Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e302e302f31372d3234203d3e2038313633.roa
File:                     3138362e3132312e302e302f31372d3234203d3e2038313633.roa (raw, json)
Hash identifier:          SEM2J3ZvR5p/SiSW003Ty2U/R0H4IC85RpybmDANHFo=
Subject key identifier:   9C:63:3D:F7:5F:8C:4E:87:E2:59:19:30:09:D8:29:EF:D4:B9:CE:88
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       3E5C2F06D2D888700C01AB411C0D47DF22AAD045
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e302e302f31372d3234203d3e2038313633.roa
Signing time:             Tue 04 Feb 2025 18:46:47 +0000
ROA not before:           Tue 04 Feb 2025 18:41:47 +0000
ROA not after:            Tue 03 Feb 2026 18:46:47 +0000
asID:                     8163
IP address blocks:        186.121.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:2f:06:d2:d8:88:70:0c:01:ab:41:1c:0d:47:df:22:aa:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Feb  4 18:41:47 2025 GMT
            Not After : Feb  3 18:46:47 2026 GMT
        Subject: CN=9C633DF75F8C4E87E259193009D829EFD4B9CE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:4d:9e:60:2c:6d:3e:73:e6:3e:ff:39:c1:
                    5f:2c:18:34:59:b5:b9:37:aa:f0:b8:58:d5:eb:6c:
                    63:45:3e:1e:af:07:29:a7:22:58:d2:14:e6:51:bc:
                    e9:f1:c5:4e:42:cb:58:8b:32:f0:c6:21:34:0c:cb:
                    39:1b:07:26:c3:53:b0:fc:6d:41:e3:ab:10:3b:99:
                    9f:73:b9:64:35:e1:95:63:ac:b0:78:be:30:66:c0:
                    d3:f4:59:a1:f7:84:5b:5e:8d:bf:96:69:88:d7:be:
                    e2:d0:73:5f:74:e4:8b:a8:de:51:5b:80:c1:69:7e:
                    28:80:94:64:ed:32:20:29:4d:b1:90:a5:11:60:fc:
                    cc:51:7f:c2:32:48:f3:5c:38:3f:9e:98:aa:64:d6:
                    49:99:00:28:97:20:6e:66:ed:8a:fe:3a:3f:f6:a3:
                    c8:53:87:30:20:ac:89:ce:38:2f:47:0b:5c:d6:6d:
                    25:82:bd:02:95:f0:4c:cc:54:3c:45:6f:ef:d1:d7:
                    67:1e:d0:6b:cd:e2:00:f6:fb:ec:22:81:ac:19:6b:
                    09:59:a5:7a:91:a5:16:5c:53:64:0c:0d:e2:95:69:
                    01:78:52:2e:57:36:7f:76:9f:2a:7c:2e:ef:9a:38:
                    d9:dd:a0:d9:38:95:43:1f:73:fa:0b:4e:28:11:2a:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:63:3D:F7:5F:8C:4E:87:E2:59:19:30:09:D8:29:EF:D4:B9:CE:88
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e302e302f31372d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:cc:37:bb:6c:2f:59:7d:80:1f:1e:a3:e4:f0:9b:67:fe:
         8b:75:42:6c:86:44:78:78:6d:74:fb:2e:10:52:bd:17:93:68:
         c5:f1:1a:60:f0:4b:9e:60:ee:5e:26:65:a1:0c:86:f5:0b:bf:
         9a:b1:0e:49:fe:10:41:92:65:09:6a:0f:92:2c:1b:f8:c7:29:
         f8:60:d5:08:76:0e:9f:25:2d:8f:b5:34:c7:6b:04:9f:b0:6c:
         79:52:b4:a6:4e:86:84:2c:f0:58:be:5c:e6:37:35:7b:33:d2:
         7b:ed:d0:ea:65:07:83:64:42:da:65:8b:fb:2b:2d:d3:34:7e:
         6a:56:25:1f:b5:e5:25:89:45:b6:62:c2:d6:77:f3:52:53:ec:
         0b:77:0c:2b:31:0c:9e:14:3a:58:09:4c:1a:b6:95:fd:58:3f:
         3e:dc:36:b7:16:3d:4e:46:c8:94:49:58:1e:4c:5c:b5:3e:b1:
         db:22:ea:95:6e:d1:77:e6:a9:0e:df:c8:63:6e:d3:e9:c5:51:
         44:e2:92:5b:7a:65:44:29:02:99:db:3c:74:76:40:27:82:ff:
         5e:5d:17:4e:0f:6c:57:86:79:fa:ec:c7:de:20:1b:a1:39:29:
         c0:cd:db:86:b6:60:ba:f1:bc:0d:d1:06:52:b4:93:88:53:20:
         de:a1:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:39 2025 by rpki-client