Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e302e302f31342d3234203d3e203139343239.roa
File:                     3138362e32382e302e302f31342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          NTnJ1eld7zjIoi+aQtc4ixJUlEUoXb0nq51you673k0=
Subject key identifier:   16:20:3D:01:00:4A:4B:C3:0C:31:D7:44:1C:2D:B5:AB:8C:F0:22:3C
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       15FF6CA428B780A2C6CF2624077D287F55DAEFD3
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e302e302f31342d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:54 +0000
ROA not before:           Tue 04 Feb 2025 18:12:54 +0000
ROA not after:            Tue 03 Feb 2026 18:17:54 +0000
asID:                     19429
IP address blocks:        186.28.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ff:6c:a4:28:b7:80:a2:c6:cf:26:24:07:7d:28:7f:55:da:ef:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:54 2025 GMT
            Not After : Feb  3 18:17:54 2026 GMT
        Subject: CN=16203D01004A4BC30C31D7441C2DB5AB8CF0223C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:d3:b0:a6:6b:5f:ea:b2:e6:16:04:49:38:
                    70:c7:6d:93:cd:35:6e:23:c1:df:43:42:0f:36:dc:
                    5d:eb:8d:0b:d6:a9:14:15:58:50:dd:f0:01:a6:26:
                    42:67:80:96:62:fb:15:28:b8:81:ff:d0:ab:f2:d7:
                    6a:f1:e9:91:99:f2:ef:a0:a5:79:17:1e:8d:ef:73:
                    66:41:65:11:54:a5:22:31:22:c9:e5:8d:c1:bf:e5:
                    90:52:5e:b4:68:39:6f:73:f1:69:83:82:42:70:28:
                    ee:d5:05:be:56:99:e7:96:d7:ed:79:06:46:b9:f0:
                    26:2a:fc:94:43:e4:ab:41:ab:9f:94:37:02:b2:13:
                    bd:cd:06:28:33:8c:af:b4:75:1e:91:13:f7:76:be:
                    85:be:36:71:96:8a:1f:fb:d3:c9:54:20:a6:0c:9b:
                    ea:7c:12:27:2b:c0:9e:76:58:6f:64:44:ab:c5:fe:
                    8b:57:83:f1:82:38:d4:0a:26:a2:89:dd:37:d8:9a:
                    55:b4:36:5d:33:a9:e2:f3:4d:07:ca:c9:88:0b:46:
                    57:8b:31:cb:0e:a3:71:d0:44:47:76:db:eb:f8:3e:
                    ed:96:cd:c6:22:bb:df:ee:45:a4:b3:bb:e8:7c:86:
                    c4:42:1f:3b:6e:16:26:f2:a2:23:33:71:49:7d:68:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:3D:01:00:4A:4B:C3:0C:31:D7:44:1C:2D:B5:AB:8C:F0:22:3C
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e302e302f31342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:05:a1:1c:a6:f2:0f:5e:41:cf:e2:79:7e:d9:59:cc:f0:
         77:cc:08:cf:3e:f4:21:50:32:fc:84:6d:45:62:59:d2:b0:5b:
         6e:06:77:e6:74:af:14:11:e7:af:36:91:42:59:9d:46:02:f2:
         f5:b9:de:f6:a8:09:06:8e:71:8d:92:19:fe:ba:8b:ea:a5:82:
         fc:39:c2:af:88:f6:33:12:1f:a5:0e:ec:d3:1c:33:5e:21:6f:
         9f:9d:40:ef:9d:f4:48:9e:b5:8b:96:37:59:53:08:41:b1:c9:
         e1:8d:2d:3d:b4:a9:68:34:40:f1:50:19:2d:93:f7:ac:4c:cc:
         31:d3:86:ba:89:44:17:d5:64:00:50:94:be:0b:9b:ee:6a:fe:
         1d:03:a5:47:bf:0a:54:c9:41:20:f0:77:a1:fe:b2:a5:17:9d:
         fd:f0:cf:bb:6a:85:8d:63:14:d7:49:80:13:44:8c:1b:69:7f:
         25:a8:5d:4e:aa:fa:8d:4b:d9:c8:ff:d8:03:bd:ca:41:34:90:
         95:d0:14:08:45:de:bb:ea:dc:3e:ae:dd:52:50:65:53:64:99:
         9f:66:36:5e:ed:07:c1:00:b9:f2:c2:07:46:1e:57:4f:46:88:
         8e:0d:d5:49:1a:96:40:b8:6f:ff:cf:61:5d:a3:cf:fa:d3:45:
         3d:ad:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:17 2025 by rpki-client