Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa
File:                     3138362e39362e36342e302f32302d3234203d3e203238303037.roa (raw, json)
Hash identifier:          AZL0anFULQLZ+jKKQomdHIKIXwLvSh5AyZHSPEiDFYI=
Subject key identifier:   ED:E8:B9:A1:05:51:26:03:A5:F6:48:D1:60:66:7D:E4:9F:9D:68:C3
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       378DE83A79B41EBAC70F7274E57AFFAE5318B524
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa
Signing time:             Tue 04 Feb 2025 18:38:20 +0000
ROA not before:           Tue 04 Feb 2025 18:33:20 +0000
ROA not after:            Tue 03 Feb 2026 18:38:20 +0000
asID:                     28007
IP address blocks:        186.96.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:e8:3a:79:b4:1e:ba:c7:0f:72:74:e5:7a:ff:ae:53:18:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:20 2025 GMT
            Not After : Feb  3 18:38:20 2026 GMT
        Subject: CN=EDE8B9A105512603A5F648D160667DE49F9D68C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:9a:7f:34:65:26:42:7d:56:a4:56:f0:84:
                    aa:d2:9b:e7:5a:8f:41:f1:7a:c7:f4:82:91:e5:69:
                    e4:96:a1:a9:b4:60:3f:ab:bb:66:02:f5:d9:d6:ac:
                    76:08:d9:a8:5c:79:79:08:96:34:cc:8c:bd:3e:c3:
                    00:ad:4c:ba:6b:0f:50:76:11:de:83:2d:cc:59:85:
                    3b:03:36:63:21:6b:42:16:ae:ce:ba:82:e4:9f:ac:
                    f3:41:c3:b2:d6:d4:53:85:10:94:ef:71:04:bd:fc:
                    fc:a7:90:77:f8:4d:b6:b0:dd:f9:8c:de:3c:0f:ee:
                    6f:d5:db:83:d1:26:d6:79:7b:0d:4b:96:a5:4e:d6:
                    0c:15:75:91:f9:c4:7f:ab:78:8b:ee:46:40:df:97:
                    25:b6:f8:8a:01:05:b4:20:f9:42:fe:2d:65:0d:ad:
                    45:b7:9b:88:02:29:b1:1d:1e:fa:48:7c:ea:ce:f4:
                    db:9d:a2:57:f6:0e:ff:be:c6:21:b1:65:eb:ee:54:
                    fa:be:dd:b5:b4:9c:8b:14:90:d4:7d:9b:52:37:bf:
                    94:27:b0:7d:db:2e:b2:f3:44:87:0c:73:2d:31:18:
                    77:5e:ab:bd:95:1f:a0:04:98:78:47:96:d1:d1:b1:
                    3d:fd:3e:15:f3:65:aa:ed:49:26:4c:2a:3b:c8:62:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:B9:A1:05:51:26:03:A5:F6:48:D1:60:66:7D:E4:9F:9D:68:C3
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:93:96:47:5e:f4:60:a3:78:8a:6e:b8:e2:cf:6e:fd:00:
         58:99:0a:67:12:35:36:ca:41:1d:9d:4e:47:39:d1:c4:ee:61:
         f4:18:db:f9:0e:06:4c:04:77:4d:2a:20:33:66:17:59:04:21:
         dc:a6:c4:d8:bf:f0:ec:d0:f8:de:0c:f4:bc:b7:47:7b:0a:53:
         fe:f4:79:37:55:d3:91:e7:74:af:f5:17:d0:72:c2:57:d4:4d:
         6d:63:cd:c7:b0:4e:5c:40:0d:2f:9f:28:b6:52:42:e2:07:a7:
         e4:8f:9b:1f:76:6d:2b:52:87:45:61:6b:a8:ae:5d:2c:55:46:
         b8:ca:f1:fb:d9:d3:be:2e:37:f2:e2:6f:66:19:3d:0d:4b:8f:
         61:e7:15:64:dc:69:81:5c:47:22:b9:43:fc:71:34:6f:92:5a:
         ae:7d:fc:e7:85:7c:b6:d2:b1:8a:de:9e:1b:44:cb:a3:ce:51:
         1a:9e:d6:e7:78:f6:71:36:e5:bc:0c:33:d7:e7:12:52:22:b2:
         6c:c2:f8:3b:e2:01:66:1c:26:59:01:7e:43:b1:fd:a6:da:f5:
         42:4a:7e:c5:4a:77:cc:20:3b:eb:c6:60:02:ee:a2:98:a1:4f:
         6b:ef:04:d5:bb:aa:9a:49:9b:4a:e3:61:16:39:31:20:b1:9f:
         6c:72:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client