Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632323036.roa
File:                     3138362e33322e3139322e302f31392d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          axV/77fryxiUaH6npkQ+e9CQDz+qkL/yBz2emgrLskM=
Subject key identifier:   80:A8:60:2E:42:15:58:A5:54:52:E2:89:DD:CA:A7:26:3A:4E:1D:B1
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       60068571B807087678D631C9714C0466B8FCFF62
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:14:22 +0000
ROA not before:           Tue 04 Feb 2025 18:09:22 +0000
ROA not after:            Tue 03 Feb 2026 18:14:22 +0000
asID:                     262206
IP address blocks:        186.32.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:06:85:71:b8:07:08:76:78:d6:31:c9:71:4c:04:66:b8:fc:ff:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:22 2025 GMT
            Not After : Feb  3 18:14:22 2026 GMT
        Subject: CN=80A8602E421558A55452E289DDCAA7263A4E1DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:1e:5e:09:54:69:58:0d:bd:c7:7c:ab:52:
                    61:d5:c4:54:6b:06:18:96:5a:cd:fa:95:1e:52:67:
                    42:90:f5:b8:ed:f8:39:2f:86:b4:79:eb:46:29:54:
                    92:81:d7:10:5a:8f:ab:bb:8c:91:4c:2c:62:18:ad:
                    0d:3a:9e:6b:ec:30:a3:ff:93:23:2d:16:78:8a:b8:
                    dc:e3:a6:05:a4:3f:fb:46:64:00:3c:60:7a:86:4a:
                    73:d5:13:96:08:40:51:fd:d7:6a:1b:81:32:9b:86:
                    04:86:6c:9a:e0:65:d1:f8:00:ab:bf:48:02:97:3b:
                    e8:81:de:00:63:ec:0a:91:38:bb:84:26:1d:10:01:
                    8c:45:e8:1a:c7:5a:cc:f3:81:9b:07:49:dc:f9:6f:
                    ec:42:67:07:1b:86:76:78:7d:5e:a5:57:91:40:03:
                    9d:b4:05:46:5d:67:96:fe:ca:29:ba:bb:41:aa:a7:
                    94:23:2b:97:17:24:08:f9:17:fb:42:4f:a5:9b:4d:
                    82:41:c0:dc:f0:d2:24:40:40:2d:11:31:c8:5d:11:
                    a5:4b:9d:4b:12:9a:d1:93:25:fc:09:3d:d4:7d:8d:
                    a4:0d:34:c4:92:af:e9:86:bc:60:79:10:25:8e:10:
                    a1:0c:d9:89:d7:f6:ac:fe:eb:2b:43:ca:77:ba:38:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A8:60:2E:42:15:58:A5:54:52:E2:89:DD:CA:A7:26:3A:4E:1D:B1
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         be:08:e3:f3:3b:9f:5c:b1:68:b7:20:62:94:61:93:ff:6c:44:
         99:40:59:ff:0c:81:b6:f2:e8:8b:16:40:66:61:50:37:3a:a9:
         d0:46:17:e7:2d:b8:94:9f:fd:07:a5:84:45:21:be:a7:87:c8:
         d5:ae:e0:4c:c1:65:6d:ed:53:e0:a0:ee:70:77:1a:b5:23:3f:
         2b:ae:a6:06:cd:4e:18:e7:0a:ab:63:e8:bf:58:ad:a1:f3:3f:
         13:a3:e4:c8:13:76:c4:4c:57:53:82:79:c3:26:44:df:21:57:
         12:50:39:67:28:85:69:26:cd:1f:8f:08:ad:0d:af:43:41:61:
         17:97:95:50:c1:aa:c2:73:63:9f:e1:ba:00:d5:70:c1:a9:2b:
         f4:16:da:e8:2a:5e:0c:e7:19:47:88:02:31:b0:bf:11:d5:90:
         74:76:6c:9f:7c:56:99:00:16:a7:e3:5e:05:e8:a7:88:2f:51:
         55:da:5f:5b:46:60:8d:f2:b8:21:16:ec:d6:56:40:d2:06:85:
         c5:78:07:26:9c:40:e2:11:70:88:f8:2b:12:76:f2:bb:60:97:
         01:fc:d9:af:95:a6:b9:44:61:2d:12:88:a6:5f:41:25:50:68:
         29:82:92:d7:27:be:25:55:84:6c:4f:a8:57:3b:e4:1f:ff:5b:
         e1:ad:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:58 2025 by rpki-client