Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
File:                     3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          WM9B66M65RHZzwfFpqavz3RYU82vCTbLHH3m3LKgMRE=
Subject key identifier:   0B:9D:15:2C:9B:7F:FE:D6:A9:AC:2B:50:94:8E:F6:73:CE:FD:F0:F3
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6EF9A1B2331FD08BC1642435206B85B065E8E5CE
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 20:01:03 +0000
ROA not before:           Tue 04 Feb 2025 19:56:03 +0000
ROA not after:            Tue 03 Feb 2026 20:01:03 +0000
asID:                     7004
IP address blocks:        186.103.156.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f9:a1:b2:33:1f:d0:8b:c1:64:24:35:20:6b:85:b0:65:e8:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:03 2025 GMT
            Not After : Feb  3 20:01:03 2026 GMT
        Subject: CN=0B9D152C9B7FFED6A9AC2B50948EF673CEFDF0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:29:22:b6:02:95:d3:70:cf:56:54:0b:46:80:
                    45:61:d8:79:f8:e8:da:ab:e2:c7:d5:9c:0d:a1:84:
                    de:3a:03:04:cf:e9:35:65:78:e1:c7:41:44:f9:07:
                    b4:fa:b3:28:cd:22:3a:4d:54:6e:03:17:b1:d6:29:
                    b4:e2:05:3f:a3:b0:6d:4e:5c:a7:7a:92:3a:10:a1:
                    e3:18:c6:f6:53:d5:ff:03:cb:9d:f4:68:f4:59:6c:
                    68:9e:61:5e:c8:2d:f2:ae:a4:99:3b:3d:03:1e:3a:
                    00:f8:8d:da:e4:06:ed:b1:31:f8:6c:44:17:25:48:
                    33:87:51:4b:71:ab:be:36:65:b7:d8:22:f7:d7:aa:
                    ef:75:31:84:50:17:db:90:76:72:84:1b:13:51:97:
                    4b:2b:48:ca:6f:84:31:36:ee:7e:79:bb:92:c7:2e:
                    e5:75:f9:24:93:80:eb:0d:47:06:ca:94:77:8f:5d:
                    2c:95:54:41:86:00:57:3f:f3:73:c1:5b:7e:d9:dc:
                    f9:9d:78:1f:7b:a5:cf:e9:07:f9:01:10:26:60:1a:
                    c6:74:f3:38:ca:d0:aa:d9:7f:f8:b2:72:e7:42:f2:
                    61:22:27:73:7f:f3:d5:24:00:26:63:15:33:4b:eb:
                    fa:b6:a7:c4:0a:53:e2:16:4e:c7:3c:68:3e:e5:09:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9D:15:2C:9B:7F:FE:D6:A9:AC:2B:50:94:8E:F6:73:CE:FD:F0:F3
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:42:4a:52:9f:82:62:bb:f3:86:e1:4e:ad:1d:4c:a1:9c:11:
         46:63:0b:f6:ce:ac:cd:54:1d:fe:6d:5f:02:30:18:71:dd:41:
         11:f8:6a:97:4d:b8:86:8e:dc:ea:87:c4:a9:b7:53:f9:e5:db:
         56:36:02:f4:3d:67:49:23:9e:db:0d:b3:73:93:83:26:17:7e:
         d5:63:3a:8e:ea:53:a7:ea:7d:29:7e:d5:52:2f:4c:08:f6:7b:
         46:47:9c:ad:c8:19:2a:5c:5e:4f:cf:63:09:a4:0c:fe:e1:fa:
         9f:7f:84:85:f7:ea:a9:88:7a:5f:67:cb:67:6d:a2:7e:3d:7d:
         1b:bf:8f:8f:5a:6f:10:fa:54:ea:3d:98:84:4c:ff:50:44:a5:
         e2:55:39:49:4d:c3:80:bf:f0:f4:a4:f0:54:15:3a:bd:63:1b:
         ca:e8:b8:34:bd:fe:bf:e2:3c:e2:13:fc:be:de:37:0b:58:31:
         52:7a:95:5c:35:ce:ee:6b:b9:75:96:ac:a5:42:02:85:f6:0b:
         a6:fe:8f:90:f0:04:5d:ee:17:a4:0f:a8:35:89:7a:ab:b1:2c:
         61:d5:a6:4e:95:23:a3:5e:24:4e:e8:bc:9e:24:ab:31:02:bc:
         fc:c5:ee:b8:a1:e1:76:52:60:9f:1e:e5:60:a2:62:b6:f6:16:
         0b:bb:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:41 2025 by rpki-client