Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31312e302e302f31372d3234203d3e203237363531.roa
File:                     3138362e31312e302e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          wfsD9RVMNd9goY+0Aj7jUHlo2vU3XZR4dpKs77iz+vE=
Subject key identifier:   8D:01:9D:7A:5B:71:DE:7A:F4:2E:0C:31:FB:B4:58:66:8F:84:ED:2C
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       259AC4DA3D1C558AAC68C4ED5CFE6B6035B10C93
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31312e302e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 18:44:23 +0000
ROA not before:           Tue 04 Feb 2025 18:39:23 +0000
ROA not after:            Tue 03 Feb 2026 18:44:23 +0000
asID:                     27651
IP address blocks:        186.11.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:c4:da:3d:1c:55:8a:ac:68:c4:ed:5c:fe:6b:60:35:b1:0c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:23 2025 GMT
            Not After : Feb  3 18:44:23 2026 GMT
        Subject: CN=8D019D7A5B71DE7AF42E0C31FBB458668F84ED2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:0e:75:69:ce:24:21:34:d9:33:7d:2f:d3:
                    89:d3:00:14:0a:49:20:1a:5d:9c:6b:fc:f4:66:11:
                    b9:06:a9:05:25:de:38:be:bb:ea:7d:e1:ee:c7:36:
                    be:bf:9e:42:20:c1:54:db:0e:7e:4e:a7:77:95:77:
                    71:a2:94:75:b9:92:51:1e:f9:53:aa:dd:1b:e8:b9:
                    64:f3:73:23:f0:5c:1d:0f:cc:7c:1f:b5:57:06:a2:
                    fc:40:95:3a:54:b1:29:5d:d3:2d:d5:31:1f:75:1f:
                    7d:b2:a8:4a:31:5f:0a:48:82:16:0e:0d:40:13:2c:
                    d1:20:ab:29:9d:71:ca:00:95:f8:76:bf:fe:ce:1f:
                    27:94:6f:d7:3a:19:fb:ac:15:0b:92:13:d7:d7:f7:
                    68:45:c0:77:c9:1c:06:80:74:c3:f4:ad:96:6c:5e:
                    09:1b:e0:cc:4c:5d:34:9b:3f:10:86:f3:d6:5f:cf:
                    72:be:69:e6:4a:74:89:71:59:b4:ee:e7:a4:5b:eb:
                    a4:ed:e6:fe:96:1e:02:17:65:4b:c4:32:2a:6b:4f:
                    3a:49:45:5e:2e:72:92:e6:ef:a9:71:f2:a8:cc:5a:
                    72:7d:66:e4:27:c2:f6:8b:d7:2b:cb:28:91:42:a7:
                    c6:8e:05:66:9b:d7:6e:7f:e5:11:48:b4:04:b2:de:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:9D:7A:5B:71:DE:7A:F4:2E:0C:31:FB:B4:58:66:8F:84:ED:2C
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31312e302e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.11.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:88:fa:8c:65:03:9c:f2:0e:ab:9f:37:3f:b8:bd:b0:e6:5a:
         7f:c4:b0:49:91:31:27:d6:fc:85:ab:16:ee:fd:76:89:1c:9d:
         80:37:94:cb:1b:df:b0:07:a7:8b:25:f2:9c:4b:8e:f0:23:21:
         6a:42:f4:52:34:07:02:00:dc:9a:93:fc:ae:f6:63:18:c0:e5:
         64:92:de:bb:f6:fb:63:83:ee:a1:4d:d9:42:00:18:aa:73:99:
         92:d9:0d:8f:93:e2:28:05:42:91:28:ee:78:8d:44:53:9e:bb:
         34:b4:00:f2:7e:8c:e9:60:e1:e5:bf:66:47:72:d7:33:1c:c2:
         3c:c9:91:3d:2d:d5:a7:7c:b8:d3:8c:35:22:70:6e:4e:a7:64:
         50:c5:cd:8b:80:0a:b5:44:64:0d:15:fe:65:bc:4e:1a:6d:d7:
         e3:a9:17:cb:8d:76:cb:de:79:c7:7c:fc:3e:80:49:b3:f6:89:
         5b:79:8a:58:bc:17:76:a9:f1:5a:88:86:d3:ff:f9:a2:7d:10:
         b0:a2:90:22:f8:78:17:18:e1:f0:e2:d8:0b:f2:5b:b0:f6:62:
         ee:78:11:78:ea:0e:29:f6:58:10:9d:2a:ac:dd:b5:37:fd:c1:
         c8:23:9a:1f:ba:90:a8:3a:69:08:a9:8b:5d:7c:13:42:b2:db:
         be:0a:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:23 2025 by rpki-client