Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
File:                     3138362e31302e3133382e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          iXeZLsY417h1Li9m5GSuYrgADTfpHMEDmI0IZVR3mCA=
Subject key identifier:   FF:24:0B:B8:9C:50:85:91:4E:4E:23:78:C9:78:3E:F9:C4:19:01:74
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       3BA2FA3B846521906EDDB7B546915C60776FD4C4
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 04 Feb 2025 18:44:27 +0000
ROA not before:           Tue 04 Feb 2025 18:39:27 +0000
ROA not after:            Tue 03 Feb 2026 18:44:27 +0000
asID:                     27986
IP address blocks:        186.10.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a2:fa:3b:84:65:21:90:6e:dd:b7:b5:46:91:5c:60:77:6f:d4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:27 2025 GMT
            Not After : Feb  3 18:44:27 2026 GMT
        Subject: CN=FF240BB89C5085914E4E2378C9783EF9C4190174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:78:6d:2e:91:b3:95:13:0c:f1:5c:14:be:
                    d9:dd:9f:9f:5d:d1:0b:e3:fc:04:a7:d4:8a:36:b4:
                    39:29:d5:52:4c:04:e5:1c:88:7c:7a:b4:eb:c7:67:
                    00:c2:8d:9b:d5:87:46:a4:a3:d5:a4:65:20:a1:27:
                    6f:fd:d7:21:60:4a:5e:68:6a:97:2c:fb:35:8d:b4:
                    96:b3:77:25:8a:72:d3:09:5e:2c:c0:ec:bf:89:77:
                    41:2a:9e:ce:8f:b3:5a:4d:4a:97:7b:fa:78:da:de:
                    ad:cb:fa:19:0a:54:6e:17:b3:7d:83:dc:e0:67:30:
                    83:18:cc:b1:71:cb:ef:54:1f:df:69:6c:d5:b0:24:
                    17:3d:d7:f9:5c:80:f8:c1:b3:08:c1:82:c1:af:28:
                    39:33:a3:4a:7c:25:56:c2:6e:8d:d6:bd:74:9a:36:
                    19:f9:7f:b4:35:67:95:8e:d9:53:c1:e5:a7:e6:3b:
                    8c:84:99:7d:7e:84:de:25:bc:b3:b6:c2:5a:fa:11:
                    7d:42:5c:3d:e2:29:0f:06:ba:02:ea:25:60:e8:1f:
                    f0:30:ef:07:98:d3:18:8a:2c:d8:f2:c8:e2:c5:50:
                    05:c8:a1:30:80:21:f8:51:45:4c:80:35:c7:ca:b6:
                    0d:ad:37:02:0e:a9:73:a5:40:52:71:6c:fc:53:17:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:24:0B:B8:9C:50:85:91:4E:4E:23:78:C9:78:3E:F9:C4:19:01:74
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:81:5e:b2:3b:c0:4c:bf:35:c6:dd:24:f9:7f:9a:c1:d4:
         43:8c:12:be:80:d4:4f:5c:99:23:d8:9b:cc:c2:d1:c7:45:aa:
         25:62:c6:cf:b6:04:14:e4:2d:75:49:44:3f:b1:ae:03:5c:34:
         96:7c:6d:56:1c:bb:9e:e8:34:1c:6b:bd:ac:c7:6e:3f:1b:8c:
         b2:3a:d5:9d:d7:d6:f8:b6:76:1f:4a:c2:21:ea:3d:b0:7d:84:
         0b:17:1f:e3:89:95:13:40:bd:8a:da:4b:d4:dd:0b:50:6d:ec:
         50:2b:ba:2e:b9:bf:72:91:f8:6b:e8:f3:00:a5:8a:7e:f5:c0:
         c6:42:2c:e8:fe:b8:ae:23:e0:73:8c:b0:81:12:7d:90:5d:77:
         45:04:d2:57:fc:f1:88:63:ef:e7:a5:80:86:05:da:50:c1:74:
         29:7d:18:fb:ac:49:27:b2:c6:8d:9b:fa:63:79:09:55:f2:d1:
         60:98:4d:c8:71:90:7d:2f:a9:8e:fc:95:5a:6e:59:c9:07:28:
         30:8a:b7:11:1c:6e:e9:d6:3c:2d:7e:9f:50:5e:da:51:d0:dc:
         54:88:30:51:f3:c8:11:e5:bd:f0:6a:a7:e0:11:2b:c3:4c:39:
         aa:2c:26:ff:96:d1:2a:67:83:72:e4:65:60:d8:2e:b6:52:54:
         62:3a:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:50 2025 by rpki-client