Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/3138362e32362e37342e302f32342d3234203d3e20323730313930.roa
File:                     3138362e32362e37342e302f32342d3234203d3e20323730313930.roa (raw, json)
Hash identifier:          RgBDVK0MlGMVBcBW2vENOnEpUDxHChyhsEFcKLlk/QU=
Subject key identifier:   A8:89:DB:7F:96:91:42:E5:A3:D7:87:4B:8B:4C:EC:D3:FF:CE:BA:BB
Certificate issuer:       /CN=12E10688952241783849ADC1F70B3E3EA7C252A2
Certificate serial:       60EBB65AEF950DB7EA13C3CEB14D36290E0E728F
Authority key identifier: 12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/3138362e32362e37342e302f32342d3234203d3e20323730313930.roa
Signing time:             Tue 04 Feb 2025 18:43:57 +0000
ROA not before:           Tue 04 Feb 2025 18:38:57 +0000
ROA not after:            Tue 03 Feb 2026 18:43:57 +0000
asID:                     270190
IP address blocks:        186.26.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:eb:b6:5a:ef:95:0d:b7:ea:13:c3:ce:b1:4d:36:29:0e:0e:72:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E10688952241783849ADC1F70B3E3EA7C252A2
        Validity
            Not Before: Feb  4 18:38:57 2025 GMT
            Not After : Feb  3 18:43:57 2026 GMT
        Subject: CN=A889DB7F969142E5A3D7874B8B4CECD3FFCEBABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:ff:28:32:fd:bf:73:05:cd:b5:d4:de:f3:
                    ee:b6:e6:fb:eb:b7:88:1c:77:56:88:dd:f5:92:13:
                    54:d5:4e:63:1c:de:14:27:6e:28:92:0d:34:df:59:
                    c0:27:4e:ba:ed:fa:68:25:17:79:96:d5:28:03:d7:
                    cb:97:69:b8:0c:76:2f:d6:81:ce:fd:a1:c5:8e:31:
                    78:9b:5b:e0:94:38:33:84:02:2e:11:7d:91:4a:0b:
                    3b:b5:0a:31:be:2d:98:7d:1b:02:ea:8d:d0:1b:99:
                    68:72:54:b7:9c:31:1f:3d:00:74:62:32:3f:de:7c:
                    cd:0d:44:4a:81:3f:d6:4d:08:f3:0a:da:06:ee:5c:
                    a9:30:74:31:88:52:8e:f7:bb:3c:4a:b3:c1:17:49:
                    9c:e0:5f:84:1c:09:d3:97:09:ff:cd:7a:94:0e:5f:
                    43:58:30:63:1b:8a:12:93:a3:11:51:a0:9b:03:4e:
                    10:bf:45:0a:57:c6:80:4d:84:77:33:37:48:c1:5e:
                    f8:21:0b:b6:a6:c2:7c:30:03:26:f0:a8:a8:f3:6c:
                    81:1b:4a:2d:d4:d4:68:ca:51:b7:df:ac:36:81:48:
                    32:08:dc:b4:41:3c:49:9c:a3:13:d0:60:37:3f:0d:
                    51:fe:25:99:20:39:d5:19:5d:8b:36:fe:49:78:59:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:89:DB:7F:96:91:42:E5:A3:D7:87:4B:8B:4C:EC:D3:FF:CE:BA:BB
            X509v3 Authority Key Identifier:
                keyid:12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/3138362e32362e37342e302f32342d3234203d3e20323730313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:29:3c:92:ad:39:2c:39:2f:54:11:e6:b2:b4:d6:db:d0:
