Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32332d3233203d3e20323633373236.roa
File:                     3133382e33362e39362e302f32332d3233203d3e20323633373236.roa (raw, json)
Hash identifier:          tIjT68LMP3/DPLdIRs8QrZJzdE0jrFskdUMyAT34N0o=
Subject key identifier:   C9:50:D7:21:02:00:D8:78:3F:33:9B:78:60:71:F7:C8:78:F8:9D:47
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       0C64E6D61CCA514370365E291B85F38510417751
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32332d3233203d3e20323633373236.roa
Signing time:             Thu 30 Jan 2025 17:40:00 +0000
ROA not before:           Thu 30 Jan 2025 17:35:00 +0000
ROA not after:            Thu 29 Jan 2026 17:40:00 +0000
asID:                     263726
IP address blocks:        138.36.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:64:e6:d6:1c:ca:51:43:70:36:5e:29:1b:85:f3:85:10:41:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Jan 30 17:35:00 2025 GMT
            Not After : Jan 29 17:40:00 2026 GMT
        Subject: CN=C950D7210200D8783F339B786071F7C878F89D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:0e:b5:09:70:5f:a2:69:e4:4e:d3:39:fc:
                    f2:35:a5:1a:a8:33:e2:a9:62:31:87:d2:26:d5:ae:
                    64:66:9e:05:0e:70:4b:40:e6:10:9a:1c:8c:02:dc:
                    a8:ea:bf:52:a8:a4:80:14:34:cb:3f:c4:06:ff:c5:
                    94:61:b2:39:63:43:cb:7e:ef:61:b5:e9:4f:bd:64:
                    5c:e6:1e:6c:f0:2d:e5:65:a6:56:e6:35:65:78:ff:
                    42:bd:7b:22:11:ad:45:15:89:73:ff:c9:c0:09:73:
                    d2:f2:65:dd:93:f1:75:a4:b1:84:c5:a7:a8:58:ed:
                    64:37:8e:8e:a3:6e:db:7c:9e:fc:24:b3:73:63:9f:
                    6a:b6:db:a7:84:c0:a2:31:f1:12:ce:99:20:cc:ce:
                    e7:b7:77:87:f8:8d:b0:d7:ff:d0:7a:48:53:2d:c1:
                    e7:79:4d:2c:f0:9e:30:42:c2:67:57:37:f9:f1:8f:
                    d7:6e:77:c7:22:12:b8:bb:5d:de:11:c2:30:24:57:
                    2d:ff:5e:3c:6c:1e:89:5f:1f:3b:cf:2c:54:32:ab:
                    ca:10:44:4c:94:5d:31:71:0e:84:a9:1e:41:48:3d:
                    b0:09:cc:18:d7:15:28:ae:97:ec:c1:8e:4d:fd:5e:
                    f9:15:1a:7e:17:7d:3a:f4:a5:77:1f:f9:d8:c1:da:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:D7:21:02:00:D8:78:3F:33:9B:78:60:71:F7:C8:78:F8:9D:47
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32332d3233203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:8d:d1:3e:f8:cd:c6:5c:06:7e:77:9c:ea:65:d8:6f:4a:
         b8:cc:67:bb:c2:b0:05:8c:1a:ab:1d:82:bc:5d:14:39:98:bf:
         9b:8c:ca:1b:54:e1:42:d7:06:46:ea:ec:f9:b9:a7:80:cf:7c:
         5c:2d:c6:e4:9c:03:62:de:fa:9d:ef:b5:d5:59:5f:21:1c:bd:
         69:8e:7b:07:6c:99:44:e1:07:89:59:24:8c:ef:e6:e6:14:0c:
         94:65:3b:3f:1a:56:fb:5e:f7:74:d7:06:f7:55:c2:d3:a9:00:
         18:b0:7f:ee:c6:68:fb:06:2f:55:d8:7c:40:e7:78:c3:51:13:
         75:6c:e6:07:a7:50:c6:10:32:6f:27:b3:b2:6f:84:a6:87:7b:
         81:e8:04:ad:d9:3b:ef:c1:81:71:fb:49:09:02:e7:22:7c:0e:
         e5:24:aa:dd:d5:90:e3:9f:f4:12:3f:b9:59:9b:11:25:8d:0e:
         c7:3e:de:05:07:09:80:48:3a:6e:bc:f0:6d:fe:39:11:0f:57:
         06:89:51:70:fa:fd:f9:48:a3:a0:62:b7:b1:99:a4:ed:06:37:
         93:75:5d:0d:5a:0b:18:a3:36:23:45:37:71:36:b6:24:d7:e6:
         e7:18:e3:b0:44:90:86:e2:48:cd:f5:3e:c9:3b:79:a9:af:b7:
         5d:dd:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:52 2025 by rpki-client