Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134342e302f32302d3234203d3e203532323632.roa
File:                     3138362e322e3134342e302f32302d3234203d3e203532323632.roa (raw, json)
Hash identifier:          NAFcHIeUuMkw4J1af0+4rSh8/koGauENheIkkU0Qo2Y=
Subject key identifier:   B6:00:4A:A8:13:8B:F3:7A:6D:E8:49:07:D5:CE:22:01:93:1E:62:FC
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       7FDD61307801DA58C5B7438F8A9EFD174A4AEBC4
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134342e302f32302d3234203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 20:04:55 +0000
ROA not before:           Tue 04 Feb 2025 19:59:55 +0000
ROA not after:            Tue 03 Feb 2026 20:04:55 +0000
asID:                     52262
IP address blocks:        186.2.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dd:61:30:78:01:da:58:c5:b7:43:8f:8a:9e:fd:17:4a:4a:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Feb  4 19:59:55 2025 GMT
            Not After : Feb  3 20:04:55 2026 GMT
        Subject: CN=B6004AA8138BF37A6DE84907D5CE2201931E62FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:04:36:f1:c3:49:dd:c2:97:ff:dd:be:c4:
                    8f:b6:72:40:54:eb:e8:07:10:6c:a6:de:0d:39:2e:
                    a5:b4:ee:7b:7e:da:53:c2:00:c7:8c:f4:aa:ae:29:
                    b7:83:ce:67:0b:a7:2f:82:99:43:82:6e:4b:a1:a6:
                    7d:6b:be:86:32:4e:e7:db:70:1b:ae:7d:7f:06:2a:
                    e9:78:6d:92:3a:a8:80:b2:7e:1b:44:18:45:b8:19:
                    55:31:f9:1c:ef:f5:c1:2f:e1:f5:c8:4f:4a:97:55:
                    32:71:0f:aa:aa:72:14:d8:6c:9c:52:13:8e:98:f7:
                    7c:df:0f:cf:ff:f0:77:1a:cc:1e:13:4b:41:05:5b:
                    19:60:ae:89:10:7b:fb:60:01:a0:aa:a2:39:be:52:
                    3c:92:84:87:be:df:05:a9:e4:38:bf:a2:45:8f:23:
                    9f:f0:66:1e:7b:e9:67:eb:5f:66:7f:a2:8c:2b:51:
                    89:30:81:7c:75:7a:4d:82:19:65:2e:7c:30:7d:25:
                    d3:d8:64:74:94:cb:06:c5:2c:bf:bb:8d:af:e9:8c:
                    bf:df:02:80:c2:90:b5:ac:7b:8a:cd:fa:ad:2b:e3:
                    f9:23:97:37:33:3b:11:8a:0d:0c:48:b3:d6:e0:da:
                    8b:3a:ab:91:39:a2:ef:ec:ee:c1:ba:6d:d4:ef:23:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:4A:A8:13:8B:F3:7A:6D:E8:49:07:D5:CE:22:01:93:1E:62:FC
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134342e302f32302d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:69:52:3b:4e:53:a0:1a:19:33:14:05:b3:91:64:48:a6:
         33:2c:93:13:0f:5e:14:8b:4e:6e:af:ce:0d:60:bc:8b:a8:18:
         71:04:7d:30:d8:70:aa:15:00:f3:42:04:f3:34:54:8f:f1:3e:
         ed:96:e0:ee:d5:09:ab:35:27:7d:ef:11:e6:2b:91:ab:c2:6c:
         25:f3:ef:5f:67:b2:9c:ce:29:22:28:c1:d5:ee:61:ed:7c:9f:
         8e:43:69:22:a7:6a:e8:93:8f:2c:73:98:a9:e4:62:11:37:83:
         27:be:71:be:2d:d0:f7:e6:ec:95:ba:bc:f4:15:d1:c1:36:ef:
         fc:1b:6e:c9:be:52:c0:be:1f:21:82:29:46:cb:c5:27:c5:7e:
         8a:7f:27:1a:4b:db:de:c1:ab:46:87:d3:70:00:37:a1:9a:d0:
         00:cf:bc:ad:93:74:d3:ec:95:29:81:59:c9:e2:8d:0b:6a:f8:
         eb:c2:d9:ea:ed:8b:9b:8f:5f:00:8e:4a:5c:20:b4:f8:e1:77:
         30:a6:80:01:10:41:9c:a9:61:e9:7b:0f:44:61:b5:98:d3:9a:
         47:c8:f9:71:ad:86:c7:33:e1:c0:f5:ee:c3:ac:3b:3a:10:cb:
         46:09:18:05:1a:95:6e:cc:f7:e5:78:e9:40:5e:46:5e:80:e1:
         38:65:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:48:15 2025 by rpki-client