         3a:64:49:81:6d:50:ca:46:d7:9f:4f:69:68:83:7c:6a:23:e1:
         04:1e:e0:c6:d2:30:92:85:b4:ce:c0:f6:74:95:35:75:65:24:
         6c:e2:f8:8b:33:52:32:94:7f:cf:31:41:c4:a5:96:87:0e:7d:
         36:b2:56:21:ea:2c:a9:a7:e0:ff:11:95:0e:9a:c5:31:e2:bf:
         db:69:49:48:5f:33:96:6c:73:e6:1f:d3:c8:e0:1d:76:a0:12:
         8e:23:79:3e:cd:16:74:9c:3a:78:cf:b1:6d:47:b6:35:23:5f:
         df:e0:9a:cc:b0:e0:56:b5:06:87:67:10:5f:33:4e:43:4f:bd:
         c1:cd:1b:fa:f5:3e:2c:16:c9:83:06:46:24:e4:89:68:c3:8b:
         a8:e5:c9:c7:30:5a:d7:cc:4c:38:4a:aa:dc:fb:90:4f:8f:a5:
         8c:71:0b:0a:35:e0:79:33:79:5f:e4:c3:c2:16:d3:19:4b:c1:
         0c:d8:7f:43:ea:02:6d:02:82:7e:d1:ea:46:d3:7c:06:c7:c5:
         39:48:4e:46:4f:d7:59:70:95:31:5d:7f:08:f4:8b:3d:b4:6a:
         ca:ac:e9:c7:01:c3:f1:5e:ec:f2:02:f8:cb:a5:b7:37:57:16:
         65:07:76:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYOu2Wu+VDbfqE8POsU02KQ4Oco8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJFMTA2ODg5NTIyNDE3ODM4NDlBREMxRjcwQjNFM0VB
N0MyNTJBMjAeFw0yNTAyMDQxODM4NTdaFw0yNjAyMDMxODQzNTdaMDMxMTAvBgNV
BAMTKEE4ODlEQjdGOTY5MTQyRTVBM0Q3ODc0QjhCNENFQ0QzRkZDRUJBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAP8oMv2/cwXNtdTe8+625vvr
t4gcd1aI3fWSE1TVTmMc3hQnbiiSDTTfWcAnTrrt+mglF3mW1SgD18uXabgMdi/W
gc79ocWOMXibW+CUODOEAi4RfZFKCzu1CjG+LZh9GwLqjdAbmWhyVLecMR89AHRi
Mj/efM0NREqBP9ZNCPMK2gbuXKkwdDGIUo73uzxKs8EXSZzgX4QcCdOXCf/NepQO
X0NYMGMbihKToxFRoJsDThC/RQpXxoBNhHczN0jBXvghC7amwnwwAybwqKjzbIEb
Si3U1GjKUbffrDaBSDII3LRBPEmcoxPQYDc/DVH+JZkgOdUZXYs2/kl4WV7XAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqInbf5aRQuWj14dLi0zs0//OurswHwYDVR0j
BBgwFoAUEuEGiJUiQXg4Sa3B9ws+PqfCUqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTNCQTdEMkUxMDREMjcxRUQ4MDFEQzE0M0ZEMUM0N0U5
RkFBRDhDQTI4NjMzOUQ2N0Y2ODVERkMwM0E1QTdCLzAvMTJFMTA2ODg5NTIyNDE3
ODM4NDlBREMxRjcwQjNFM0VBN0MyNTJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMkUxMDY4ODk1MjI0MTc4Mzg0
OUFEQzFGNzBCM0UzRUE3QzI1MkEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0EzQkE3RDJFMTA0RDI3MUVEODAxREMxNDNGRDFDNDdFOUZBQUQ4Q0Ey
ODYzMzlENjdGNjg1REZDMDNBNUE3Qi8wLzMxMzgzNjJlMzIzNjJlMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMxMzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoaSjAN
BgkqhkiG9w0BAQsFAAOCAQEAU6cpPJKtOSw5L1QR5rK01tvQOmRJgW1QykbXn09p
aIN8aiPhBB7gxtIwkoW0zsD2dJU1dWUkbOL4izNSMpR/zzFBxKWWhw59NrJWIeos
qafg/xGVDprFMeK/22lJSF8zlmxz5h/TyOAddqASjiN5Ps0WdJw6eM+xbUe2NSNf
3+CazLDgVrUGh2cQXzNOQ0+9wc0b+vU+LBbJgwZGJOSJaMOLqOXJxzBa18xMOEqq
3PuQT4+ljHELCjXgeTN5X+TDwhbTGUvBDNh/Q+oCbQKCftHqRtN8BsfFOUhORk/X
WXCVMV1/CPSLPbRqyqzpxwHD8V7s8gL4y6W3N1cWZQd2VA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:03:11 2025 by rpki-client