Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
File:                     3138362e32322e302e302f31352d3234203d3e203237373437.roa (raw, json)
Hash identifier:          jnaf29631C4L+zNz/UbtwEPj4tc7UOehn8SVW/BP3Oc=
Subject key identifier:   D6:95:8B:D8:83:E2:C2:5A:E3:5A:89:DF:C3:F0:DF:C2:F0:1D:4A:BA
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       42E005A562B801D2198C01EB62814AF044465AFD
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
Signing time:             Tue 04 Feb 2025 18:34:52 +0000
ROA not before:           Tue 04 Feb 2025 18:29:52 +0000
ROA not after:            Tue 03 Feb 2026 18:34:52 +0000
asID:                     27747
IP address blocks:        186.22.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:05:a5:62:b8:01:d2:19:8c:01:eb:62:81:4a:f0:44:46:5a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Feb  4 18:29:52 2025 GMT
            Not After : Feb  3 18:34:52 2026 GMT
        Subject: CN=D6958BD883E2C25AE35A89DFC3F0DFC2F01D4ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:30:99:f6:a9:fc:72:80:44:07:9c:fb:01:
                    65:8f:76:51:f0:37:9f:61:eb:eb:6d:3f:39:5a:30:
                    0d:71:a9:29:71:77:4c:12:19:ce:e9:1e:82:ec:de:
                    7e:25:fb:bf:db:b5:45:40:6d:01:49:9b:d0:78:19:
                    64:bd:a0:47:13:03:e0:9c:f1:b4:99:ce:f7:1c:9d:
                    4a:68:63:65:39:fc:ca:7b:a1:1f:6d:25:a5:42:a9:
                    eb:fc:e2:57:7b:84:3d:94:d1:29:4d:5c:7e:8f:96:
                    3f:c5:61:63:85:72:b8:6c:e9:ae:06:0b:23:67:f2:
                    3d:78:60:3e:4d:d3:cc:db:3b:11:5b:d1:74:e8:10:
                    34:8f:26:d4:bd:b8:f1:28:3a:44:7b:52:32:71:b0:
                    fe:aa:ec:91:ea:b7:22:1b:46:3c:d0:35:b7:1e:0e:
                    c0:37:17:b5:1c:e6:ce:43:dc:92:6b:ba:b1:11:4c:
                    1b:2e:d7:30:24:11:20:56:c7:8c:60:ac:73:d4:9c:
                    d5:7d:72:24:2c:49:ad:75:5c:dd:db:cf:21:0a:c4:
                    c8:88:06:bd:5d:cf:92:5e:2c:96:46:64:ba:41:5a:
                    48:9b:52:d8:1d:ff:19:7b:09:ff:ff:7d:ac:c8:95:
                    a2:49:df:35:7a:37:a4:4e:89:c8:9a:93:c4:bc:35:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:8B:D8:83:E2:C2:5A:E3:5A:89:DF:C3:F0:DF:C2:F0:1D:4A:BA
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.22.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         77:79:46:2d:10:2b:d1:15:48:5b:d9:8a:78:90:b0:81:4a:01:
         cc:4a:c5:68:ea:77:ef:b7:52:73:d3:06:06:bd:f4:f0:de:a9:
         e5:2d:b5:d5:36:3a:bc:f5:5d:e9:59:3b:d8:21:b9:b3:2e:ef:
         49:8c:fc:c2:9e:a6:01:dd:e7:63:16:81:72:19:4e:fc:01:b3:
         a9:9c:a3:8d:1d:78:8e:03:fe:92:56:08:4f:27:4c:9e:20:1a:
         f4:cf:f9:ff:df:ca:e7:88:cc:36:1d:a4:aa:a3:c7:96:ec:64:
         a4:ad:67:fe:80:68:03:e5:87:fe:12:b8:b1:98:97:72:fe:33:
         28:32:47:df:98:9e:d5:da:b2:15:99:1d:dc:bb:2a:15:c7:6b:
         07:a8:81:50:bb:1d:c2:d6:66:01:60:bc:99:b0:a1:42:68:d3:
         9a:61:b3:2c:62:4b:7f:76:7d:bf:12:af:a6:44:a2:4d:dc:d2:
         c2:0e:fd:23:59:9e:64:ac:00:57:91:b2:a7:f4:ee:99:65:24:
         09:f0:90:73:93:51:e4:80:b7:d0:ef:ed:c9:48:c2:08:c5:61:
         fa:ec:30:8e:6f:ec:27:05:38:de:ff:87:5d:48:dc:6a:8e:cd:
         4f:9c:f4:91:ab:39:8b:c1:52:42:23:b7:a8:69:fb:8f:3f:88:
         72:c2:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----