Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
File:                     3138362e33322e302e302f31382d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          fh6cSJV8jWVe0IB+UXtsAQaW2y3RKcvgcUQpCZ9gsnA=
Subject key identifier:   0A:42:1C:2D:5B:13:77:D5:71:E7:1E:E9:93:3B:D1:DA:52:D2:7C:56
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       58223673085506475290425175F7325A342E5AE6
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
Signing time:             Tue 04 Feb 2025 18:14:29 +0000
ROA not before:           Tue 04 Feb 2025 18:09:29 +0000
ROA not after:            Tue 03 Feb 2026 18:14:29 +0000
asID:                     262197
IP address blocks:        186.32.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:22:36:73:08:55:06:47:52:90:42:51:75:f7:32:5a:34:2e:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:29 2025 GMT
            Not After : Feb  3 18:14:29 2026 GMT
        Subject: CN=0A421C2D5B1377D571E71EE9933BD1DA52D27C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:82:e0:44:59:0f:34:f0:05:48:f7:9c:7a:
                    50:65:7b:26:84:b2:7e:e2:b6:eb:88:d6:f9:85:6b:
                    f4:db:60:19:34:f4:c5:c5:91:7f:2e:f7:3d:85:cd:
                    cb:59:5a:a5:6e:8c:12:c1:a3:d7:7c:c4:c5:0c:5e:
                    67:3a:5e:a0:80:9f:49:b8:cd:4a:7c:bb:05:c8:a6:
                    a3:a0:0d:a2:f7:43:e7:bb:61:c1:49:d0:df:a1:6f:
                    0c:12:4a:21:28:99:ee:01:09:04:1b:28:e2:2e:eb:
                    59:51:5c:95:95:28:5d:bf:ad:f7:5a:94:17:80:23:
                    d3:fe:6e:bb:39:ef:a0:9a:54:a3:17:19:68:12:5e:
                    5d:1e:45:79:38:17:18:6e:dc:b5:75:a5:81:c7:8c:
                    d5:8b:b8:dd:25:e4:64:48:de:f9:3f:e5:e9:e2:a1:
                    e9:62:ff:5d:e4:5e:c8:07:00:68:f4:cc:e3:f1:f0:
                    92:de:53:c3:b9:9b:b4:79:76:f9:00:55:20:78:39:
                    07:03:80:24:0c:17:f9:01:d0:0a:f7:8c:91:bf:ab:
                    87:22:77:87:50:4c:13:5b:23:ba:07:8e:a3:80:78:
                    48:07:69:23:6b:50:e5:cc:9f:b0:85:5e:88:0c:9a:
                    1c:88:a4:52:94:4a:35:de:c1:11:b6:f5:ba:d7:30:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:1C:2D:5B:13:77:D5:71:E7:1E:E9:93:3B:D1:DA:52:D2:7C:56
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:69:60:71:50:41:b2:b6:bf:d4:63:db:60:96:33:66:60:
         8a:ce:9f:87:1c:3d:01:22:06:e4:78:4b:b7:40:ad:dc:14:5b:
         cc:a5:84:e2:a1:33:23:7d:ed:d8:e0:f5:07:07:eb:0d:09:48:
         16:ae:85:63:9f:22:89:9c:44:4a:c7:68:65:53:e1:e3:8e:c0:
         c4:f4:ca:1b:f5:b7:f0:68:97:ed:6c:00:df:d3:f8:de:b3:7f:
         6f:1e:66:f2:46:12:b7:0c:3d:ac:09:0f:ab:01:6e:ce:25:39:
         5c:40:d8:5d:f1:c2:4f:c8:b2:23:bc:25:1d:8d:4e:cd:8f:72:
         81:11:ea:87:bb:72:79:7d:91:fc:03:12:90:6b:9c:35:31:f2:
         50:07:1f:07:4e:1a:c9:75:c4:d4:78:71:ab:e5:2a:8e:99:f7:
         7a:3b:69:1b:89:d6:d9:65:6c:20:f0:7a:4b:95:69:3c:75:b2:
         b0:14:e0:51:fa:a6:fb:37:f1:20:ae:b4:0b:ef:d4:98:76:5d:
         eb:91:e5:0c:56:cd:6c:50:5b:7a:c1:f6:e9:64:b3:4c:49:18:
         3c:13:e9:c8:88:23:af:85:6a:c9:b4:3f:ac:56:45:60:e7:c1:
         1c:0f:be:31:34:c4:60:89:17:db:10:fb:c1:29:28:fe:74:0b:
         75:ec:f0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:39 2025 by rpki-client