Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa
File:                     3138362e392e3132382e302f31372d3232203d3e203237393235.roa (raw, json)
Hash identifier:          iSts4cQA/XYpajROy31Q/SrQ/6k2WYszsFseGFmmFvE=
Subject key identifier:   A8:A2:A7:28:5D:A1:DD:8E:B7:A5:87:02:28:39:A4:6F:A8:AA:38:A2
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       79D8D5F9E868E31AD2F6A239E85EBD2B2E058069
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa
Signing time:             Tue 04 Feb 2025 18:44:27 +0000
ROA not before:           Tue 04 Feb 2025 18:39:27 +0000
ROA not after:            Tue 03 Feb 2026 18:44:27 +0000
asID:                     27925
IP address blocks:        186.9.128.0/17 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:d5:f9:e8:68:e3:1a:d2:f6:a2:39:e8:5e:bd:2b:2e:05:80:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:27 2025 GMT
            Not After : Feb  3 18:44:27 2026 GMT
        Subject: CN=A8A2A7285DA1DD8EB7A587022839A46FA8AA38A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:34:94:7a:a3:9e:5b:65:22:e5:f6:4f:51:94:
                    0e:b0:2f:16:01:49:00:8b:bc:b3:93:95:96:ef:b4:
                    9e:f6:a3:61:35:7e:86:38:36:5c:0d:20:3b:bc:01:
                    21:27:e6:49:68:1e:95:c2:7b:8a:fa:9f:fe:d0:f8:
                    fc:88:12:03:dc:76:e3:92:75:69:9f:02:15:0c:d4:
                    f8:f4:8a:8a:8c:1a:d2:bc:5d:e0:fc:d2:48:03:ea:
                    c2:fd:3a:1b:8a:7a:b3:b8:2d:af:67:64:4f:da:1a:
                    b1:3c:eb:f6:45:4a:d8:05:a5:0c:2c:9b:0d:b5:c3:
                    81:c4:6f:a8:fa:93:8a:f2:81:ca:b8:39:bc:3a:84:
                    e7:ea:ce:93:71:81:e1:85:6d:d0:ad:4a:68:41:00:
                    50:1a:a3:e5:d8:ae:69:63:51:dc:3e:5a:0d:8d:f8:
                    8e:6a:3c:26:c1:2d:92:1e:ed:2e:9c:20:12:eb:63:
                    98:5b:7a:0f:d8:d3:a6:1d:e5:c6:91:bd:9b:3a:96:
                    e9:f4:6e:e7:12:eb:98:e3:ed:55:23:27:73:8a:57:
                    b4:ea:b9:f1:56:ef:ca:0d:e5:d3:dd:3a:8d:18:84:
                    f5:ec:db:3d:2c:d5:ac:ff:c7:7c:4e:b6:5b:95:77:
                    55:9e:c6:bb:3a:ab:76:51:ab:36:2c:51:04:eb:a3:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:A7:28:5D:A1:DD:8E:B7:A5:87:02:28:39:A4:6F:A8:AA:38:A2
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.9.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         12:41:53:ed:f9:b5:a6:e9:72:b0:ac:eb:4d:a6:e7:31:78:ae:
         4d:12:b8:17:57:f1:65:96:68:a1:b0:c4:30:46:26:1c:0b:1f:
         d6:ee:76:1d:d2:f2:b2:68:18:9e:8a:66:12:61:e4:c5:99:72:
         39:01:85:07:c4:16:c4:7d:28:5e:da:f3:c3:c1:64:84:40:a3:
         2a:2d:f9:c8:dd:c0:7c:37:3f:12:eb:38:25:8d:5d:5c:ff:4e:
         3d:58:53:84:b9:79:5c:03:c6:c2:05:48:cc:c6:d5:ed:ee:f6:
         87:e4:de:6f:67:2f:c6:4b:88:ca:55:65:33:77:19:b3:3d:b3:
         1e:1a:a2:35:89:ed:e7:4c:d7:23:c7:0d:9a:02:f3:15:27:90:
         32:13:48:87:04:7d:53:54:df:d2:e4:9b:93:a6:c4:50:a7:64:
         90:a8:e2:c0:68:7d:29:0d:c6:d5:23:ef:44:a1:5a:a2:04:2c:
         30:cf:6e:12:05:4c:62:2f:d6:97:f0:ae:c2:59:14:31:47:58:
         ee:d9:9c:d9:88:33:70:d9:05:63:aa:58:52:ea:0d:26:94:36:
         0f:0e:a1:8b:5d:80:7f:f4:3b:7b:dc:45:03:27:0f:4b:47:c7:
         33:54:58:4f:6e:52:b2:24:32:86:8d:74:18:07:0a:f0:79:b8:
         fb:86:b6:90
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUedjV+eho4xrS9qI56F69Ky4FgGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNTAyMDQxODM5MjdaFw0yNjAyMDMxODQ0MjdaMDMxMTAvBgNV
BAMTKEE4QTJBNzI4NURBMUREOEVCN0E1ODcwMjI4MzlBNDZGQThBQTM4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzNJR6o55bZSLl9k9RlA6wLxYB
SQCLvLOTlZbvtJ72o2E1foY4NlwNIDu8ASEn5kloHpXCe4r6n/7Q+PyIEgPcduOS
dWmfAhUM1Pj0ioqMGtK8XeD80kgD6sL9OhuKerO4La9nZE/aGrE86/ZFStgFpQws
mw21w4HEb6j6k4rygcq4Obw6hOfqzpNxgeGFbdCtSmhBAFAao+XYrmljUdw+Wg2N
+I5qPCbBLZIe7S6cIBLrY5hbeg/Y06Yd5caRvZs6lun0bucS65jj7VUjJ3OKV7Tq
ufFW78oN5dPdOo0YhPXs2z0s1az/x3xOtluVd1Wexrs6q3ZRqzYsUQTro28fAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUqKKnKF2h3Y63pYcCKDmkb6iqOKIwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzgzNjJlMzkyZTMxMzIzODJlMzAy
ZjMxMzcyZDMyMzIyMDNkM2UyMDMyMzczOTMyMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe6CYAwDQYJ
KoZIhvcNAQELBQADggEBABJBU+35tabpcrCs602m5zF4rk0SuBdX8WWWaKGwxDBG
JhwLH9budh3S8rJoGJ6KZhJh5MWZcjkBhQfEFsR9KF7a88PBZIRAoyot+cjdwHw3
PxLrOCWNXVz/Tj1YU4S5eVwDxsIFSMzG1e3u9ofk3m9nL8ZLiMpVZTN3GbM9sx4a
ojWJ7edM1yPHDZoC8xUnkDITSIcEfVNU39Lkm5OmxFCnZJCo4sBofSkNxtUj70Sh
WqIELDDPbhIFTGIv1pfwrsJZFDFHWO7ZnNmIM3DZBWOqWFLqDSaUNg8OoYtdgH/0
O3vcRQMnD0tHxzNUWE9uUrIkMoaNdBgHCvB5uPuGtpA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:04:26 2025 by rpki-client