Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f32332d3234203d3e20323636383734.roa
File:                     3138362e352e3139322e302f32332d3234203d3e20323636383734.roa (raw, json)
Hash identifier:          ROsz3Z3tWtUJs3u1U65JIfpguw1K+jnlc+SnN3guHE4=
Subject key identifier:   25:F5:AD:4B:C1:87:2E:25:D7:D3:34:6A:E1:A4:1E:47:9B:64:AD:87
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       2F9B5B87D1D7131A511DF3E7C906DF8E8E7E512F
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f32332d3234203d3e20323636383734.roa
Signing time:             Sat 07 Dec 2024 16:25:00 +0000
ROA not before:           Sat 07 Dec 2024 16:20:00 +0000
ROA not after:            Sat 06 Dec 2025 16:25:00 +0000
asID:                     266874
IP address blocks:        186.5.192.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:5b:87:d1:d7:13:1a:51:1d:f3:e7:c9:06:df:8e:8e:7e:51:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec  7 16:20:00 2024 GMT
            Not After : Dec  6 16:25:00 2025 GMT
        Subject: CN=25F5AD4BC1872E25D7D3346AE1A41E479B64AD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:8b:25:f8:7c:15:5b:ef:a3:e9:4d:39:c9:
                    1a:0b:a7:8e:0e:1e:7c:1f:21:d2:f7:7d:27:e6:52:
                    19:24:6a:ad:57:94:9a:2f:93:20:9e:0d:e1:d8:e7:
                    e8:dd:e5:48:5b:9c:e5:af:a5:c0:be:a1:7a:5f:2b:
                    e6:1f:b5:0b:d1:90:24:ce:29:5c:0a:4a:53:03:ea:
                    82:66:70:93:e9:d8:78:cd:21:86:78:a0:27:5a:ea:
                    cf:44:aa:40:bc:f2:6a:d7:04:8d:44:f3:c8:a5:73:
                    29:f3:99:83:99:aa:fd:6f:97:e5:fe:3f:02:e6:8f:
                    48:34:94:b1:6b:b9:09:52:fd:6b:93:93:a1:cf:d4:
                    49:3c:34:2d:aa:31:fb:cd:ba:36:a4:ab:fb:0b:3f:
                    b9:77:0d:df:a1:9b:b0:8d:11:9f:66:2a:cc:25:17:
                    df:25:3e:1c:17:85:00:9d:10:7b:fb:d0:5a:18:fc:
                    e7:0b:18:b4:dc:d3:86:59:f2:32:bc:6a:27:a9:37:
                    f5:a2:28:40:35:ff:bf:09:a8:64:66:4a:7f:f7:13:
                    d2:a1:71:47:a2:7f:ca:c3:cc:05:d9:af:50:42:8f:
                    d2:db:c7:27:86:5a:e1:42:04:02:65:2b:a7:a3:92:
                    3d:22:87:ca:9d:51:eb:7a:c6:6d:e1:c9:5f:bc:bf:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F5:AD:4B:C1:87:2E:25:D7:D3:34:6A:E1:A4:1E:47:9B:64:AD:87
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f32332d3234203d3e20323636383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:d4:15:6b:5d:d1:9f:1e:42:bd:b8:ef:a3:06:0b:d0:32:28:
         e4:50:2b:17:e9:63:bd:e0:e5:2f:93:fa:71:eb:bd:23:b8:b4:
         5e:35:9a:28:d4:f7:0d:bf:a7:ca:90:b1:bb:7b:35:f0:f8:b6:
         6b:ad:bf:0c:79:b4:d8:83:1f:8a:3a:4b:fd:bb:8f:9c:59:bb:
         79:e5:c2:50:7f:d6:22:c1:9e:85:93:3f:85:4b:9a:e4:25:44:
         f3:07:2d:aa:4f:a6:66:67:49:95:ac:d3:af:40:00:13:81:ce:
         08:f4:dd:e5:e6:09:02:23:ca:91:19:df:fa:c4:11:47:5d:02:
         96:46:e2:2c:b2:4e:04:a5:02:1c:ce:8b:1f:c3:a9:60:c6:3b:
         2b:b2:d5:4e:5f:29:a4:fd:90:a1:8d:a9:d1:4f:54:c7:cb:30:
         ef:b7:bd:54:0b:de:77:ff:61:65:aa:dc:f8:f1:9e:92:66:40:
         b2:b3:17:fd:ea:83:4f:fe:b8:5e:12:e8:40:ca:9f:df:a3:fe:
         7a:83:83:21:fe:87:c2:01:47:de:3a:68:e4:39:b6:f7:52:b3:
         f7:1a:31:4b:2d:4b:aa:a5:6a:53:ec:c9:df:13:6a:c5:b5:18:
         21:ef:d6:d3:41:75:c2:06:4e:b0:0d:19:c2:ee:db:38:4e:39:
         0b:40:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:11 2025 by rpki-client