Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235352e302f32342d3234203d3e20323632313931.roa
File:                     3138362e3139302e3235352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          ZpIt0P7i2ERj9LSA9VfpoFTCuzGpPNnIRCcaC7IYgLw=
Subject key identifier:   9F:9B:17:A4:0A:F0:48:6B:54:F0:A9:4A:86:3C:6F:50:3D:11:24:4E
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       5AF2E186C70450D2A055E62BC136810814EFACB1
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 19:58:43 +0000
ROA not before:           Tue 04 Feb 2025 19:53:43 +0000
ROA not after:            Tue 03 Feb 2026 19:58:43 +0000
asID:                     262191
IP address blocks:        186.190.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:e1:86:c7:04:50:d2:a0:55:e6:2b:c1:36:81:08:14:ef:ac:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Feb  4 19:53:43 2025 GMT
            Not After : Feb  3 19:58:43 2026 GMT
        Subject: CN=9F9B17A40AF0486B54F0A94A863C6F503D11244E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:e0:87:9b:6b:aa:e6:8a:bb:1c:08:4b:a8:
                    a9:a1:38:15:e7:eb:e0:7e:f8:1f:b9:a3:02:42:bc:
                    6f:0f:fd:21:7b:d5:46:f4:44:e6:ad:91:78:6e:c6:
                    86:7b:7e:c4:f2:cc:03:96:bd:1e:6d:94:6f:c2:1a:
                    89:73:59:30:89:c3:b9:0a:28:49:3e:b9:33:85:9b:
                    24:5d:99:a0:f2:f7:7c:4a:f9:c0:10:c4:67:df:bd:
                    90:a5:c7:e6:a6:bb:14:2f:64:6e:dc:c4:05:75:6d:
                    cf:6a:c8:0a:11:6c:ff:c0:d5:10:f5:95:b3:56:cf:
                    f8:20:2e:82:3e:95:a1:1f:fd:19:f8:52:5b:7c:0d:
                    58:90:69:b0:7a:7a:0a:34:c6:fa:ba:bb:a0:f4:57:
                    7f:bf:b0:2d:91:ed:63:49:78:a9:71:a1:31:9c:76:
                    12:71:56:a2:dc:fb:82:d3:29:4d:30:80:a1:f2:4e:
                    44:55:6f:40:8e:8d:c2:21:2b:f3:eb:7a:af:48:af:
                    38:f3:22:41:4d:c8:1f:e1:4f:95:00:ff:b6:d9:7d:
                    f1:1b:5c:c3:85:1d:4a:88:04:1a:8b:93:1b:ca:3a:
                    8c:ea:6a:86:64:e3:5b:b7:ac:de:4f:97:74:79:10:
                    03:58:29:12:ac:c2:65:8c:4d:b9:49:fb:9b:e8:a8:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:17:A4:0A:F0:48:6B:54:F0:A9:4A:86:3C:6F:50:3D:11:24:4E
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:32:b2:3f:88:0f:21:82:ff:07:90:dd:f4:0e:66:43:fd:
         51:d7:2b:52:bb:dd:1c:bb:bc:ca:fc:02:51:b0:f8:7a:0f:3c:
         bc:bf:b9:28:ac:00:85:b3:4a:05:03:7d:8d:8d:49:4a:c5:c0:
         c0:53:31:85:55:b2:bd:2f:3f:b1:69:98:d4:95:85:77:f2:ce:
         39:57:be:5e:a9:94:c4:ac:b3:12:35:c0:8a:52:44:a3:87:d4:
         5b:2c:75:c1:3f:d5:5d:4c:4d:24:0b:ee:70:77:6e:89:e8:8e:
         82:60:f1:50:ac:67:74:f7:e9:db:1a:f5:c2:60:ba:24:14:57:
         3c:bd:5b:fa:01:53:9e:cd:07:7b:4a:6b:c0:4e:e1:b9:25:b4:
         2a:ae:38:5d:0c:c5:08:7a:8e:a7:42:d2:57:56:f6:ac:f7:51:
         3d:f8:c9:17:4c:0c:4f:86:38:b4:5f:80:41:8a:69:82:7d:86:
         42:7c:df:f3:2d:1d:06:6d:18:3d:ca:42:a8:8c:22:b1:4b:bb:
         77:55:7e:5c:18:50:cb:54:f3:63:8c:4c:1e:33:88:09:9d:f4:
         8a:93:67:19:26:09:93:e9:f5:9a:d5:fd:32:70:87:56:15:3d:
         95:60:36:55:35:e4:6b:e1:2c:02:47:df:dc:47:33:be:1f:b8:
         b5:cb:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:49 2025 by rpki-client