Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135382e302f32332d3234203d3e2037303034.roa
File:                     3138362e3130332e3135382e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          657mo9XOBQExtTibJit8D10I9XU62fRdJmzJjTw78/0=
Subject key identifier:   0E:C2:44:13:79:CD:DC:FC:E1:B3:31:5A:76:9A:BD:ED:9B:04:A7:1F
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7673910956D1FBA5CDE3EB571DE55820695DF4AE
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135382e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 20:00:49 +0000
ROA not before:           Tue 04 Feb 2025 19:55:49 +0000
ROA not after:            Tue 03 Feb 2026 20:00:49 +0000
asID:                     7004
IP address blocks:        186.103.158.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:91:09:56:d1:fb:a5:cd:e3:eb:57:1d:e5:58:20:69:5d:f4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:49 2025 GMT
            Not After : Feb  3 20:00:49 2026 GMT
        Subject: CN=0EC2441379CDDCFCE1B3315A769ABDED9B04A71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:10:12:bf:66:d3:0a:a9:ae:eb:c8:d6:b3:
                    01:02:f4:58:eb:c2:bd:97:30:1b:e2:5a:9b:39:84:
                    f9:ab:d4:7d:bf:e8:b0:47:0c:c1:1c:39:37:6f:42:
                    89:7d:28:a4:91:13:c9:1a:60:a6:4a:18:a6:62:af:
                    22:e9:14:bd:ae:61:e1:fd:d9:17:91:f3:cb:d2:da:
                    0b:a3:b1:fc:15:eb:24:bc:11:8d:60:90:c9:3d:95:
                    92:d9:18:18:e9:a2:8f:43:21:5a:9d:ac:83:03:97:
                    0e:58:45:b4:82:5b:4a:d3:b8:0a:86:aa:ad:34:7d:
                    be:99:2d:fb:31:2c:c3:3c:6f:94:38:04:1c:5d:40:
                    75:0a:20:36:7d:d2:d6:31:7d:2d:43:8c:45:38:b9:
                    4b:8b:37:40:33:d5:68:26:f3:a2:f4:75:cb:dc:46:
                    67:c2:81:cf:50:1b:da:6f:26:3a:b9:07:aa:c6:45:
                    aa:52:63:56:5d:e2:84:bb:2c:f7:77:9f:dd:e0:43:
                    76:4b:bc:44:dd:33:e6:93:49:b9:6f:fe:75:28:fc:
                    86:69:5b:70:3d:dc:c4:04:c2:3a:4b:4c:4c:11:05:
                    4e:5d:97:e3:af:a9:78:dc:9d:c4:6c:b1:fd:e8:98:
                    44:8a:70:38:1f:f8:4d:3b:22:55:bf:f6:19:c9:72:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C2:44:13:79:CD:DC:FC:E1:B3:31:5A:76:9A:BD:ED:9B:04:A7:1F
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135382e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:41:48:f9:83:bb:ec:68:7f:27:69:be:6d:2f:4e:77:cd:ba:
         7c:b8:cf:52:f7:22:2c:b9:c2:43:85:fd:7a:10:f0:f0:88:8c:
         46:12:26:f7:4e:d2:39:b4:f8:ca:20:89:17:cf:4c:7b:0b:a4:
         ca:e5:07:1a:a4:16:e5:69:db:04:1a:96:d5:23:68:04:d6:d3:
         6f:8e:be:fb:e5:f1:cd:40:e8:3f:f1:b0:7b:86:d6:3a:cd:fb:
         1b:5d:a1:76:d8:3e:5a:31:51:1e:42:7f:8f:cc:6c:95:8f:bb:
         fc:a3:16:5a:6c:68:75:d2:6f:7b:47:bc:09:0e:5f:ae:59:69:
         49:17:41:0f:87:b9:90:84:e2:e0:ee:19:68:c0:9f:48:dd:9d:
         a2:9d:7f:8e:7c:36:33:1e:ce:9f:1b:eb:77:ac:4b:19:fd:11:
         1e:15:0f:e9:c5:3b:5f:da:7c:05:b7:6e:39:e2:a9:ba:a8:92:
         6e:3a:f6:e0:0d:db:47:e6:56:4b:5b:4b:11:ec:54:c9:95:69:
         10:4e:f0:d3:6b:ea:1b:3a:ca:b3:73:91:5e:34:30:6a:89:1b:
         80:72:a1:17:d1:b2:cb:d0:0f:c4:d9:74:4c:00:48:7b:9a:17:
         a1:a4:90:c2:11:6a:5f:ab:31:13:19:35:a6:1a:14:bf:47:11:
         ec:b2:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client