Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e39362e39362e302f31392d3234203d3e20323632313836.roa
File:                     3138362e39362e39362e302f31392d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          /zSHWGICDfYbwn9PO0GF3+72DNAO+XoGvCnSiWszdHA=
Subject key identifier:   9B:82:7A:64:FF:AD:9A:3D:E0:2D:38:BF:20:F7:94:B4:CA:DA:F6:AA
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       3B4442875A29AD15362B0F2BC71C3348B495E982
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e39362e39362e302f31392d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 20:00:22 +0000
ROA not before:           Tue 04 Feb 2025 19:55:22 +0000
ROA not after:            Tue 03 Feb 2026 20:00:22 +0000
asID:                     262186
IP address blocks:        186.96.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:44:42:87:5a:29:ad:15:36:2b:0f:2b:c7:1c:33:48:b4:95:e9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Feb  4 19:55:22 2025 GMT
            Not After : Feb  3 20:00:22 2026 GMT
        Subject: CN=9B827A64FFAD9A3DE02D38BF20F794B4CADAF6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:c7:a8:83:52:08:62:1a:29:df:a4:f8:09:
                    bc:88:b6:ea:0c:ce:8b:74:87:2c:a1:81:3c:c0:2d:
                    5c:8b:1a:4b:e0:90:77:49:13:fb:9d:c6:6c:af:a3:
                    6b:b1:0f:cd:7e:75:3b:ee:85:f4:59:7a:7c:3f:17:
                    75:fc:80:bf:25:21:75:c8:93:d2:91:54:9a:af:34:
                    7e:1c:37:76:22:e6:5b:14:b2:83:97:8b:e2:76:0b:
                    44:61:b6:04:a9:96:cd:e6:10:94:31:a6:22:bb:1e:
                    03:8f:a7:d6:79:da:f7:6d:f7:b2:2f:f8:b0:33:27:
                    3f:aa:f2:b7:65:cb:a8:37:17:d2:87:72:54:00:be:
                    85:d9:9a:fe:25:51:71:0e:eb:55:95:b9:c3:67:1c:
                    fc:4b:39:b8:d4:b3:0f:df:1f:c2:eb:f8:cb:13:f3:
                    4b:e5:0b:22:0f:dd:b9:9a:40:de:1f:4e:c8:c5:25:
                    f1:77:2f:78:6a:78:f2:9d:bb:aa:e3:17:95:83:65:
                    24:3b:90:e5:28:e0:a1:13:2d:e8:24:ba:42:5a:85:
                    ca:b4:6d:9b:80:f0:5a:e5:d6:bf:cd:6a:c0:68:e4:
                    98:52:6a:db:00:f1:69:22:72:4c:c6:84:b9:0d:d0:
                    2e:f4:08:bd:f1:74:79:93:a8:06:ba:80:39:b0:89:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:82:7A:64:FF:AD:9A:3D:E0:2D:38:BF:20:F7:94:B4:CA:DA:F6:AA
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e39362e39362e302f31392d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:1f:bb:77:16:17:2a:b4:cc:79:38:67:c1:d0:55:60:6c:
         31:6a:7f:ae:cd:0a:f3:10:ac:fa:fb:2c:59:ae:60:8e:74:ad:
