Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa
File:                     3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          X7IDypn3wtdRyEbKgvNuLqH1GtMZlytEVsqjdltRKmo=
Subject key identifier:   CF:52:CA:9E:C8:B9:7D:65:3F:F1:53:BB:FE:A9:19:01:46:DD:A3:86
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       380AE8F75D46AD4E29EF06D064C1A67F80B6E8B4
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 18:01:04 +0000
ROA not before:           Tue 04 Feb 2025 17:56:04 +0000
ROA not after:            Tue 03 Feb 2026 18:01:04 +0000
asID:                     264830
IP address blocks:        186.190.188.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:e8:f7:5d:46:ad:4e:29:ef:06:d0:64:c1:a6:7f:80:b6:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Feb  4 17:56:04 2025 GMT
            Not After : Feb  3 18:01:04 2026 GMT
        Subject: CN=CF52CA9EC8B97D653FF153BBFEA9190146DDA386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:dc:c9:86:cc:35:53:eb:1b:ee:7c:2b:50:
                    98:45:d9:d5:4a:15:6f:f6:52:9a:0e:fa:18:98:c8:
                    95:c8:32:05:f9:5a:42:02:38:c8:aa:be:5a:54:a1:
                    36:2f:56:5e:ae:01:c1:5b:08:46:31:34:e6:ee:9f:
                    bf:a7:a1:33:80:2f:ee:c1:3c:fe:09:62:8b:1a:56:
                    3b:3c:eb:60:c4:ae:c9:ef:3f:e5:6e:09:5b:0d:dd:
                    e5:db:66:7a:31:92:47:06:98:4a:02:01:91:ee:2d:
                    36:44:94:da:2e:50:17:40:a5:b5:1a:11:96:6c:ee:
                    7a:7e:9c:3b:74:66:9c:21:7c:10:2a:c1:60:13:82:
                    a1:7b:ed:15:2b:c5:a2:15:32:4b:19:e3:d1:9e:dd:
                    5e:f4:ab:de:4f:3b:8e:29:cc:6e:66:96:a4:1a:a0:
                    f5:8a:8e:7a:21:9d:b9:72:0e:b1:e7:23:b8:71:72:
                    a0:f7:8c:e8:9f:07:67:c5:19:a8:f9:ec:2f:8e:f6:
                    46:b5:ae:af:7d:4c:d1:61:c6:39:12:3e:b5:6f:4a:
                    d3:82:14:cf:94:a0:82:68:bf:7e:ef:c2:bc:24:a0:
                    97:a4:22:07:86:b2:53:0c:5c:0e:1b:fe:40:66:1b:
                    68:98:57:69:64:91:e8:e6:11:ac:37:54:e5:6d:30:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:52:CA:9E:C8:B9:7D:65:3F:F1:53:BB:FE:A9:19:01:46:DD:A3:86
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:48:b2:a3:57:03:68:51:bb:93:5b:84:5f:9a:af:65:31:7e:
         18:cb:3d:97:0a:e8:9c:49:64:90:27:70:d4:19:1d:8a:6b:c4:
         85:b0:da:95:62:15:c3:27:b3:c2:02:3c:61:4a:af:eb:62:b7:
         df:7e:bc:62:20:f9:5d:4a:8f:a1:8f:42:85:ff:c9:cc:3e:81:
         11:be:90:82:57:5e:59:0a:28:42:55:c5:7d:dc:d1:1e:2a:e8:
         8d:f5:fe:51:f6:9d:04:90:1f:c7:49:76:ff:da:38:c0:7d:64:
         ea:7a:8b:71:12:bb:8d:60:e7:02:f5:61:9d:a4:24:2f:e0:d8:
         df:14:cb:12:bf:db:fc:1d:0b:9f:17:c3:f6:ee:12:7a:c1:32:
         f5:e5:55:ad:5f:bd:e1:3f:98:95:bc:0e:ff:b9:34:80:bf:38:
         e3:fa:60:ee:c0:58:5e:a1:d1:7f:d4:38:b9:7f:c4:3d:5a:e5:
         1a:ad:43:2b:3b:50:13:e8:15:8e:d3:10:e4:9d:b1:17:01:9b:
         0d:58:d8:ef:47:07:27:0d:d7:ca:e8:c5:45:84:0e:bf:93:83:
         39:b8:c7:9b:c1:f5:ca:1a:bc:1a:2b:01:a2:28:84:97:41:bc:
         07:89:5b:81:81:04:6e:06:6f:76:ec:0b:97:aa:e9:50:1c:c1:
         40:b2:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:59 2025 by rpki-client