Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139372e302f32342d3234203d3e20323732383033.roa
File:                     3138362e352e3139372e302f32342d3234203d3e20323732383033.roa (raw, json)
Hash identifier:          bnM317CL7RGUDCsNtXY5upKwM5P6zrPLM5d6/1MrAcY=
Subject key identifier:   29:94:01:DB:0E:03:EC:0B:7A:C0:73:2D:DB:3E:5D:B9:59:9A:7C:36
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       7C047BF5FF26D8959388F983C98D0EFB2A927673
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139372e302f32342d3234203d3e20323732383033.roa
Signing time:             Fri 13 Dec 2024 17:40:00 +0000
ROA not before:           Fri 13 Dec 2024 17:35:00 +0000
ROA not after:            Fri 12 Dec 2025 17:40:00 +0000
asID:                     272803
IP address blocks:        186.5.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:04:7b:f5:ff:26:d8:95:93:88:f9:83:c9:8d:0e:fb:2a:92:76:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec 13 17:35:00 2024 GMT
            Not After : Dec 12 17:40:00 2025 GMT
        Subject: CN=299401DB0E03EC0B7AC0732DDB3E5DB9599A7C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:11:a0:68:dc:8e:d0:26:09:94:24:ce:87:30:
                    98:dd:27:25:73:ea:c3:d3:ae:b9:2a:22:e3:9b:4d:
                    58:2b:35:71:79:85:80:bd:b3:5d:4e:99:ac:08:76:
                    72:94:e1:6f:be:43:76:72:8f:17:23:85:3a:11:0b:
                    26:fe:6b:91:19:e0:2a:7c:f0:06:25:e1:63:d3:e7:
                    c0:5c:e3:59:02:28:eb:25:71:fe:4f:81:75:8e:42:
                    5e:ad:44:7a:8b:d3:c0:7c:80:3f:95:12:ac:9e:7e:
                    32:42:b4:01:06:09:26:f1:aa:10:c0:b3:d9:e0:99:
                    a1:90:48:81:a9:e8:bb:28:45:0f:8c:d3:e5:56:4b:
                    5e:01:06:fc:ce:c8:a8:66:02:c7:6e:d7:ea:0c:f0:
                    1b:9f:00:07:db:be:19:f5:08:fa:be:15:3f:e6:15:
                    29:9f:d0:92:db:60:cc:3b:66:b8:fe:33:66:f5:b6:
                    53:51:57:d5:df:b9:e4:03:d4:6d:a2:3e:b5:78:74:
                    e3:c4:8c:a3:79:63:03:44:d1:a5:42:de:c1:6f:f3:
                    89:9b:fc:aa:d1:20:ff:95:ec:23:9a:03:4c:0f:89:
                    43:8a:03:94:9c:4e:94:06:2a:a9:2a:d4:c3:a4:ef:
                    ed:47:28:d7:e4:19:a2:49:13:4a:6c:3e:7f:01:04:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:01:DB:0E:03:EC:0B:7A:C0:73:2D:DB:3E:5D:B9:59:9A:7C:36
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139372e302f32342d3234203d3e20323732383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:94:e6:73:53:f5:7e:d6:f3:a5:2b:ac:26:53:d4:3e:e8:c2:
         9c:99:fa:06:ad:5c:06:70:5a:01:1d:2b:be:df:40:79:d8:ea:
         48:6e:ce:da:d7:03:2c:7a:1e:11:5f:d3:8a:6c:9f:49:1d:d7:
         12:e9:a3:4e:cf:bf:45:7a:18:3a:d8:28:91:74:c1:7b:49:fd:
         e1:05:26:9d:f4:fd:8b:cb:51:5a:54:28:8d:93:16:0b:92:b5:
         67:6b:10:d0:00:78:8b:85:c3:2d:0e:51:62:4a:3e:0d:28:ce:
         bd:fe:4b:ae:fb:3b:f8:c5:8a:b6:56:82:99:d9:33:34:5e:e7:
         6b:9d:bb:65:de:f5:88:5d:90:10:5c:50:4b:9c:49:46:5a:95:
         77:da:e6:b4:57:37:b6:9c:a5:73:af:9e:d6:86:67:a8:c0:04:
         27:c4:1d:54:04:3f:0a:54:9e:ca:16:1d:fe:8e:d0:c8:c8:85:
         a9:99:65:82:11:82:12:b0:84:1d:9a:ce:70:e0:0d:cc:18:84:
         c3:90:5f:90:8e:27:b5:03:08:87:4a:3b:9a:2d:6d:1a:8a:56:
         11:08:a4:b6:c6:fd:ed:af:e6:4d:1a:b2:11:ad:39:d3:f5:e8:
         b6:eb:52:50:dc:ba:a0:54:12:dc:ef:86:d0:60:8e:39:64:34:
         79:fe:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:11 2025 by rpki-client