         ae:cc:a5:05:4d:98:47:9b:75:0a:ce:0c:71:4f:c9:e3:80:77:
         8d:1b:d3:59:9f:e5:0b:65:78:da:12:ad:4c:13:28:b9:38:47:
         81:c9:f6:d8:09:a0:a3:6e:4d:81:b9:b1:cb:13:36:45:29:1c:
         69:bd:d9:26:78:f8:86:87:a5:79:b0:a0:8d:77:dc:84:fa:3e:
         78:2f:d3:c8:fe:79:5e:b7:61:39:ec:5d:f1:f1:f8:35:e5:a4:
         22:08:db:e2:28:28:de:78:0c:18:51:e4:c9:77:2d:89:7e:48:
         a4:dc:af:28:48:c8:0a:6b:48:a6:f1:83:8d:64:51:18:26:dd:
         db:5d:39:bc:0d:a0:57:1d:c6:53:cb:0c:b7:82:a0:1e:93:31:
         e3:28:8f:cb:d7:b9:1d:5e:ae:84:1a:95:a1:2b:25:00:6d:f1:
         23:ec:eb:0b:b5:27:b9:68:3e:7c:2f:ac:2e:e4:92:0f:98:de:
         1a:b5:d7:65:2c:94:12:8b:da:42:b3:3b:1c:d8:32:97:2f:da:
         5d:5b:41:1b:c7:68:ef:f5:90:c9:04:96:82:50:4a:46:02:36:
         d0:e4:94:c6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO0RCh1oprRU2Kw8rxxwzSLSV6YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFENkMyM0Y4OEQyRDM0OTkyQTQzRkFCMDFFRjVBNUIw
NDAzN0JBQjAeFw0yNTAyMDQxOTU1MjJaFw0yNjAyMDMyMDAwMjJaMDMxMTAvBgNV
BAMTKDlCODI3QTY0RkZBRDlBM0RFMDJEMzhCRjIwRjc5NEI0Q0FEQUY2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXMeog1IIYhop36T4CbyItuoM
zot0hyyhgTzALVyLGkvgkHdJE/udxmyvo2uxD81+dTvuhfRZenw/F3X8gL8lIXXI
k9KRVJqvNH4cN3Yi5lsUsoOXi+J2C0RhtgSpls3mEJQxpiK7HgOPp9Z52vdt97Iv
+LAzJz+q8rdly6g3F9KHclQAvoXZmv4lUXEO61WVucNnHPxLObjUsw/fH8Lr+MsT
80vlCyIP3bmaQN4fTsjFJfF3L3hqePKdu6rjF5WDZSQ7kOUo4KETLegkukJahcq0
bZuA8Frl1r/NasBo5JhSatsA8WkickzGhLkN0C70CL3xdHmTqAa6gDmwiQNjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm4J6ZP+tmj3gLTi/IPeUtMra9qowHwYDVR0j
BBgwFoAUgdbCP4jS00mSpD+rAe9aWwQDe6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NkZFNzA1RjZEREJEMTYyQjhERURCQTk5MzUzODZGQ0ZG
NkIyQTgxMERCRjhDN0YzMzNFMjc2Mjg1QjlDRjBGLzAvODFENkMyM0Y4OEQyRDM0
OTkyQTQzRkFCMDFFRjVBNUIwNDAzN0JBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MUQ2QzIzRjg4RDJEMzQ5OTJB
NDNGQUIwMUVGNUE1QjA0MDM3QkFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDZGRTcwNUY2RERCRDE2MkI4REVEQkE5OTM1Mzg2RkNGRjZCMkE4MTBE
QkY4QzdGMzMzRTI3NjI4NUI5Q0YwRi8wLzMxMzgzNjJlMzkzNjJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbpgYDAN
BgkqhkiG9w0BAQsFAAOCAQEAdLsfu3cWFyq0zHk4Z8HQVWBsMWp/rs0K8xCs+vss
Wa5gjnStrsylBU2YR5t1Cs4McU/J44B3jRvTWZ/lC2V42hKtTBMouThHgcn22Amg
o25NgbmxyxM2RSkcab3ZJnj4hoelebCgjXfchPo+eC/TyP55XrdhOexd8fH4NeWk
Igjb4igo3ngMGFHkyXctiX5IpNyvKEjICmtIpvGDjWRRGCbd2105vA2gVx3GU8sM
t4KgHpMx4yiPy9e5HV6uhBqVoSslAG3xI+zrC7UnuWg+fC+sLuSSD5jeGrXXZSyU
EovaQrM7HNgyly/aXVtBG8do7/WQyQSWglBKRgI20OSUxg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:05 2025 by rpki-client