Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa
File:                     3138362e33372e302e302f31362d3234203d3e203237393235.roa (raw, json)
Hash identifier:          7HxrMtlCgBTHhhDJvU6EcnNfEFkw2yFmH9Kyjiphysw=
Subject key identifier:   3B:B7:E9:02:FB:FF:8A:F8:A0:82:EB:88:DB:70:4A:DA:9C:94:D3:6B
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       5B0C31083640E3CC790B3F2683461AA908F6DFA4
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa
Signing time:             Tue 04 Feb 2025 18:44:24 +0000
ROA not before:           Tue 04 Feb 2025 18:39:24 +0000
ROA not after:            Tue 03 Feb 2026 18:44:24 +0000
asID:                     27925
IP address blocks:        186.37.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0c:31:08:36:40:e3:cc:79:0b:3f:26:83:46:1a:a9:08:f6:df:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:24 2025 GMT
            Not After : Feb  3 18:44:24 2026 GMT
        Subject: CN=3BB7E902FBFF8AF8A082EB88DB704ADA9C94D36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:89:c2:d7:b3:00:d9:8a:7e:1a:a9:4c:9a:
                    d8:05:04:62:7c:18:96:d4:9e:f7:71:52:ba:94:ef:
                    73:6e:a7:66:d3:e2:7f:8c:cf:ef:6e:37:55:3a:00:
                    cc:7a:af:77:02:28:c9:fc:6f:08:b4:23:21:78:46:
                    4d:a5:b0:07:ab:24:f4:6f:66:d5:85:34:a5:b9:a5:
                    64:8a:b1:eb:75:a3:75:ee:56:7a:18:00:99:d1:ae:
                    9e:fe:3d:cc:93:42:91:ed:23:f0:56:9e:dd:fa:4a:
                    da:b0:08:24:38:dd:b9:c5:d9:52:3b:81:40:6d:06:
                    fc:22:6a:39:b1:16:4e:50:f6:55:e5:37:7b:d3:66:
                    4b:6d:c6:39:82:08:77:cb:70:f7:00:3e:45:e9:de:
                    9a:53:7a:41:e4:cf:f4:13:a0:52:a2:b9:ba:69:47:
                    64:fc:91:56:3c:d3:a5:fd:cf:1d:f6:26:29:0b:ea:
                    bc:1c:78:ab:4c:9d:10:07:c2:de:ad:88:85:ff:e0:
                    c7:b0:3f:1e:ea:40:47:c7:49:14:64:b1:0e:69:50:
                    b5:43:1a:55:79:77:35:ca:c8:df:50:0b:b5:3a:cb:
                    8e:d6:13:07:a8:e9:3f:d8:28:07:0e:5d:58:87:8a:
                    4a:45:bc:8c:82:97:03:f0:52:af:3b:93:58:6f:96:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:E9:02:FB:FF:8A:F8:A0:82:EB:88:DB:70:4A:DA:9C:94:D3:6B
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:aa:92:8c:18:20:a4:1a:3c:4e:6d:79:58:20:02:67:fa:
         bd:85:76:39:39:d3:da:89:dd:8e:55:eb:b9:6d:96:46:73:fc:
         1c:70:89:58:8f:68:f6:31:2f:a6:09:1f:a2:1b:13:20:45:26:
         6b:6b:16:20:a1:52:72:81:7e:90:01:87:7b:0c:1a:01:3d:ae:
         2a:6f:d3:a9:96:43:16:58:54:d6:9c:84:24:ba:08:8c:57:36:
         05:73:6d:13:80:52:9b:1e:24:8c:0f:0c:4f:9d:c7:17:8a:2c:
         25:a7:93:26:81:69:2a:24:4a:60:dd:01:ae:20:a9:43:54:25:
         8e:4c:de:40:14:97:5e:b4:a2:3d:a2:fb:99:d5:fd:09:56:f4:
         2b:9d:c8:e9:22:38:b5:36:b5:43:f1:f4:d0:3b:f6:de:21:00:
         53:cf:2c:9b:1f:e3:99:c6:cf:d4:61:e8:b9:96:3a:75:b5:10:
         89:a6:0d:5e:cf:de:bd:fa:ff:2c:85:6c:e9:9c:b1:79:38:58:
         9a:32:3e:32:03:2a:c7:0d:2f:2c:41:d1:6f:29:a3:c3:eb:5d:
         33:4d:ce:a5:ee:15:fd:9e:39:01:21:b4:f9:03:b7:b9:dc:d0:
         f1:6a:aa:00:95:c0:0a:9c:9e:5c:02:22:34:97:ca:17:f7:b3:
         24:ed:a1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:39 2025 by rpki-client