Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa
File:                     3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          1s0hS3AGn6xn/fvJMbGEY5uRH7RcEEHhCEJ/z0p1Vj8=
Subject key identifier:   26:2B:6F:5F:CF:3F:75:AC:39:FE:7F:B6:BA:80:B4:0C:AF:D4:4E:0A
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       325B60727F9BE0FD8C0E37B62A4D94633DF46566
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 04 Feb 2025 18:49:17 +0000
ROA not before:           Tue 04 Feb 2025 18:44:17 +0000
ROA not after:            Tue 03 Feb 2026 18:49:17 +0000
asID:                     269750
IP address blocks:        138.186.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5b:60:72:7f:9b:e0:fd:8c:0e:37:b6:2a:4d:94:63:3d:f4:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Feb  4 18:44:17 2025 GMT
            Not After : Feb  3 18:49:17 2026 GMT
        Subject: CN=262B6F5FCF3F75AC39FE7FB6BA80B40CAFD44E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:f6:fa:b4:35:7c:0f:59:5a:ab:87:b4:c1:
                    16:b3:2b:f3:57:e7:23:72:6b:02:a1:c6:9e:a2:26:
                    13:20:0c:5c:7a:6c:96:c6:ef:d8:4a:c4:ea:59:20:
                    48:1a:d1:ed:33:eb:54:31:80:dd:26:11:31:b7:83:
                    95:72:51:03:1f:77:3e:54:f5:10:e5:00:7a:7c:20:
                    81:94:e9:4f:b8:fc:ec:01:8c:c0:99:93:f1:d0:18:
                    d3:3f:ab:37:a1:cd:61:c0:59:8f:86:88:96:e6:d6:
                    3f:b6:20:63:4a:0a:37:de:67:de:9f:02:b6:2b:fb:
                    0e:60:58:13:9b:75:06:1e:bc:3b:69:c9:f1:40:0e:
                    e4:ec:75:a2:cf:6f:24:ba:ea:5a:2f:c5:9d:bf:d4:
                    a3:8d:f0:ec:72:4a:04:5b:03:cf:ae:7a:2d:98:e9:
                    6a:14:94:5a:f8:64:6a:58:53:b1:a9:10:ba:03:ca:
                    3e:ba:ad:11:71:6d:52:e2:a1:23:54:b0:15:65:df:
                    43:5b:c7:14:4f:f5:e1:52:5d:df:45:12:c1:ea:86:
                    30:8a:56:05:71:32:ed:59:cc:f5:10:65:9c:6d:fd:
                    f9:38:96:d0:cc:3a:b3:0b:75:7b:54:eb:ac:73:64:
                    3b:81:c9:7a:b6:cd:ed:a9:55:66:d7:cb:ed:1c:dc:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:6F:5F:CF:3F:75:AC:39:FE:7F:B6:BA:80:B4:0C:AF:D4:4E:0A
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:d0:a6:76:6c:fd:0a:28:26:c8:cb:bd:6c:7e:92:7a:6e:
         ad:90:90:da:56:72:b9:e4:cd:50:3d:23:f3:c9:1f:25:a4:02:
         da:7d:08:3c:7a:89:4a:2b:77:49:2c:89:24:95:13:e5:88:26:
         6c:73:ba:0d:9b:80:4c:a1:b2:be:28:16:67:c9:4f:39:82:61:
         bf:ae:57:db:ca:c3:ef:d1:b4:45:00:6e:43:b8:f1:98:c0:d2:
         19:d8:ec:a7:3b:79:f9:e3:96:08:55:2b:9b:b3:a5:e0:84:e8:
         c7:77:ff:a8:95:f2:b1:43:c3:82:5c:6a:63:00:43:98:bf:29:
         36:8b:c7:2b:b7:fc:4c:a0:7c:70:69:27:f5:1a:32:1d:10:ab:
         e7:49:1e:c0:0b:95:6d:cc:9e:66:60:51:93:9c:82:2e:88:0a:
         d5:34:ac:0d:c9:55:2e:4d:2f:30:c3:8b:5c:57:15:5f:5a:7b:
         8a:96:79:9b:46:80:aa:fb:7b:12:38:bf:81:ab:84:5f:75:1e:
         35:d0:07:19:76:d0:fa:ce:bf:6a:1b:ad:85:d6:60:b7:86:fe:
         49:6f:29:67:ef:fe:93:50:e9:17:0b:d5:fb:dd:33:37:36:90:
         4c:98:aa:81:aa:d6:7d:37:85:69:10:69:c0:e3:d2:62:0d:9d:
         db:8d:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:35 2025 by rpki-client