Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138362e302f32332d3234203d3e20323634383330.roa
File:                     3138362e3139302e3138362e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          PSTwf0CdnDUTjkPXPt1P4uL01EdVinTVxBQn1iiaHMc=
Subject key identifier:   DF:47:76:A1:B4:8D:59:45:22:18:42:09:1B:63:65:C5:6E:73:BA:AC
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       0A06822CDA700B86E5747DBF46A4565C77D2D67D
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138362e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 18:01:04 +0000
ROA not before:           Tue 04 Feb 2025 17:56:04 +0000
ROA not after:            Tue 03 Feb 2026 18:01:04 +0000
asID:                     264830
IP address blocks:        186.190.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:06:82:2c:da:70:0b:86:e5:74:7d:bf:46:a4:56:5c:77:d2:d6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Feb  4 17:56:04 2025 GMT
            Not After : Feb  3 18:01:04 2026 GMT
        Subject: CN=DF4776A1B48D5945221842091B6365C56E73BAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:6e:ff:79:9e:a4:72:86:3c:27:8e:dc:80:
                    e3:d2:0e:57:1f:51:f1:f5:b2:9a:b0:c8:df:30:d9:
                    94:f0:4c:f1:43:ed:14:a6:bf:61:59:96:c1:59:54:
                    60:ad:03:2e:95:a4:44:2d:eb:d1:c4:96:63:f6:d6:
                    15:2e:dc:6e:bb:b3:55:92:c7:41:67:f9:e3:1b:5d:
                    f7:01:21:79:28:f6:9e:36:ef:95:2c:52:9f:fa:bc:
                    fa:42:3a:a3:3d:bf:e2:65:ee:ee:94:90:aa:9a:04:
                    02:df:61:eb:1e:66:d1:e3:6b:ae:86:ba:34:df:c1:
                    6a:19:16:80:5d:29:ec:ff:16:2e:ca:af:47:2b:fd:
                    b3:95:fd:3a:9b:b2:1e:8a:cd:2c:6c:57:5d:4c:23:
                    5c:bf:7d:e4:ac:ae:00:a1:a4:20:0a:eb:9d:fe:a2:
                    18:a9:71:d1:38:c8:78:3d:14:be:ff:ca:45:e5:9b:
                    15:f2:79:55:3f:53:00:38:11:47:44:1e:e9:be:0e:
                    87:2b:c9:33:c4:c9:c2:f4:ab:d8:da:63:07:7a:ae:
                    45:58:8d:c6:91:7c:29:18:cf:2f:e4:c4:6c:7b:a1:
                    d9:36:cc:e0:26:15:4a:72:c9:91:ea:16:c0:48:ac:
                    51:04:36:b1:24:0c:f2:d8:15:9d:78:a2:09:e5:bb:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:76:A1:B4:8D:59:45:22:18:42:09:1B:63:65:C5:6E:73:BA:AC
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138362e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:b3:6d:df:00:87:9b:56:2b:8e:ba:40:f7:be:eb:b5:29:
         5a:42:18:1e:e9:1c:0c:12:8e:8f:9e:9e:c0:ec:9d:2f:71:ac:
         ed:91:7a:bc:d9:b8:7b:b2:ac:06:63:17:19:a1:33:5e:ea:2d:
         7b:0d:40:c8:71:22:d6:2a:3d:d4:43:e7:3e:e2:92:a5:47:40:
         13:97:41:57:1d:13:c3:4e:37:68:e9:2d:37:0e:1d:a5:4c:74:
         f4:83:d1:bd:27:f6:8f:c7:f0:c7:a5:65:a4:c9:bf:0d:88:0b:
         20:1e:11:64:36:f7:be:2e:16:5b:8d:90:b8:57:b4:67:88:78:
         d7:9e:b9:24:f8:c5:3c:53:39:72:93:f4:86:a5:57:26:a9:7f:
         1f:7f:8e:ec:ff:89:4e:2e:b4:2d:13:4f:6f:5f:a3:82:28:30:
         e5:e4:13:e4:5c:e6:47:80:ef:54:c7:e0:c4:5e:a3:81:c8:23:
         a4:10:03:06:75:74:be:e8:c7:15:0a:45:92:66:31:41:b9:37:
         d7:98:aa:f0:8d:f7:32:36:32:e3:59:05:29:6c:04:8e:13:15:
         e9:f4:ca:bd:b3:38:b8:58:b4:db:cd:8c:5a:c8:a1:a4:1e:d4:
         59:74:ad:a8:ad:b3:73:e4:14:04:48:c6:4a:01:a7:38:59:04:
         aa:90:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:00 2025 by rpki-client