Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa
File:                     3138362e3138392e37302e302f32332d3234203d3e203532333431.roa (raw, json)
Hash identifier:          VicaMKc9n/2rpyh4iKb9nTQGgML0NC7SCq1ouiB/YlU=
Subject key identifier:   24:73:0B:A9:66:49:1F:E4:79:BE:9E:95:C8:F3:47:AC:0F:BB:97:50
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       09296C7C1DEF9C5C8CE4DB06586218613B818457
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa
Signing time:             Tue 04 Feb 2025 18:43:27 +0000
ROA not before:           Tue 04 Feb 2025 18:38:27 +0000
ROA not after:            Tue 03 Feb 2026 18:43:27 +0000
asID:                     52341
IP address blocks:        186.189.70.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:29:6c:7c:1d:ef:9c:5c:8c:e4:db:06:58:62:18:61:3b:81:84:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Feb  4 18:38:27 2025 GMT
            Not After : Feb  3 18:43:27 2026 GMT
        Subject: CN=24730BA966491FE479BE9E95C8F347AC0FBB9750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2d:a9:79:d8:29:4e:92:8f:82:db:99:12:8a:
                    38:7f:aa:73:78:c7:f7:f0:b1:c0:4b:c1:55:9b:fa:
                    d8:66:6c:63:a1:4c:d7:c7:82:e0:2a:14:5a:1c:3c:
                    29:c2:ea:d3:41:22:40:47:bf:22:07:3d:c7:f1:3d:
                    35:70:38:82:6f:5f:58:a6:8c:17:69:68:34:b1:d3:
                    ae:78:85:3b:62:fe:c7:5c:86:08:54:7b:78:a0:c1:
                    3b:0a:1e:c4:b6:7b:e8:33:6f:e2:79:1d:98:45:fe:
                    63:66:ae:59:eb:94:9a:ce:01:ea:5f:f9:07:a9:5d:
                    99:aa:4d:6a:4a:32:b9:73:81:f5:1f:b8:7b:7c:00:
                    ec:c7:03:c3:ed:6e:cb:ca:01:0e:76:67:83:99:c6:
                    cb:8d:87:3f:c4:65:80:64:5c:06:7a:f4:c3:0c:3a:
                    13:4a:5c:0f:bb:95:d0:aa:b7:48:e2:d5:34:47:b5:
                    5c:02:e3:82:e4:cd:c9:98:8f:ff:04:ae:32:89:ac:
                    95:ba:19:48:97:38:39:fa:b1:37:76:8c:83:b8:84:
                    1d:05:9f:6a:05:1d:2f:46:de:2b:e3:ab:94:57:15:
                    33:67:23:ee:92:36:07:01:6e:2c:2c:60:1e:29:56:
                    f6:85:5c:28:7e:44:20:19:ad:56:23:30:ac:8a:16:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:0B:A9:66:49:1F:E4:79:BE:9E:95:C8:F3:47:AC:0F:BB:97:50
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:a4:01:7b:93:a8:9b:62:66:41:64:0f:00:d6:2b:7b:cf:
         93:fa:07:7d:51:57:13:3f:45:96:dd:41:cf:fe:db:df:9a:f9:
         ff:9a:0b:c9:f7:e0:10:20:fa:55:32:58:0b:7f:13:7b:1c:5e:
         f6:f4:1f:61:d9:db:c1:3b:7e:06:0f:ab:5a:b9:1d:04:23:71:
         96:72:71:7f:9c:bb:46:8b:2c:8b:f6:61:7c:2b:59:0d:df:2a:
         7f:cc:ff:6b:2a:8f:75:9a:1e:40:6c:7c:81:c7:0d:6f:fa:4d:
         99:45:f3:b3:51:8c:59:1d:cf:a7:7d:e2:d7:3f:25:9a:d4:52:
         c1:91:73:49:2d:44:20:12:95:b8:48:12:71:d8:c5:c0:1d:3f:
         a8:db:87:52:bf:c7:39:8b:28:4d:fe:04:7d:f1:d7:53:fc:98:
         69:37:80:e8:b1:d9:0a:52:73:c5:40:23:d5:4e:2e:15:c9:f6:
         31:67:d8:8b:37:e0:ec:ed:4e:e6:83:68:5e:9b:b9:bc:df:8f:
         8c:08:47:ee:bc:ba:44:2c:0b:68:18:96:b3:c5:1c:ff:af:10:
         f5:05:ad:01:ea:88:94:51:b9:4a:60:d8:c4:aa:9e:f5:71:72:
         2c:de:d5:73:f5:f6:d9:a4:f9:1f:2e:d8:8e:fa:eb:25:9c:42:
         0b:fb:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:20 2025 by rpki-client