Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203133343839.roa
File:                     3138362e3135392e302e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          2v5dYiIId4lB29e+VCqI3IogNppnKziCiAN6IyOEowg=
Subject key identifier:   88:50:1B:02:3B:88:B9:A4:25:1D:5C:D5:19:FD:04:2A:60:E5:17:9D
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       17C7624CA8FAB088CD578B06FF083125D6CAE0B1
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203133343839.roa
Signing time:             Thu 09 Jan 2025 20:05:00 +0000
ROA not before:           Thu 09 Jan 2025 20:00:00 +0000
ROA not after:            Thu 08 Jan 2026 20:05:00 +0000
asID:                     13489
IP address blocks:        186.159.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c7:62:4c:a8:fa:b0:88:cd:57:8b:06:ff:08:31:25:d6:ca:e0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  9 20:00:00 2025 GMT
            Not After : Jan  8 20:05:00 2026 GMT
        Subject: CN=88501B023B88B9A4251D5CD519FD042A60E5179D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:d1:24:d7:ad:fe:d3:c1:4b:bb:b7:31:6e:
                    3f:2a:a5:9e:a0:ec:56:59:a2:99:b5:38:da:9d:24:
                    49:8b:ea:a9:a1:e8:5c:21:44:b4:65:e3:00:a6:e2:
                    8e:3e:b9:5b:21:e4:40:f7:02:b6:b1:8b:7e:08:d5:
                    fd:74:67:24:b3:c3:eb:94:b5:52:a4:3a:59:36:47:
                    df:18:f0:f8:9e:e3:2e:0e:9f:b6:7e:28:ae:bb:18:
                    9c:13:72:02:fb:0b:63:28:f3:cf:65:a6:ed:af:f0:
                    86:e9:1d:43:97:48:82:d4:67:5b:c6:b6:de:d2:0b:
                    5d:28:ea:19:fd:e7:92:49:1b:fb:c9:7f:d3:7e:64:
                    eb:b0:04:ac:17:e2:3e:7b:eb:69:17:0a:26:bf:07:
                    03:70:84:f5:25:39:03:3f:d5:73:5c:b6:b4:96:99:
                    16:cd:f9:04:a2:f8:8b:25:69:cb:76:89:a2:fb:53:
                    c1:14:0d:53:82:81:32:77:28:0e:f1:18:c5:39:5b:
                    d7:73:63:39:64:a7:51:48:b5:f1:e7:49:5d:01:d4:
                    68:cd:8e:5f:bc:0c:43:aa:44:39:93:a3:cb:dd:eb:
                    f3:bb:43:e1:86:ae:12:b8:09:14:95:6e:f1:ae:86:
                    6f:39:87:04:00:ca:c5:36:79:cd:95:72:00:49:20:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:50:1B:02:3B:88:B9:A4:25:1D:5C:D5:19:FD:04:2A:60:E5:17:9D
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:02:ec:c0:79:bf:07:78:1b:2d:b7:32:48:c3:b3:80:78:
         25:84:63:ab:c5:8e:26:12:7a:34:af:99:76:7b:d3:71:52:ec:
         ad:ad:be:4c:81:f3:7c:25:df:e1:68:e4:4e:5b:d7:d9:42:44:
         2e:13:00:46:3d:71:b8:ce:b0:5d:2e:8d:3a:1f:e6:eb:c0:15:
         cf:bf:a5:15:37:c3:cc:55:a8:46:6f:fc:5e:60:96:58:1f:9c:
         a2:9e:be:61:00:56:37:7e:9c:af:3d:b4:16:a1:b0:c3:c6:6c:
         15:b9:8c:3d:43:5b:b0:10:b0:9f:80:c7:bc:58:da:92:ad:c7:
         80:08:ab:bd:21:91:bc:18:a5:71:90:f2:97:04:a6:80:3d:33:
         e2:41:17:1b:b5:57:a1:a9:2f:a1:53:46:53:cf:2f:11:6a:bc:
         89:55:c6:85:b1:f1:02:ac:f8:19:f6:33:e0:13:e8:34:89:58:
         aa:85:50:ff:bd:04:0e:94:d0:98:6e:1e:53:4c:be:68:85:8b:
         b5:ad:8e:01:1b:37:5d:82:cd:3c:71:c9:d5:b5:5c:08:3f:b3:
         f6:0d:f4:84:6f:01:ba:79:ff:7c:9b:25:11:41:95:5b:42:78:
         3c:9f:a1:c8:71:46:c8:f1:f3:bd:a2:f2:64:fc:e5:6a:55:cf:
         71:00:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:03 2025 by rpki-client