Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632313937.roa
File:                     3138362e342e302e302f31382d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          E1LYaDoAi49hqOICD9+5XnfQ0+DOHPGbkZ+Ph8GfcF8=
Subject key identifier:   B3:FC:A8:E2:4D:8C:B4:00:0E:6C:2D:CC:5C:7F:61:AF:10:16:CF:68
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       39CDB7764E24258E5CE08AC96122B30422A2AE77
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632313937.roa
Signing time:             Tue 04 Feb 2025 18:14:27 +0000
ROA not before:           Tue 04 Feb 2025 18:09:27 +0000
ROA not after:            Tue 03 Feb 2026 18:14:27 +0000
asID:                     262197
IP address blocks:        186.4.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:b7:76:4e:24:25:8e:5c:e0:8a:c9:61:22:b3:04:22:a2:ae:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:27 2025 GMT
            Not After : Feb  3 18:14:27 2026 GMT
        Subject: CN=B3FCA8E24D8CB4000E6C2DCC5C7F61AF1016CF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:09:f7:55:78:df:57:04:39:dd:43:34:dc:
                    9b:4d:f1:c7:75:21:87:ae:dd:47:49:39:b2:30:86:
                    72:a0:bb:29:66:4a:15:ab:44:26:c2:d5:05:84:c7:
                    88:18:1f:fb:97:89:f3:42:87:a9:5b:a3:3f:30:8c:
                    09:6b:41:dc:a8:28:4c:08:55:9e:63:0f:13:45:c9:
                    06:9c:c8:b4:a3:05:ec:ee:fd:d4:7b:1f:0e:f9:5c:
                    a3:38:12:cb:0c:99:1c:06:2a:2b:79:5d:8a:72:f8:
                    b1:ef:24:d0:3f:1a:27:26:1f:b7:4c:c9:5d:8a:2e:
                    c3:44:be:0b:b5:84:bb:57:95:d7:76:a9:16:7b:29:
                    b6:8b:04:34:de:54:23:8e:e8:5d:8d:a9:ab:e2:3d:
                    57:d9:f7:ee:8a:1b:88:d5:23:cb:71:0a:b3:1d:2a:
                    5e:92:2c:be:4d:d4:47:03:46:31:c2:5b:d8:cb:2a:
                    0e:f3:df:87:5d:14:cc:47:55:b0:75:b0:e5:c5:58:
                    0d:19:4b:98:43:37:36:bd:bc:ee:dd:1e:42:2c:27:
                    32:b6:cb:c4:59:4b:90:db:20:3b:28:c8:b4:66:4c:
                    8f:b1:b7:93:1d:eb:88:86:6f:ea:a9:fd:b6:0f:f2:
                    4f:7c:b0:c1:56:a3:07:7b:c8:b6:05:61:fb:15:05:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FC:A8:E2:4D:8C:B4:00:0E:6C:2D:CC:5C:7F:61:AF:10:16:CF:68
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:79:60:70:d3:fa:49:da:82:cb:43:f6:50:82:ce:47:da:
         34:e5:43:a0:d1:a8:95:10:be:4e:dc:65:82:21:3b:4b:7b:44:
         bf:6b:56:9e:74:e2:1a:1a:89:dc:32:61:c4:b2:a3:6f:32:46:
         7a:e0:a1:87:02:db:40:91:ac:69:e8:76:0a:b2:94:45:a7:3e:
         16:1c:0b:b4:1a:d0:4e:82:07:6d:d9:d2:65:dd:8c:5c:13:59:
         5d:d5:fd:d9:f7:d8:02:78:23:ac:59:1e:0f:4b:78:b8:fe:3e:
         c8:c3:fb:a2:54:65:d8:46:64:00:8e:18:80:38:c5:b0:6d:a6:
         ee:92:39:77:83:cb:81:3a:6b:1c:57:34:2d:2a:78:d8:09:e2:
         e1:06:84:ca:e2:76:6c:2b:0a:15:7a:df:54:b3:dc:33:ca:b8:
         fe:07:dd:71:89:40:60:3a:14:ab:d9:58:7c:0c:9d:aa:3c:c4:
         a1:3a:da:4c:77:d1:29:41:40:66:8a:ab:02:5b:cd:89:64:44:
         62:7e:2a:ba:27:d7:4e:e5:99:5e:7a:5c:00:48:95:6f:5b:2a:
         5e:0b:21:5e:07:fc:c0:83:0f:69:ad:99:6a:c4:02:ea:90:d1:
         06:3a:85:eb:55:82:16:bf:72:24:45:9a:e9:c7:d7:00:f1:78:
         c6:62:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:07 2025 by rpki-client