Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa
File:                     3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa (raw, json)
Hash identifier:          pLj6tMNa9EM/A0FkzRP6gwcRlI2Jcwp+KcYMJzqE/a4=
Subject key identifier:   B8:BC:F9:05:D2:82:7B:38:60:B7:81:B9:64:3E:25:48:85:B7:AB:A2
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       18A4F1AF62FA3F801435B96570E3202184047955
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:01:02 +0000
ROA not before:           Tue 04 Feb 2025 19:56:02 +0000
ROA not after:            Tue 03 Feb 2026 20:01:02 +0000
asID:                     15311
IP address blocks:        186.103.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a4:f1:af:62:fa:3f:80:14:35:b9:65:70:e3:20:21:84:04:79:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:02 2025 GMT
            Not After : Feb  3 20:01:02 2026 GMT
        Subject: CN=B8BCF905D2827B3860B781B9643E254885B7ABA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:8b:37:3d:f9:4a:89:34:fb:7e:46:f7:05:
                    57:08:0f:77:96:f3:52:4d:d9:02:13:00:b5:1f:0b:
                    b9:25:c4:0a:72:0b:cf:60:fb:3c:b6:3c:19:28:1f:
                    e8:7d:06:2e:05:38:c4:f5:98:87:e0:e8:08:2c:00:
                    c1:2f:fa:25:53:ed:ab:45:d7:f2:c3:c3:7d:1b:8a:
                    27:76:b6:d4:46:fc:18:0a:30:67:36:4f:32:47:78:
                    27:9f:5c:bb:e7:4f:05:8f:74:79:cb:3d:fe:bb:e8:
                    07:bb:b6:7c:f1:05:07:2e:41:fd:b0:1a:cb:9a:5a:
                    8d:bf:46:ad:d8:6b:06:da:bb:90:90:90:4f:13:7a:
                    b9:3b:a5:e2:94:26:83:e8:e6:9f:09:8a:cd:94:72:
                    35:06:b2:1b:8b:0e:6e:89:ae:28:23:87:f2:e8:c0:
                    bf:66:41:da:56:8e:56:8b:6d:1c:98:7f:66:99:0b:
                    99:a8:d7:8f:cd:2a:67:ed:6b:2d:bf:5d:be:bf:c5:
                    23:b7:79:76:d8:b9:f7:a6:ec:a4:98:8f:ba:ad:c4:
                    ad:59:30:2c:85:31:b6:5c:09:d0:25:07:84:7e:cd:
                    dd:60:32:15:fd:a3:91:b3:08:2e:2e:52:bf:50:d8:
                    53:de:48:60:55:99:bb:72:d3:43:bb:32:47:c7:b4:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:F9:05:D2:82:7B:38:60:B7:81:B9:64:3E:25:48:85:B7:AB:A2
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         dd:05:13:94:f5:cc:83:78:04:38:27:8b:0f:da:f3:c6:03:e4:
         2a:ad:87:32:48:54:30:74:26:d3:a9:21:79:0c:8a:e1:4d:da:
         13:1e:c9:09:43:3c:6a:8d:f1:83:40:3d:9e:76:92:6e:83:e2:
         e4:dc:9e:5d:af:d8:fe:56:3b:cd:9a:c7:cf:97:0a:37:de:d1:
         e5:e5:37:1d:89:b3:16:cf:f8:c7:c4:5c:2e:d4:d1:b7:2a:b0:
         9e:50:e8:89:44:08:bc:33:81:be:c7:83:4c:d0:31:bb:bd:c3:
         b3:6f:19:e0:8f:1c:f5:88:6c:4d:97:fd:cd:b8:70:36:39:a3:
         11:9a:57:be:93:26:24:1e:d5:c5:b4:de:72:ea:e8:db:96:55:
         b2:a7:30:58:f8:c4:bb:01:58:f5:69:cd:1e:37:bf:de:68:b0:
         1f:7b:3c:c4:66:68:78:59:e0:16:2d:bb:b2:ad:7b:da:9d:bb:
         a8:7c:ea:84:55:6f:44:de:c6:bd:f5:b8:c1:cc:81:53:cc:bc:
         a7:e8:23:44:a2:a8:90:3e:84:8d:d9:10:2a:5b:f4:6e:c2:78:
         fa:1d:52:8c:ed:57:91:7d:5e:7e:89:be:c0:7a:35:9e:9f:e3:
         19:da:78:dc:34:0e:4e:7a:78:21:fb:e2:71:47:e4:2e:51:f1:
         9d:6a:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:49:59 2025 by rpki-client