Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa
File:                     3138362e32362e302e302f31382d3230203d3e203237383839.roa (raw, json)
Hash identifier:          7vUn68SwvoPxAdtqXWu37FHNaWKvLWj5sfRTV7bgT1o=
Subject key identifier:   45:62:7F:57:97:E6:CB:F1:93:8E:E4:38:B9:C5:64:2D:96:25:04:54
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       6677B989019EF4A3D7AF9004AEBBBDF6F430672F
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:34:45 +0000
ROA not before:           Tue 04 Feb 2025 18:29:45 +0000
ROA not after:            Tue 03 Feb 2026 18:34:45 +0000
asID:                     27889
IP address blocks:        186.26.0.0/18 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:b9:89:01:9e:f4:a3:d7:af:90:04:ae:bb:bd:f6:f4:30:67:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Feb  4 18:29:45 2025 GMT
            Not After : Feb  3 18:34:45 2026 GMT
        Subject: CN=45627F5797E6CBF1938EE438B9C5642D96250454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:8a:78:e4:fa:e4:c9:fe:18:5a:85:c9:fd:
                    26:ae:e6:b1:87:d6:93:eb:42:cc:01:10:0f:b6:6c:
                    10:7d:71:d9:dd:80:ce:07:ab:73:20:21:08:7f:eb:
                    8b:69:c5:0c:7c:48:47:32:ab:9f:ee:be:97:3d:18:
                    79:27:1e:e7:e3:e6:a8:67:d1:2b:73:d3:80:e2:c0:
                    b8:91:96:5f:f3:71:89:fe:ed:b8:84:a6:c1:df:43:
                    2e:a3:b1:78:e3:3b:a3:b2:0d:ba:95:8d:4a:cd:17:
                    7b:61:1f:e9:ad:35:d1:63:89:8d:f1:c7:c8:35:f9:
                    35:4d:d3:e5:50:a9:c6:61:a2:4b:09:d4:a2:7d:22:
                    e8:a7:ca:36:37:d3:97:e6:50:1e:0b:eb:70:60:78:
                    af:fa:ff:15:c3:57:01:30:ba:d5:ee:9a:42:17:4a:
                    d9:0a:c2:5a:85:8f:2a:70:32:dc:e7:40:4c:10:59:
                    12:7a:d2:c3:65:60:89:c5:38:2c:3f:45:bb:ac:fa:
                    85:ef:30:0e:c3:88:ec:0d:60:d5:86:56:61:dd:45:
                    e4:c8:3a:d3:41:5f:fc:ec:66:80:9d:22:47:a6:e9:
                    10:4a:15:b8:67:41:7c:b3:e1:27:68:37:0d:23:13:
                    e5:94:10:82:cc:b4:a5:15:ae:81:b3:e6:5c:1e:d6:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:7F:57:97:E6:CB:F1:93:8E:E4:38:B9:C5:64:2D:96:25:04:54
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:79:0a:96:d8:37:e0:64:48:42:24:9c:8c:ff:05:33:20:68:
         18:84:93:34:35:96:19:76:5e:3f:75:6b:2d:a8:b6:21:16:b1:
         d3:ee:34:0d:58:df:60:b8:0d:e1:21:8e:8e:f8:66:ce:2d:e1:
         ff:04:35:d3:26:c8:62:ed:d0:41:7f:59:57:19:37:15:b3:55:
         7b:43:ff:4e:dc:0e:05:c4:3c:84:51:d2:b6:55:6e:45:72:26:
         4c:e4:31:a2:8b:78:5a:d2:fe:7a:ce:eb:e3:a3:56:e6:40:cf:
         9f:3e:92:7d:d3:70:71:f2:b3:db:bf:a2:29:0b:f1:23:47:cb:
         ee:d8:9e:e6:60:85:e9:91:42:1a:6e:88:86:d0:08:6a:44:cb:
         07:a3:58:c1:5b:d5:6d:34:8b:18:2c:c9:49:5a:89:08:d0:2c:
         71:75:a8:72:dd:01:bf:b9:11:56:18:8b:88:7a:a5:05:cf:6b:
         e5:f9:72:23:42:80:0f:4f:ae:16:41:3e:53:71:ac:f3:08:d3:
         93:64:aa:6b:f8:45:b4:c5:3c:4d:9b:6a:ef:8a:8f:50:1c:4b:
         c9:de:fd:db:2c:99:05:3e:b4:5f:1a:60:19:f3:9f:c0:24:b5:
         d2:d0:a0:3c:3b:09:53:61:44:05:78:65:ba:98:f6:cb:de:15:
         cc:0c:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:13 2025 by rpki-client