Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e302e302f31372d3234203d3e203237393235.roa
File:                     3138362e392e302e302f31372d3234203d3e203237393235.roa (raw, json)
Hash identifier:          PKKUgxD1INsX2r0Mf+D4Y9ioaTGwFgcXfKN1oLM42CI=
Subject key identifier:   B1:B2:48:5B:77:08:C9:B4:86:F6:35:5F:42:04:9D:27:3A:57:BE:F6
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       75D71E6D5A7E0FEBEF82D1BC647060C73200678E
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e302e302f31372d3234203d3e203237393235.roa
Signing time:             Tue 04 Feb 2025 18:44:26 +0000
ROA not before:           Tue 04 Feb 2025 18:39:26 +0000
ROA not after:            Tue 03 Feb 2026 18:44:26 +0000
asID:                     27925
IP address blocks:        186.9.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:1e:6d:5a:7e:0f:eb:ef:82:d1:bc:64:70:60:c7:32:00:67:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:26 2025 GMT
            Not After : Feb  3 18:44:26 2026 GMT
        Subject: CN=B1B2485B7708C9B486F6355F42049D273A57BEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:11:c2:c2:79:80:17:f1:28:8b:20:8f:75:
                    3c:e0:cb:6e:11:93:25:fc:84:20:69:04:42:4b:35:
                    0a:4a:f0:ed:63:db:2f:ae:ac:ee:3c:7e:7f:3f:68:
                    85:6a:07:7c:19:d4:b6:3a:a2:4c:74:23:9a:e3:6f:
                    28:ee:ee:7c:f1:c1:d1:e6:90:cc:59:d9:de:cf:42:
                    e8:0a:90:4d:a5:34:5e:75:cb:2a:3a:e9:c0:61:bf:
                    f3:11:98:cf:38:33:aa:9b:9a:7c:a5:14:35:44:cf:
                    7e:21:47:e9:33:06:86:ee:3d:6f:bb:05:38:d4:da:
                    91:3d:d3:ec:8d:ac:76:ef:78:03:73:b1:80:22:94:
                    cd:ae:58:6f:36:c4:f0:23:3d:49:8c:b3:ab:3c:81:
                    41:c5:39:42:e0:57:1d:74:39:af:3a:aa:11:c4:72:
                    af:43:bb:9d:0b:8a:4e:61:8c:21:1f:a4:a1:01:af:
                    3d:88:68:1d:4d:d0:7d:bd:5b:c2:7c:0b:80:9d:11:
                    8c:ab:80:a3:56:33:3d:d3:a2:15:ca:1e:94:2e:2d:
                    fd:36:84:02:cf:d9:61:a2:94:45:1f:6f:6d:46:57:
                    57:db:5a:0f:52:a9:8b:fd:3b:eb:0b:b8:e3:fa:82:
                    e0:08:80:ce:18:f6:03:89:46:2f:75:f7:9c:a1:c9:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:48:5B:77:08:C9:B4:86:F6:35:5F:42:04:9D:27:3A:57:BE:F6
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e302e302f31372d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.9.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:83:85:45:78:3d:83:bc:76:48:f8:3a:72:70:30:3c:02:
         a8:6b:fd:e2:3b:55:21:16:db:22:4d:da:de:ed:c7:a5:ba:56:
         42:41:21:8e:72:dc:f0:38:1f:c7:d4:2b:ca:4d:9f:fd:7a:c4:
         71:e5:66:43:90:f8:79:42:d2:75:12:0c:9e:1d:01:a4:97:3e:
         c2:2a:ce:7d:ac:73:7f:d2:aa:fb:06:3e:39:9e:94:7e:f6:da:
         86:ee:3e:06:40:e2:43:f0:e9:92:d0:25:8c:6b:42:1a:f2:1d:
         26:94:1b:59:93:a2:ee:89:f2:9a:88:75:85:90:f5:49:35:24:
         b6:2a:59:e9:2f:f6:c8:aa:17:56:71:ae:dd:dd:be:3d:3e:50:
         4d:9d:e3:dd:c9:bb:f0:94:b0:d7:c9:0d:4b:f9:7e:2d:6b:5a:
         91:3f:2a:2d:7e:27:15:be:21:ab:d3:52:1a:e4:8e:ac:18:bc:
         39:e3:52:2d:4e:ac:b1:4e:51:b7:eb:23:45:84:a2:d0:c8:18:
         8b:54:fa:b0:7c:f2:b3:74:f5:a8:bb:a1:32:73:f4:5a:b1:d0:
         7f:cd:0c:a5:9d:fe:70:fc:6e:30:02:ea:1b:56:6b:df:82:53:
         78:05:23:a9:cf:e6:1e:32:57:f4:ec:74:ce:d6:4b:e0:37:df:
         cc:5d:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:48:47 2025 by rpki-client