Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632323036.roa
File:                     3138362e342e302e302f31382d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          4ZIRMIqTmym8GpGYvHTU8xaqrPWnorLnm79Q/bfKbZk=
Subject key identifier:   4D:B1:69:5E:06:BC:2A:5F:F8:5C:86:EA:B2:A3:F9:A3:9D:E6:5E:13
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3B3315825B5FC3F9C864063681863BBEBE820932
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:14:24 +0000
ROA not before:           Tue 04 Feb 2025 18:09:24 +0000
ROA not after:            Tue 03 Feb 2026 18:14:24 +0000
asID:                     262206
IP address blocks:        186.4.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:15:82:5b:5f:c3:f9:c8:64:06:36:81:86:3b:be:be:82:09:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:24 2025 GMT
            Not After : Feb  3 18:14:24 2026 GMT
        Subject: CN=4DB1695E06BC2A5FF85C86EAB2A3F9A39DE65E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:98:3d:97:dd:eb:a0:9b:e4:d3:4b:0e:9a:
                    b2:1a:45:ee:dd:65:28:a4:33:c5:dd:19:96:96:89:
                    2f:74:12:51:04:d8:87:1d:97:be:be:c0:87:31:ee:
                    71:50:af:14:99:c2:7a:87:80:ad:d8:eb:0e:78:81:
                    10:44:1a:8c:3a:05:f2:ab:97:54:e8:e8:24:82:e5:
                    39:1e:38:2b:b6:e8:f9:00:8a:99:ed:82:26:c8:35:
                    26:42:3d:23:7c:1e:bb:c9:a8:26:a9:7f:49:a2:47:
                    d6:b9:bb:35:cf:fd:e9:5f:16:d4:f3:79:b2:5a:76:
                    bb:5c:57:0b:5f:e7:48:29:2f:65:b7:d1:e4:1e:c6:
                    a1:7c:d9:6c:7e:5b:66:70:4d:d4:bc:eb:2f:7b:99:
                    04:a7:1b:16:51:83:20:c9:fe:5f:e6:b1:f0:c2:3c:
                    b4:79:bb:01:b0:18:62:65:33:82:88:0a:92:e0:ce:
                    e1:ca:a7:33:40:ad:a9:c7:2c:6c:97:85:6a:a3:ad:
                    9b:39:a5:d9:01:bc:dc:59:40:ff:bf:40:b3:78:f9:
                    47:e5:39:ee:8c:04:82:17:e7:6d:b2:34:c2:6a:dc:
                    35:db:f9:71:46:71:57:f1:49:af:d8:95:5b:4c:ce:
                    cb:48:b7:7c:4c:c6:e1:a4:24:57:12:66:29:43:9f:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:69:5E:06:BC:2A:5F:F8:5C:86:EA:B2:A3:F9:A3:9D:E6:5E:13
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:87:3d:34:4b:dd:c8:3f:83:f9:c9:93:9c:86:46:3f:f1:
         42:99:38:4b:74:93:ac:0b:73:c2:e2:ba:b6:a8:f8:42:0e:6f:
         7e:8c:13:ed:28:7d:08:a0:79:55:37:7a:09:ed:4a:64:2d:6d:
         58:97:c4:d1:58:ce:a4:c4:9d:f7:a7:d9:25:42:7b:6c:29:26:
         50:6c:16:fb:f7:aa:64:1c:55:63:d1:3a:95:55:71:0d:db:3e:
         cd:00:be:a6:d9:77:5b:32:0f:84:d3:4d:61:34:61:f1:73:a1:
         0e:4b:19:f3:16:b3:64:8a:52:f4:dc:87:f3:71:ea:0b:1c:aa:
         6b:4e:be:30:f9:05:de:aa:08:d4:a5:01:c7:76:f9:65:66:a7:
         38:ff:0b:2e:cd:ae:01:56:bf:f6:f5:59:cb:a8:74:7f:94:c2:
         44:5d:ea:0d:2b:4a:10:be:9d:dc:9e:5e:5b:a9:37:fb:67:1a:
         8d:7c:63:16:b7:e1:86:89:ed:57:29:34:8c:e9:b0:a5:37:11:
         4d:52:7e:9a:9a:42:27:f9:15:c3:db:67:4d:65:bb:34:a9:78:
         45:1a:85:14:13:40:d7:bd:7c:97:59:d2:f2:e9:be:4f:36:32:
         ba:e3:2b:e4:02:1b:23:56:f2:30:66:6a:27:6e:a2:c7:1a:f1:
         5d:eb:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:31 2025 by rpki-client