Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36362e302f32342d3234203d3e203532343637.roa
File:                     3133382e33362e36362e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier:          qDW4fkExrvncHIeHSye+0PxeReQIti9FGv0y30qK/lc=
Subject key identifier:   F2:8E:77:1E:F3:D3:A3:3D:A6:CC:CC:FF:32:30:27:5A:7E:3B:C3:DB
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       37F3367D7AD6AF036C532CC631680F30D5AD08F1
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36362e302f32342d3234203d3e203532343637.roa
Signing time:             Tue 04 Feb 2025 18:05:47 +0000
ROA not before:           Tue 04 Feb 2025 18:00:47 +0000
ROA not after:            Tue 03 Feb 2026 18:05:47 +0000
asID:                     52467
IP address blocks:        138.36.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:36:7d:7a:d6:af:03:6c:53:2c:c6:31:68:0f:30:d5:ad:08:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Feb  4 18:00:47 2025 GMT
            Not After : Feb  3 18:05:47 2026 GMT
        Subject: CN=F28E771EF3D3A33DA6CCCCFF3230275A7E3BC3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:05:b8:6b:1f:8b:4e:05:c0:c0:d4:c7:82:
                    f6:01:9c:ad:2d:e0:90:45:ce:29:17:18:d3:66:89:
                    09:9a:d8:8a:9d:21:e1:a0:04:0e:53:6c:5e:28:1e:
                    e2:20:24:45:5e:67:f9:9c:87:19:49:44:73:81:bd:
                    9a:45:a9:d1:50:da:a2:18:d3:85:53:94:e6:60:bb:
                    c1:b2:eb:a4:35:18:c0:53:e3:c5:f9:6a:1d:86:bc:
                    37:85:0e:48:82:59:46:33:3c:53:68:a3:bf:1a:2d:
                    2c:c5:ec:b7:66:b8:64:d9:a1:97:a4:d6:55:49:b4:
                    f0:b3:58:6e:45:f2:a6:41:a0:fa:93:ce:a8:45:39:
                    56:44:f0:91:c7:9d:24:8b:8e:f5:e6:f7:d4:3c:22:
                    12:6b:8e:1e:06:e8:1b:47:83:c2:b6:d4:d9:46:c5:
                    7c:e3:5c:15:3d:7c:36:fa:bc:82:1b:9f:7c:7c:9a:
                    79:94:c2:f5:e7:0d:b4:7f:92:87:97:e5:69:c6:0d:
                    58:2a:38:dc:9e:ba:e5:24:33:92:f6:ec:07:b7:77:
                    bd:05:c2:63:93:75:60:8b:c0:54:d3:69:b6:de:40:
                    56:20:c3:e3:18:39:85:a0:d3:8a:fd:96:6e:2a:3b:
                    70:1c:4e:da:eb:89:8c:1e:10:19:44:22:ff:ac:77:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:77:1E:F3:D3:A3:3D:A6:CC:CC:FF:32:30:27:5A:7E:3B:C3:DB
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36362e302f32342d3234203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:2d:6d:92:5b:f5:3e:a0:3f:72:8e:60:7a:ca:32:23:40:
         fc:bb:d5:cb:8e:0c:41:7a:e3:f3:ff:58:f7:c3:61:e4:a1:28:
         1c:0c:88:bf:68:5e:5d:2f:2c:62:7f:ea:22:bd:49:72:c6:f5:
         fe:b6:26:7e:2e:ae:7c:ae:ea:71:9d:1a:0f:ff:59:34:c7:07:
         1e:70:3c:2b:cd:55:d4:33:4b:4b:a0:e8:d2:ae:7b:14:cf:30:
         b2:83:de:25:cb:99:18:2c:23:44:f0:68:96:6e:7f:df:a3:3b:
         bb:47:c9:84:17:db:1a:74:56:e2:cb:9e:b1:04:59:7a:05:e9:
         bb:80:93:84:7a:9a:67:6e:88:42:2a:2b:d0:52:c0:8b:28:1e:
         21:ef:1c:e7:4e:cb:5b:1f:cb:07:5a:e4:ed:bf:29:89:8c:48:
         35:74:f4:c2:16:70:2e:36:fa:3a:37:5a:73:e9:db:a9:31:5b:
         e0:89:58:20:d9:50:7c:f2:eb:ec:55:32:03:c7:0b:cf:e8:d6:
         dd:2c:39:8d:e6:a2:e7:3d:82:b6:8e:37:03:67:bb:c3:d0:aa:
         f9:83:8f:49:09:58:94:da:01:58:b9:87:52:2c:8b:3b:9d:19:
         6c:77:6e:67:fc:39:3b:6c:82:e4:d9:8d:d8:e1:e3:40:2f:80:
         c2:b0:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:10:17 2025 by rpki-client