Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa
File:                     3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          ZmLkbcChv6eAvmbdQjfu40qNoZQnCILJljTEZ4SEsRw=
Subject key identifier:   12:2F:43:CF:3D:B1:C2:61:65:EF:AA:63:7F:15:23:18:D4:66:24:72
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       2592860853EB553B1FA9D6FB7D7351A5946FB803
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 04 Feb 2025 17:59:13 +0000
ROA not before:           Tue 04 Feb 2025 17:54:13 +0000
ROA not after:            Tue 03 Feb 2026 17:59:13 +0000
asID:                     263725
IP address blocks:        177.10.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:86:08:53:eb:55:3b:1f:a9:d6:fb:7d:73:51:a5:94:6f:b8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: Feb  4 17:54:13 2025 GMT
            Not After : Feb  3 17:59:13 2026 GMT
        Subject: CN=122F43CF3DB1C26165EFAA637F152318D4662472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:63:3f:af:da:c0:0f:d4:86:96:f6:b7:d5:
                    6e:43:41:d4:6f:ca:d6:f7:b2:00:b7:ed:78:c6:19:
                    63:05:b1:2c:fa:cc:3e:b1:ae:66:49:f2:37:8d:01:
                    21:8c:2d:d0:ba:c4:b1:12:2b:6d:24:ac:5f:b3:d8:
                    43:c9:7d:e2:a0:00:ec:3f:3e:3f:6f:6a:ac:36:e8:
                    1b:ae:cf:99:6a:fe:cc:2a:a5:1b:84:8a:7d:74:62:
                    f4:32:33:7b:8a:c3:43:e1:38:f7:50:6c:ce:1f:8b:
                    9e:b3:ca:bd:a1:e1:5a:83:f0:4b:bf:72:75:d6:51:
                    e4:21:2b:dc:6d:fd:65:67:8b:e7:5a:6c:e3:bc:c9:
                    09:dc:da:3f:23:64:7c:b1:c2:e4:ce:49:36:86:ea:
                    d9:ef:4d:21:19:4f:47:01:41:05:3e:5d:c0:73:27:
                    2d:83:84:87:09:86:e7:d8:66:a8:a4:e7:5f:68:26:
                    81:dd:53:d6:19:32:17:aa:b2:74:55:ff:ab:63:68:
                    8a:8e:fa:c1:3f:19:56:9b:39:39:62:d1:db:3e:94:
                    2e:30:f2:27:be:53:ed:4c:50:83:db:e4:0a:2b:da:
                    d0:f6:ec:1a:64:83:c7:55:35:f9:e4:a7:c4:36:c8:
                    ea:a8:03:c0:43:a3:92:93:cf:51:ce:85:ef:2a:66:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:43:CF:3D:B1:C2:61:65:EF:AA:63:7F:15:23:18:D4:66:24:72
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:79:b8:c2:28:c5:8e:45:7e:31:23:6f:47:c5:ea:15:83:
         12:42:47:ef:7d:02:17:1a:63:21:30:c9:e2:6a:3f:56:68:59:
         81:dc:b3:3c:75:84:50:0c:58:35:05:49:41:e4:c3:57:c3:09:
         49:e7:c0:23:3e:c1:f4:7a:6b:16:3c:0d:54:c5:ae:da:9c:ce:
         b8:a4:a9:fb:bd:98:aa:ac:d7:ae:4b:3c:79:64:06:2b:cd:f7:
         bc:ae:68:ac:1f:66:e5:c5:73:ac:0b:b3:c0:f9:05:bb:03:7e:
         42:e3:3e:7c:58:07:e2:f1:36:e1:a1:16:b0:0a:f5:21:94:84:
         0b:d4:36:69:66:d2:ed:5e:67:de:5e:38:33:a2:44:ba:a3:7f:
         d4:fd:06:a1:ea:f4:3f:c6:c5:5c:14:7b:2a:24:fa:c4:1c:ce:
         5c:c5:37:74:a8:ca:1d:da:5e:44:ce:cb:25:05:b4:b0:01:5b:
         5b:e0:7b:2b:2f:d6:db:30:40:16:f1:51:d4:d6:5f:92:bb:74:
         52:24:02:a3:53:ba:4d:a8:cb:60:e3:7e:85:c4:17:57:e8:18:
         3a:e2:1c:61:c6:51:46:15:0d:9e:93:48:f1:fa:8e:52:3e:7e:
         29:44:c6:57:b6:5b:6f:8e:4b:f5:c0:9f:55:1b:c7:69:a1:88:
         dd:40:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:31 2025 by rpki-client