Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa
File:                     3134382e3234342e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          ZhpPYqgb2ofbBUCNnlYIxahXqWnsb/TsKdri8N5wXOQ=
Subject key identifier:   0F:25:1C:4D:D2:EA:E2:A9:89:AB:9C:14:ED:E3:CD:13:48:92:B4:34
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       73007384ECF0813F54A42B36CD94C7723381A7E5
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:43 +0000
ROA not before:           Tue 04 Feb 2025 18:47:43 +0000
ROA not after:            Tue 03 Feb 2026 18:52:43 +0000
asID:                     11172
IP address blocks:        148.244.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:00:73:84:ec:f0:81:3f:54:a4:2b:36:cd:94:c7:72:33:81:a7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:43 2025 GMT
            Not After : Feb  3 18:52:43 2026 GMT
        Subject: CN=0F251C4DD2EAE2A989AB9C14EDE3CD134892B434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:54:a9:59:27:41:3d:8d:0a:3f:c5:7c:f7:
                    f2:e9:d9:da:81:ff:5f:4b:e3:81:56:70:3d:ac:bd:
                    2c:9b:06:98:20:28:45:bf:65:03:22:82:ff:a6:ca:
                    0d:e6:1e:cf:4e:ea:52:6d:b6:cd:87:bb:80:d4:2c:
                    3e:06:c2:c0:2f:b0:1f:1b:0e:6b:2a:d3:a5:e0:c5:
                    83:e0:3e:75:ea:a8:7e:26:9c:94:b4:a7:10:43:3a:
                    ad:d9:cd:b0:64:81:57:c4:9c:52:2f:63:b4:a9:ca:
                    48:89:1a:3c:ea:4f:9f:2d:91:e6:e1:10:d7:55:86:
                    ed:23:ba:bf:9f:ce:ba:46:b0:79:28:ad:1e:20:5b:
                    5a:d6:a4:55:95:35:8f:17:b0:91:84:4f:60:54:f9:
                    94:9e:b6:ae:b8:32:95:10:97:d7:62:68:57:6f:97:
                    b7:e3:62:22:cb:66:57:8a:78:a6:2a:de:c8:27:88:
                    ee:5a:04:67:d3:07:f7:79:73:c3:6a:a0:4f:f6:23:
                    1f:2b:ce:6f:8b:d4:87:05:3c:a9:05:2e:eb:35:d9:
                    92:25:95:56:fb:fc:16:7c:b4:4b:cc:62:7d:96:ff:
                    ae:53:2e:01:2c:9c:6b:91:50:bb:51:c8:9e:ad:4b:
                    57:a4:96:cb:60:e9:53:f1:14:60:9c:6c:1b:b1:d4:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:1C:4D:D2:EA:E2:A9:89:AB:9C:14:ED:E3:CD:13:48:92:B4:34
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:12:ab:24:63:76:8c:92:c7:f6:fd:70:30:db:cb:95:6e:
         f7:75:02:f7:10:e7:67:c2:2b:e7:b7:e2:8c:ac:1d:52:a6:d4:
         b6:4b:93:09:9b:43:8a:68:73:09:9a:01:da:7b:d9:7f:00:1a:
         26:4f:83:39:1b:32:ad:43:0e:31:df:f0:95:6b:06:76:39:2f:
         8d:ad:10:1d:cd:29:98:4e:8c:4a:5e:9c:56:bd:39:f5:90:62:
         8f:58:a9:9b:8d:95:cc:5d:5d:55:2b:2d:43:32:56:56:1d:53:
         89:3d:87:ee:10:84:3b:33:53:bf:79:9a:57:ca:70:84:f9:e3:
         f2:56:b1:90:b4:61:25:f9:f5:aa:3c:16:1c:9e:eb:f5:c7:45:
         09:0d:44:b8:6d:0b:27:fd:63:de:d7:e2:bd:cd:ef:c1:fb:eb:
         ee:ba:83:34:4d:32:7b:0d:67:fe:82:ee:3b:13:17:8a:b4:e4:
         04:4f:f6:15:6b:95:8c:71:42:50:46:fb:02:ec:df:af:f7:8f:
         86:25:fe:af:b2:bc:17:c1:3d:e6:55:10:15:d9:39:db:d9:2e:
         cc:90:2f:a7:21:cf:c9:69:ae:10:77:25:01:e7:72:8a:fc:c0:
         ac:19:d8:31:9a:88:7e:9a:4e:70:17:cf:f4:01:88:70:5f:b3:
         e3:be:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:39 2025 by rpki-client