Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3234203d3e203238313134.roa
File:                     3138362e3138332e39362e302f32302d3234203d3e203238313134.roa (raw, json)
Hash identifier:          1iR56aMXMeUWJb1BXLy7jFWiPwogb1MabfPt4LANQ7E=
Subject key identifier:   3B:31:F7:F9:B3:6A:D8:1D:96:5A:81:44:CC:45:21:6A:ED:27:91:91
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       6DC27BF6D0A6740823CC53B633DF1AD75371F80A
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:40 +0000
ROA not before:           Tue 04 Feb 2025 18:02:40 +0000
ROA not after:            Tue 03 Feb 2026 18:07:40 +0000
asID:                     28114
IP address blocks:        186.183.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:7b:f6:d0:a6:74:08:23:cc:53:b6:33:df:1a:d7:53:71:f8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:40 2025 GMT
            Not After : Feb  3 18:07:40 2026 GMT
        Subject: CN=3B31F7F9B36AD81D965A8144CC45216AED279191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:41:e9:24:2c:61:08:fd:a1:e5:7b:d9:2c:
                    ad:60:89:39:1f:e7:06:8e:f4:c0:59:7b:1d:71:39:
                    87:b6:b7:7e:2c:24:e0:81:66:99:6d:12:60:cb:0a:
                    b3:4e:a5:8a:1b:26:c2:02:f2:37:3c:c4:b5:fd:50:
                    99:b8:c7:4b:01:4a:ef:f7:27:cf:03:43:dd:6f:02:
                    73:fb:7c:9f:26:80:70:52:03:17:41:84:db:34:c6:
                    db:63:68:ad:63:6f:61:99:f0:cf:d6:7c:33:58:93:
                    41:02:25:09:d1:ec:5a:a8:74:cc:ff:b6:29:e2:dc:
                    39:65:80:9e:f2:46:39:1f:0e:48:b1:1f:98:e8:a5:
                    85:80:a6:63:c2:76:f6:30:fe:74:d3:57:35:6a:24:
                    e2:66:aa:cc:07:c1:1a:f8:8b:79:c1:8c:93:5e:ad:
                    93:81:60:d4:a1:e8:70:3b:75:e5:21:8b:46:b5:b4:
                    06:7f:7f:ab:97:05:5b:f6:48:19:c4:32:b6:c4:af:
                    6d:45:59:c4:72:eb:90:14:9d:11:6b:df:91:41:b0:
                    7d:1f:02:2f:dc:a6:a1:63:1d:3e:b6:05:db:46:e4:
                    ca:69:08:03:25:b9:ce:dd:73:61:cc:b3:06:0d:8c:
                    0a:98:32:2c:0f:94:0a:7d:de:b9:78:32:18:07:1b:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:F7:F9:B3:6A:D8:1D:96:5A:81:44:CC:45:21:6A:ED:27:91:91
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e39362e302f32302d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:fc:3e:db:49:8d:e4:ee:8b:10:6c:da:f7:be:67:ba:2a:
         09:7b:17:a9:15:c0:8e:82:76:16:72:fa:2a:a0:07:07:5e:35:
         14:40:b2:fa:35:84:19:f3:9f:f6:41:7e:f0:08:68:3b:12:0a:
         bf:26:2e:4c:33:6f:4f:ee:14:36:eb:ad:63:9a:10:55:54:0d:
         36:c2:21:40:14:f1:05:b6:86:2e:d1:79:31:ce:e0:4d:0b:ff:
         a7:32:3e:64:13:e1:6b:bd:5d:d5:fb:01:b3:80:7e:bf:e2:47:
         69:5f:98:45:6c:3e:8f:66:06:5e:f8:da:31:81:cd:46:a7:cf:
         7b:62:78:63:2f:78:73:fb:71:e2:a3:40:fa:0b:7d:33:54:f6:
         d6:1b:41:09:bc:b1:e3:9b:41:f9:78:75:56:85:64:29:1b:f5:
         80:2b:bf:bc:4d:9b:b3:d6:60:f4:56:87:54:17:90:25:f3:bc:
         04:cd:20:34:eb:66:e6:04:c2:42:52:31:dd:b0:64:53:32:b8:
         de:dd:36:26:cc:8a:26:62:14:34:c4:0f:56:05:56:72:ec:7a:
         a9:2c:7b:f9:59:55:59:0b:8e:47:dc:e3:94:e6:fc:ed:2b:fb:
         1c:8e:05:81:08:41:0a:1d:75:c6:55:3f:43:41:53:1f:f0:e0:
         c8:e4:30:9b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbcJ79tCmdAgjzFO2M98a11Nx+AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyNDBaFw0yNjAyMDMxODA3NDBaMDMxMTAvBgNV
BAMTKDNCMzFGN0Y5QjM2QUQ4MUQ5NjVBODE0NENDNDUyMTZBRUQyNzkxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWd0HpJCxhCP2h5XvZLK1giTkf
5waO9MBZex1xOYe2t34sJOCBZpltEmDLCrNOpYobJsIC8jc8xLX9UJm4x0sBSu/3
J88DQ91vAnP7fJ8mgHBSAxdBhNs0xttjaK1jb2GZ8M/WfDNYk0ECJQnR7FqodMz/
tini3DllgJ7yRjkfDkixH5jopYWApmPCdvYw/nTTVzVqJOJmqswHwRr4i3nBjJNe
rZOBYNSh6HA7deUhi0a1tAZ/f6uXBVv2SBnEMrbEr21FWcRy65AUnRFr35FBsH0f
Ai/cpqFjHT62BdtG5MppCAMluc7dc2HMswYNjAqYMiwPlAp93rl4MhgHG0+ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOzH3+bNq2B2WWoFEzEUhau0nkZEwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzgzNjJlMzEzODMzMmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMxMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLq3YDAN
BgkqhkiG9w0BAQsFAAOCAQEAeKb8PttJjeTuixBs2ve+Z7oqCXsXqRXAjoJ2FnL6
KqAHB141FECy+jWEGfOf9kF+8AhoOxIKvyYuTDNvT+4UNuutY5oQVVQNNsIhQBTx
BbaGLtF5Mc7gTQv/pzI+ZBPha71d1fsBs4B+v+JHaV+YRWw+j2YGXvjaMYHNRqfP
e2J4Yy94c/tx4qNA+gt9M1T21htBCbyx45tB+Xh1VoVkKRv1gCu/vE2bs9Zg9FaH
VBeQJfO8BM0gNOtm5gTCQlIx3bBkUzK43t02JsyKJmIUNMQPVgVWcux6qSx7+VlV
WQuOR9zjlOb87Sv7HI4FgQhBCh11xlU/Q0FTH/DgyOQwmw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:27 2025 by rpki-client