Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa
File:                     3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa (raw, json)
Hash identifier:          v9u2EYEQWzC9olCVYTlztfacigLH+ZGLFBtRxzPqxhQ=
Subject key identifier:   95:15:7B:6D:AF:46:A5:F9:90:3C:3F:49:3F:35:F2:17:55:C8:4F:BB
Certificate issuer:       /CN=7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C
Certificate serial:       0C44935D68D55E8EA951DBCB166A23B8BDF855AB
Authority key identifier: 76:75:FA:A8:48:EB:42:C5:6E:75:B2:FE:1E:32:D1:D4:AB:38:FE:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa
Signing time:             Tue 18 Mar 2025 14:12:15 +0000
ROA not before:           Tue 18 Mar 2025 14:07:15 +0000
ROA not after:            Tue 17 Mar 2026 14:12:15 +0000
asID:                     267706
IP address blocks:        186.65.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:44:93:5d:68:d5:5e:8e:a9:51:db:cb:16:6a:23:b8:bd:f8:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C
        Validity
            Not Before: Mar 18 14:07:15 2025 GMT
            Not After : Mar 17 14:12:15 2026 GMT
        Subject: CN=95157B6DAF46A5F9903C3F493F35F21755C84FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:ac:52:22:dd:d2:7e:7c:f7:5e:fe:03:cf:
                    1a:2d:3f:d8:cb:bf:a9:ec:23:76:d9:f1:72:29:85:
                    6c:41:d1:b2:76:0b:2b:61:0e:86:bf:21:ca:1c:97:
                    22:68:f3:de:7e:4e:0f:71:42:8b:d2:6a:d9:8f:73:
                    95:3a:48:c0:d6:f5:d8:ad:f4:17:08:95:39:7a:1d:
                    5d:61:50:a1:a7:34:69:a4:41:2d:41:b4:fc:c2:b3:
                    97:7c:6e:96:42:53:ce:50:88:eb:dc:6f:be:c4:6a:
                    43:2d:08:e7:a3:1c:ac:b1:d7:ab:8e:ac:b6:c0:d7:
                    19:96:6c:c9:d0:6a:21:18:21:c8:3b:db:f7:86:20:
                    58:f8:18:a9:c9:10:63:d8:d4:85:60:27:ce:8b:5e:
                    60:02:51:99:60:4b:2e:9f:c1:49:ea:db:a4:5f:80:
                    9f:7c:21:01:d9:4c:03:ee:74:93:76:e3:17:2d:b1:
                    cf:01:91:24:14:12:c0:f4:31:1a:c5:92:e8:ed:d7:
                    ea:96:ac:9b:1d:db:8c:67:ed:fe:85:3e:39:bb:29:
                    0f:7d:49:40:d3:38:d7:44:23:d7:ae:f4:9a:0a:fc:
                    2c:1b:73:af:74:98:01:28:5c:56:13:25:4b:e6:35:
                    e1:65:62:5b:cc:7a:f9:7a:f2:f5:10:33:b7:15:74:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:7B:6D:AF:46:A5:F9:90:3C:3F:49:3F:35:F2:17:55:C8:4F:BB
            X509v3 Authority Key Identifier:
                keyid:76:75:FA:A8:48:EB:42:C5:6E:75:B2:FE:1E:32:D1:D4:AB:38:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:c4:d7:3b:0b:61:d5:67:9e:7f:ee:8d:13:f2:6d:96:2b:
         6f:9b:06:77:e6:40:87:d1:81:be:14:d5:da:67:50:f7:b0:f5:
         3c:c7:c9:50:a9:f8:14:a0:b4:ae:e5:b9:56:64:73:20:d1:e5:
         04:49:16:2f:06:3d:62:3e:46:1d:34:58:1c:00:a0:be:a1:05:
         9a:5e:6d:60:94:2d:50:89:f5:59:8d:7e:57:e2:6c:6f:46:6b:
         af:78:e3:d7:bc:a2:26:ec:3e:6e:85:94:f6:83:4e:45:f3:64:
         1c:18:17:ca:c9:a0:f7:32:ae:93:81:b0:a1:78:4e:0e:0f:a9:
         23:f5:76:09:3a:5e:c2:2e:0d:5c:5a:cb:93:46:ca:90:87:8c:
         94:7a:ff:eb:0d:86:f3:b8:90:d3:1c:d9:6d:f7:fd:47:cf:c0:
         cc:20:76:c9:49:b0:90:a2:3f:fa:4b:fc:94:25:f0:ac:55:a8:
         c0:1b:a4:68:c6:77:b2:88:37:96:93:62:03:56:ce:02:42:a0:
         ef:24:4c:f8:01:b4:10:a0:5c:17:ac:5f:1c:9e:20:ba:4c:d6:
         b5:f4:5a:c4:11:be:0b:91:a5:22:e0:e6:41:4d:93:86:b0:06:
         5c:83:61:9b:64:67:09:7c:a2:39:66:cf:b5:46:d4:76:03:42:
         76:59:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:00 2025 by rpki-client