Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa
File:                     3138362e33362e302e302f31362d3232203d3e2036353335.roa (raw, json)
Hash identifier:          SYqxySASdQocFKjHzbf9Eo5aBO4hI4iAyPsIf4e+8JQ=
Subject key identifier:   59:46:43:95:9A:BE:83:39:7A:C2:6C:CB:81:7E:F6:82:4F:3E:CC:FC
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       4FEE499DB79A4CD0BC03D17B91E9C3E7C1C1FEA6
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:22 +0000
ROA not before:           Tue 04 Feb 2025 19:58:22 +0000
ROA not after:            Tue 03 Feb 2026 20:03:22 +0000
asID:                     6535
IP address blocks:        186.36.0.0/16 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ee:49:9d:b7:9a:4c:d0:bc:03:d1:7b:91:e9:c3:e7:c1:c1:fe:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:22 2025 GMT
            Not After : Feb  3 20:03:22 2026 GMT
        Subject: CN=594643959ABE83397AC26CCB817EF6824F3ECCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:1b:d2:a1:f9:41:b5:55:9b:f5:b5:06:88:
                    54:50:3b:38:ee:7c:d5:f2:c1:3a:0a:14:d9:77:73:
                    21:a0:0f:2b:6d:6c:de:22:f7:6f:cb:3b:91:bb:c1:
                    95:68:17:f1:64:d5:53:91:4c:55:cf:eb:b1:7f:a3:
                    d2:07:23:9d:88:e6:29:0e:a7:10:f7:81:a5:8c:98:
                    32:b6:85:6f:85:6a:b6:f8:18:5a:03:79:34:43:bd:
                    cb:e7:25:50:2d:8c:02:45:68:48:e5:b5:70:96:e5:
                    8a:d5:53:57:19:53:a9:33:04:c7:5f:cd:5b:eb:3a:
                    bf:97:3a:c8:4e:1f:54:fc:98:db:d2:20:28:7a:43:
                    f3:6e:9f:f6:15:75:c5:93:08:85:56:14:09:6a:b8:
                    8a:86:fa:1b:d3:af:33:e7:4e:3f:4f:93:f1:cd:2a:
                    65:19:f2:46:3e:9a:4b:da:35:6d:c5:a3:20:9c:18:
                    a2:20:a0:66:e6:cd:e0:97:02:a1:26:1c:1d:78:fc:
                    71:c3:b8:af:21:a8:04:7c:79:7c:cf:4b:3f:2e:31:
                    b3:40:02:e2:3b:2c:1b:ef:87:f2:08:3d:0d:99:4a:
                    17:f2:c7:6a:0f:0d:93:20:92:33:f4:92:98:11:74:
                    96:5b:64:b2:71:11:eb:87:5b:e3:32:68:16:4e:8e:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:43:95:9A:BE:83:39:7A:C2:6C:CB:81:7E:F6:82:4F:3E:CC:FC
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.36.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:69:fa:57:fa:d9:0b:e1:19:c7:67:47:52:b7:9c:bb:5f:
         83:28:c1:84:9e:0e:d9:97:76:cd:d4:69:b3:91:2a:89:f5:4b:
         57:60:1e:78:a1:6b:6a:d5:51:af:a2:b6:0e:f6:5b:4d:22:c0:
         25:85:39:9a:a3:e8:7c:d7:42:6b:08:0e:03:2e:93:1e:da:07:
         f4:6e:a3:6c:cf:c3:54:2e:d0:98:8a:a6:d6:6f:f2:09:ed:d2:
         95:ae:a1:db:14:38:19:a7:02:4b:b4:0b:2a:ed:c2:1d:d1:e7:
         0d:94:3d:5b:16:85:b0:d8:79:6e:7b:3c:78:3e:8f:53:f8:49:
         7f:d6:d6:65:9a:e1:80:cf:a7:87:87:db:75:ea:e8:a6:2d:40:
         d3:f3:34:9b:3d:4e:70:8e:47:9d:7b:07:f6:a7:e5:15:c0:66:
         a9:a2:87:18:28:4c:a5:65:c0:0b:e6:1c:f5:6a:36:6e:ab:72:
         2b:08:f9:88:7a:b1:36:1d:62:f7:7b:75:fd:62:5d:4f:b0:c1:
         3b:13:41:5b:28:8a:cd:56:38:e3:3a:8a:1e:52:2b:d6:79:03:
         9d:cd:cb:8e:7d:f6:bb:0f:b2:6d:70:d1:10:0e:fc:73:51:55:
         8a:f3:2c:8c:4c:3d:4d:1b:2b:4b:60:74:d1:1b:83:1f:5f:bc:
         52:78:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:38 2025 by rpki-client