Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa
File:                     3138362e31302e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          eEoylFviX4vT8YwyKTyFD3hK+OnnsiMymGe2jKOAlx8=
Subject key identifier:   CC:A0:36:57:F9:52:04:55:C5:BB:AF:DB:9D:41:FC:B3:24:CF:D9:54
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       39FF38E2028A6410978738AAED3F738697A41CA8
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 18:44:26 +0000
ROA not before:           Tue 04 Feb 2025 18:39:26 +0000
ROA not after:            Tue 03 Feb 2026 18:44:26 +0000
asID:                     27651
IP address blocks:        186.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ff:38:e2:02:8a:64:10:97:87:38:aa:ed:3f:73:86:97:a4:1c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:26 2025 GMT
            Not After : Feb  3 18:44:26 2026 GMT
        Subject: CN=CCA03657F9520455C5BBAFDB9D41FCB324CFD954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:77:71:4a:e9:d2:d5:36:1b:4e:96:50:45:
                    14:11:16:4d:d3:19:8a:94:6c:07:aa:81:d0:70:79:
                    c6:30:56:dc:11:de:da:f0:89:60:45:f5:52:8e:cb:
                    84:87:98:6b:5f:76:2c:59:0a:4e:a6:57:56:6a:21:
                    f3:85:63:7a:1a:a2:60:c4:5f:c4:d8:84:d4:16:36:
                    50:0c:64:33:ba:27:dd:17:c3:22:8e:89:e0:f6:b0:
                    3c:7e:1c:c2:00:32:9a:6b:0a:4b:54:5b:8a:3d:87:
                    02:2b:ab:85:43:57:fc:58:b6:db:8e:6d:d7:bd:2d:
                    35:de:73:11:f4:1e:5f:02:2f:75:89:36:6b:95:db:
                    9e:cc:76:29:af:b3:48:a3:08:5b:59:de:28:35:66:
                    68:46:f4:bf:2e:d6:6c:3c:52:da:68:5d:52:09:f4:
                    a6:91:54:a0:d4:5b:96:36:cb:68:22:75:3b:ff:82:
                    0a:0a:73:70:c8:ea:ab:d9:5b:ae:d5:aa:b8:e9:99:
                    1f:f1:17:0b:7e:e4:a0:53:f9:f5:3d:5b:2f:5a:18:
                    1d:b7:c2:0d:3d:c7:46:9b:fa:c8:73:30:70:4c:89:
                    36:8a:7f:9c:40:7f:72:1d:76:93:03:7d:d3:11:03:
                    69:e5:9a:50:d5:fc:1f:e5:19:45:ba:ee:e8:39:15:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A0:36:57:F9:52:04:55:C5:BB:AF:DB:9D:41:FC:B3:24:CF:D9:54
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:c9:04:26:ca:95:51:8d:96:cb:81:28:76:b4:07:32:d6:
         f4:e0:a3:af:bd:ac:3f:80:66:8b:6d:8b:ef:a0:2c:0f:89:4e:
         7c:95:cb:a6:fc:87:0e:67:45:68:ea:16:d2:1d:3e:f8:29:d0:
         24:08:f7:5e:b8:e0:6a:be:53:7b:d5:5a:cf:98:cf:38:fd:22:
         0e:0e:ba:46:da:09:24:5d:9a:91:a3:e1:aa:82:37:b9:20:92:
         50:a3:03:35:a8:c3:42:b6:a4:86:bc:eb:01:0d:72:dc:35:98:
         f2:58:9b:d2:6b:d5:00:63:8c:7f:95:a3:bd:8c:8d:00:56:d5:
         05:d2:a2:3a:a7:6b:81:2f:78:d9:ba:09:51:97:b7:66:8e:83:
         9e:39:95:3f:27:36:07:5b:3a:dc:28:fe:d7:07:98:d7:5c:f0:
         c8:9d:03:3a:e9:3f:55:6c:d7:c7:02:27:27:86:7b:4b:52:ac:
         8c:87:b1:06:f5:ea:c3:c1:7e:e0:12:a8:ee:b1:97:85:ec:86:
         a6:51:0f:43:b7:13:20:df:4b:87:b0:e9:2b:32:bd:d3:d3:c3:
         56:74:bf:70:15:2c:fd:48:5a:57:44:dc:56:93:d1:47:55:53:
         2b:e1:89:3b:6e:79:d9:2c:2d:a3:1a:56:15:e0:f8:e5:44:f5:
         3a:fe:27:c6
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUOf844gKKZBCXhziq7T9zhpekHKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNTAyMDQxODM5MjZaFw0yNjAyMDMxODQ0MjZaMDMxMTAvBgNV
BAMTKENDQTAzNjU3Rjk1MjA0NTVDNUJCQUZEQjlENDFGQ0IzMjRDRkQ5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKndxSunS1TYbTpZQRRQRFk3T
GYqUbAeqgdBwecYwVtwR3trwiWBF9VKOy4SHmGtfdixZCk6mV1ZqIfOFY3oaomDE
X8TYhNQWNlAMZDO6J90XwyKOieD2sDx+HMIAMpprCktUW4o9hwIrq4VDV/xYttuO
bde9LTXecxH0Hl8CL3WJNmuV257Mdimvs0ijCFtZ3ig1ZmhG9L8u1mw8UtpoXVIJ
9KaRVKDUW5Y2y2gidTv/ggoKc3DI6qvZW67VqrjpmR/xFwt+5KBT+fU9Wy9aGB23
wg09x0ab+shzMHBMiTaKf5xAf3IddpMDfdMRA2nlmlDV/B/lGUW67ug5FVf5AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUzKA2V/lSBFXFu6/bnUH8syTP2VQwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzgzNjJlMzEzMDJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjM3MzYzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAugowDQYJKoZI
hvcNAQELBQADggEBAIZryQQmypVRjZbLgSh2tAcy1vTgo6+9rD+AZotti++gLA+J
TnyVy6b8hw5nRWjqFtIdPvgp0CQI91644Gq+U3vVWs+Yzzj9Ig4OukbaCSRdmpGj
4aqCN7kgklCjAzWow0K2pIa86wENctw1mPJYm9Jr1QBjjH+Vo72MjQBW1QXSojqn
a4EveNm6CVGXt2aOg545lT8nNgdbOtwo/tcHmNdc8MidAzrpP1Vs18cCJyeGe0tS
rIyHsQb16sPBfuASqO6xl4XshqZRD0O3EyDfS4ew6SsyvdPTw1Z0v3AVLP1IWldE
3FaT0UdVUyvhiTtuedksLaMaVhXg+OVE9Tr+J8Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:56 2025 by rpki-client