Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa
File:                     3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa (raw, json)
Hash identifier:          IbBpofIS45HeNkTsXGLTJcgGayJfO1VwUD84egOYQrc=
Subject key identifier:   60:35:7B:60:D1:17:DB:B3:89:89:2D:B1:CF:A9:FD:65:BB:FA:E3:DC
Certificate issuer:       /CN=7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C
Certificate serial:       0F37F3B4E6D7D468EF033739D3F40B8A5506DCE0
Authority key identifier: 76:75:FA:A8:48:EB:42:C5:6E:75:B2:FE:1E:32:D1:D4:AB:38:FE:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa
Signing time:             Tue 17 Feb 2026 14:30:54 +0000
ROA not before:           Tue 17 Feb 2026 14:25:54 +0000
ROA not after:            Tue 16 Feb 2027 14:30:54 +0000
asID:                     267706
IP address blocks:        186.65.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:f3:b4:e6:d7:d4:68:ef:03:37:39:d3:f4:0b:8a:55:06:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C
        Validity
            Not Before: Feb 17 14:25:54 2026 GMT
            Not After : Feb 16 14:30:54 2027 GMT
        Subject: CN=60357B60D117DBB389892DB1CFA9FD65BBFAE3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:da:21:ff:f2:41:09:cb:66:46:3c:38:bc:
                    1c:4f:a8:cf:41:80:08:73:07:62:85:f8:fd:f3:d3:
                    80:a6:ae:01:81:8d:f2:35:fe:aa:fd:7e:1b:fd:d0:
                    b0:bf:9f:12:f4:0d:79:3d:6f:f2:44:56:1a:54:17:
                    0d:89:d0:12:dc:d5:36:11:f4:d3:86:91:94:fb:48:
                    12:c8:2e:b9:7b:47:38:9b:fd:91:9b:0b:74:2a:bd:
                    60:7c:bf:b3:fe:dd:85:1b:98:20:ea:25:41:a6:94:
                    3e:6c:ce:d5:e4:0f:54:52:33:88:16:0a:6d:8d:8a:
                    cf:34:0f:82:69:64:aa:99:33:27:ea:88:30:6d:a1:
                    5c:b3:c3:9e:73:27:ce:c4:2e:fb:24:bc:98:e5:8a:
                    40:00:2c:e4:3d:b5:c5:b5:94:af:52:e4:a4:32:43:
                    f7:40:80:18:55:b8:2c:03:96:76:07:83:c0:4c:39:
                    ef:cf:af:81:bd:23:b5:b8:93:d1:5d:43:5b:76:b5:
                    b0:f1:3e:6b:5b:d8:ff:a6:02:cf:4d:aa:16:e6:32:
                    bd:98:05:bd:de:ad:c6:68:47:1d:47:d9:8c:7b:6c:
                    4c:98:66:6f:4f:2b:43:a1:c0:31:d5:c3:33:3b:ed:
                    4a:3f:16:b0:6b:5b:81:09:a1:9b:92:76:26:ed:9d:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:7B:60:D1:17:DB:B3:89:89:2D:B1:CF:A9:FD:65:BB:FA:E3:DC
            X509v3 Authority Key Identifier:
                keyid:76:75:FA:A8:48:EB:42:C5:6E:75:B2:FE:1E:32:D1:D4:AB:38:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7675FAA848EB42C56E75B2FE1E32D1D4AB38FE0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D9F450E2457ADEBBA7719D1D0C150BADF0770418A79E9DD9241F78930633D1B/0/3138362e36352e3130322e302f32342d3234203d3e20323637373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:b8:68:f5:8d:58:7f:52:b9:7c:77:a1:c7:fc:d4:b2:c3:
         5a:ae:1f:50:f5:2f:7f:46:24:5d:ea:ab:52:01:25:17:f2:3b:
         35:79:a1:9a:d3:64:0b:e3:f7:f0:9b:16:aa:47:e4:cb:97:41:
         ab:d1:1f:b3:36:be:b7:81:9f:28:3b:1e:2e:9a:26:8a:c2:c7:
         87:b2:f3:dc:4a:02:0a:ea:8e:d9:cf:87:dc:4d:14:db:49:0c:
         3b:a3:01:38:3f:a2:32:3a:0d:11:95:c2:91:73:d8:bf:b9:7c:
         e3:b6:fe:00:ab:df:2b:82:de:bb:aa:e1:e1:fe:ee:bc:14:db:
         e3:2f:3a:55:07:8d:0e:c9:d2:3e:88:97:be:b1:76:58:0c:62:
         01:2a:a5:f3:51:ff:1e:16:7e:b3:e4:bc:76:e5:91:5e:3a:c6:
         16:e7:8d:d3:3d:6e:9c:5c:bc:48:0b:03:ab:86:6b:ed:b3:b2:
         44:d4:6f:50:f9:e5:a9:b4:c3:8b:69:17:fd:37:3c:d4:ce:fc:
         4b:57:60:cb:8a:4a:af:20:29:0d:7e:c0:f9:62:20:00:91:1d:
         47:28:47:26:28:90:7b:dd:75:7c:e8:91:06:06:e5:94:67:67:
         a2:9b:54:08:12:a0:78:6c:05:d5:d1:7e:4a:aa:43:85:d6:90:
         3e:3d:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:32 2026 by rpki-client