Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3231203d3e203238313134.roa
File:                     3138362e3138332e39362e302f32302d3231203d3e203238313134.roa (raw, json)
Hash identifier:          Y6xfPIFvYTm+QS+zkvWBz/DblELj6Vlp07GZ8otLsEI=
Subject key identifier:   8E:78:1E:7F:88:CB:9E:67:49:C2:82:C4:F9:68:69:F8:7B:DD:00:5A
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       076AF515DF17F414BF5E12500156D01388F27E79
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3231203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:43 +0000
ROA not before:           Tue 04 Feb 2025 18:02:43 +0000
ROA not after:            Tue 03 Feb 2026 18:07:43 +0000
asID:                     28114
IP address blocks:        186.183.96.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6a:f5:15:df:17:f4:14:bf:5e:12:50:01:56:d0:13:88:f2:7e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:43 2025 GMT
            Not After : Feb  3 18:07:43 2026 GMT
        Subject: CN=8E781E7F88CB9E6749C282C4F96869F87BDD005A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:94:73:98:84:f0:3c:15:7e:32:95:01:34:
                    ec:e4:35:d5:0b:2e:42:fb:85:4d:33:19:0a:0a:3b:
                    02:11:69:a1:04:d4:f4:d0:00:4b:05:bc:72:ac:05:
                    4e:21:bb:a8:ee:cd:45:92:bc:fa:23:3d:2c:88:64:
                    dd:88:4f:9d:59:57:97:e5:3c:d9:f6:10:78:dd:b2:
                    18:c9:2d:9a:57:e4:77:70:aa:e1:bd:5e:d0:37:ab:
                    e6:4e:a6:19:ae:55:0d:88:5f:2b:97:9d:0a:af:bb:
                    8b:5c:38:e6:60:df:44:f0:3c:17:17:26:0a:8d:aa:
                    0f:47:43:28:75:ce:3a:95:ec:39:1d:91:07:e6:e7:
                    84:82:cb:5c:25:71:e5:51:39:13:f7:03:b4:fd:bf:
                    e0:74:b7:83:48:6b:48:49:f8:82:bb:ca:d6:4b:2a:
                    a8:ae:0f:90:47:b2:83:18:83:64:55:3b:ff:1c:64:
                    69:d1:83:4d:d9:ae:d2:27:f4:60:63:2a:b0:98:11:
                    fe:b1:79:44:98:48:20:8b:1b:de:f0:ab:9c:50:02:
                    c2:94:3c:87:f2:f6:1c:be:d9:5f:40:78:25:eb:7a:
                    57:d9:e7:8f:97:85:ae:5a:9e:51:8a:b7:a6:26:ed:
                    c8:44:ff:88:b1:66:52:98:74:2f:1a:5f:97:fa:4f:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:1E:7F:88:CB:9E:67:49:C2:82:C4:F9:68:69:F8:7B:DD:00:5A
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:0c:eb:d5:73:54:2a:ae:e8:f2:1f:45:42:ef:bf:d5:8a:
         07:79:01:72:ce:48:7d:fa:4d:71:f9:aa:aa:08:86:17:ed:ab:
         0c:31:3f:41:23:d6:67:f3:cf:29:7f:b8:d3:8b:ac:ac:cb:7f:
         e7:d8:d9:f6:d6:63:89:07:ce:c4:de:81:8d:df:ca:0e:4b:54:
         71:d5:41:a5:a8:3c:f2:de:ab:3d:a3:3e:3e:fd:a3:db:5b:b2:
         5c:1f:86:6a:58:b3:7f:10:80:1d:02:c2:a3:e2:2c:47:10:6d:
         c5:17:34:25:84:9e:74:b7:0f:30:80:10:79:3c:a2:fd:39:cd:
         1c:51:1d:4c:3f:a1:1e:7b:f8:a4:1f:a9:52:fe:2f:39:0f:24:
         62:66:7d:17:e1:76:22:ac:a2:5a:66:05:88:7d:6e:8a:77:43:
         cf:e4:43:28:24:53:64:ea:5c:6b:ad:0b:e5:f4:5e:ba:f5:2b:
         ef:f1:b7:68:ed:6a:bb:86:94:06:d6:ca:91:26:d7:c5:93:3a:
         f9:a6:9f:c3:c6:53:f6:cc:bf:c0:4b:fb:fe:f7:50:de:20:36:
         10:ce:6a:fc:6c:2d:d5:b6:4e:fa:1b:f3:7f:a0:5e:d3:e6:c1:
         f1:80:df:a9:04:6a:91:ef:84:d0:9f:dc:5f:41:43:20:3a:2d:
         79:1d:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client