Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa
File:                     3138362e352e3231312e302f32342d3234203d3e20323733313634.roa (raw, json)
Hash identifier:          hLvD/2TAcO6l+wPjSenm+pa5ZTnOqZccDTQJzrjURKU=
Subject key identifier:   4A:97:F6:75:81:A3:65:35:73:F5:8E:89:B7:34:59:5D:91:8F:9B:54
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       5FA200F68D076193D540C98967C68E484C09A170
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa
Signing time:             Sat 21 Dec 2024 05:30:00 +0000
ROA not before:           Sat 21 Dec 2024 05:25:00 +0000
ROA not after:            Sat 20 Dec 2025 05:30:00 +0000
asID:                     273164
IP address blocks:        186.5.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a2:00:f6:8d:07:61:93:d5:40:c9:89:67:c6:8e:48:4c:09:a1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec 21 05:25:00 2024 GMT
            Not After : Dec 20 05:30:00 2025 GMT
        Subject: CN=4A97F67581A3653573F58E89B734595D918F9B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:15:1b:5f:5f:0c:3c:df:62:d7:3e:26:f1:
                    44:2a:31:e2:66:9b:d4:63:a1:d3:08:45:37:46:d0:
                    f8:73:fc:43:f7:3f:bb:d7:b8:05:eb:1d:72:12:37:
                    91:cc:2a:5d:41:01:36:4e:ce:2c:c7:fc:4c:47:ca:
                    d7:91:cd:2b:e5:df:47:d5:5b:fd:81:af:c3:ba:79:
                    8b:a6:d2:fa:e3:e5:60:a0:ed:36:9c:32:00:50:ab:
                    6d:db:33:34:ab:a4:84:3f:70:e1:fd:21:17:40:92:
                    d6:a4:30:f7:f7:b9:6d:4f:c2:36:35:8d:93:42:96:
                    2c:77:9e:e1:26:27:50:84:4f:81:19:64:7d:4f:94:
                    f4:cf:35:d7:25:f0:01:60:f0:a0:53:02:ef:13:e4:
                    9c:92:80:d0:97:2e:4d:2d:44:d5:fc:c7:b3:24:66:
                    c9:4e:7d:30:25:b2:ff:0a:80:4c:da:53:7b:91:98:
                    43:92:c9:0a:08:27:e2:df:d5:c9:c4:c3:a8:ce:55:
                    ea:45:13:fa:33:8c:d1:3e:62:27:cb:4c:2f:a0:0f:
                    c0:2f:71:65:30:b5:69:c1:44:fe:ce:fd:05:58:ae:
                    7b:df:38:2d:7c:d8:31:85:40:cf:8f:04:dd:c3:02:
                    86:a0:d0:e1:a7:48:73:e4:c3:2d:28:73:9c:7c:b0:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:F6:75:81:A3:65:35:73:F5:8E:89:B7:34:59:5D:91:8F:9B:54
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:64:96:ed:b2:2d:81:0c:e2:8c:1e:38:7a:2d:5a:a0:bb:
         fe:24:3b:66:44:82:9a:c2:88:7c:57:40:85:c2:e4:70:55:6b:
         a6:96:f7:98:96:e8:02:7c:86:01:5c:b6:50:ea:8c:c5:bd:5e:
         9f:ff:c2:2c:00:9a:f3:fb:d2:f4:1d:30:27:f4:a7:a4:3d:58:
         86:c1:e1:7c:86:4d:6e:45:23:8e:5e:fb:92:29:df:74:dd:70:
         65:1f:14:f8:0c:ea:e4:79:29:99:af:52:90:82:55:22:81:28:
         30:9d:ff:33:3d:c5:77:d2:12:b2:dc:44:15:ba:54:d0:4a:58:
         fe:cc:90:11:15:e4:37:e0:ce:1e:49:4e:f9:2a:34:e7:59:1d:
         f0:43:0c:e9:50:04:d0:96:dc:7e:d6:d9:b9:93:9e:ed:f7:06:
         0f:a0:cc:92:2a:1a:e4:ea:e8:b5:06:3d:42:79:1a:6a:81:88:
         02:e1:c9:22:26:9e:3f:c0:af:e3:5e:8b:0a:04:73:13:da:26:
         1d:90:91:5f:00:1b:ef:88:c4:27:cf:bb:77:f9:00:72:67:2a:
         8b:0b:cd:f7:90:3c:33:c7:44:a1:a6:4b:f4:19:45:2a:3a:48:
         79:87:55:8b:3d:f0:26:d5:6e:20:48:ae:b0:13:17:d3:2a:fe:
         5c:da:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:11 2025 by rpki-client