203d3e203238343737.roa (raw, json)
Hash identifier:          SDEBVOg5UyM82ZSX6DHc6W8yohM/UBbPkTfasTvfoag=
Subject key identifier:   B3:D2:75:09:B9:D0:FF:B4:28:C5:D4:83:84:B8:64:BF:65:E0:95:9C
Certificate issuer:       /CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
Certificate serial:       0A3A26D8BA255987921540E8A8C6C03FA0E18ED7
Authority key identifier: 34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa
Signing time:             Tue 04 Feb 2025 18:37:29 +0000
ROA not before:           Tue 04 Feb 2025 18:32:29 +0000
ROA not after:            Tue 03 Feb 2026 18:37:29 +0000
asID:                     28477
IP address blocks:        148.218.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:26:d8:ba:25:59:87:92:15:40:e8:a8:c6:c0:3f:a0:e1:8e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
        Validity
            Not Before: Feb  4 18:32:29 2025 GMT
            Not After : Feb  3 18:37:29 2026 GMT
        Subject: CN=B3D27509B9D0FFB428C5D48384B864BF65E0959C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:59:74:55:3f:7c:69:d9:7e:63:45:ec:8c:
                    f4:6b:58:83:55:f9:86:2c:d0:b2:c3:e2:02:ee:37:
                    93:a3:c9:fd:88:ef:3d:43:01:d1:24:fb:03:b7:3b:
                    e4:10:44:01:51:a0:8f:95:c5:10:2e:39:a4:10:86:
                    77:3d:fd:eb:50:c9:ea:09:73:d3:80:25:c3:45:8f:
                    38:da:fe:c7:75:b9:e7:35:01:00:42:a0:24:ae:01:
                    96:ec:fa:a9:08:06:a9:f9:37:17:97:85:96:b8:24:
                    67:79:7f:a8:c2:b1:b0:ce:9d:61:fe:43:f2:06:44:
                    8d:da:f4:60:93:db:00:2c:ce:5a:83:15:bb:87:68:
                    aa:d1:73:4b:ff:46:6f:8b:b2:b8:32:42:2c:89:43:
                    d7:ce:c5:f6:2e:ad:4e:fe:45:2d:1a:16:a0:01:8a:
                    1f:f9:28:eb:08:17:75:ba:1f:d9:0b:44:06:83:85:
                    28:33:c0:02:05:55:50:95:c5:af:a9:fd:fe:20:af:
                    c3:7c:8f:3e:22:4e:57:d2:40:d5:3e:94:39:d7:a5:
                    65:4d:cd:41:ee:50:e1:fb:1f:03:55:27:6f:f2:65:
                    61:7f:1d:66:13:c3:27:9a:ce:5e:f2:22:d9:17:27:
                    d2:06:db:18:53:cc:00:2e:97:c0:06:a0:bc:30:dd:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:75:09:B9:D0:FF:B4:28:C5:D4:83:84:B8:64:BF:65:E0:95:9C
            X509v3 Authority Key Identifier:
                keyid:34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.218.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:a5:b8:91:12:6c:7e:19:41:22:a7:8c:de:8e:28:81:21:
         dd:47:bc:aa:de:b4:99:82:c5:44:0d:b2:53:b8:e2:f4:a7:46:
         33:09:0c:b8:40:5a:9e:dd:85:4d:32:c1:8b:88:72:30:1f:ea:
         6a:49:6d:5b:50:7c:f7:4e:de:67:6d:64:08:90:5e:8f:2f:e4:
         52:93:36:3b:1e:d7:66:6a:27:cb:47:b4:79:84:93:41:82:fe:
         ed:37:ef:fe:6d:aa:6a:98:45:b3:9e:a0:e8:14:7d:6a:46:a2:
         61:fa:af:a1:33:2c:ee:c0:eb:31:16:ec:07:0b:a1:74:91:81:
         64:dc:6c:32:bc:eb:59:ae:ea:d6:09:e1:c1:da:0b:05:84:cd:
         c4:87:7a:8e:07:7c:72:1a:55:40:bd:dd:ea:52:31:6e:4e:5e:
         e1:a3:b0:79:91:0d:e9:19:1d:fb:04:27:dd:e7:70:5e:61:bf:
         d2:b6:b6:0f:82:de:a5:31:21:5a:ba:b4:d3:66:20:c7:1a:7f:
         34:69:70:8b:37:d0:0f:3b:de:56:3b:72:13:8e:79:05:ad:be:
         3d:b1:cb:9c:69:49:d9:e0:00:ce:6a:72:15:81:f8:2e:16:8b:
         bb:fe:06:b4:4d:13:b5:34:b4:40:96:67:eb:05:88:85:80:a1:
         bb:e6:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----