Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa
File:                     AS263786.roa (raw, json)
Hash identifier:          ux60sZGIRH+ha8IWc2uVFem+t6FarICoZGjdzvXx1ug=
Subject key identifier:   6C:E5:5A:4C:61:3C:57:2B:C1:67:7B:82:F7:F2:AA:54:B6:1B:62:94
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       46C5A7AFAB6B4CDC6F0ED41156D7C25A856FE63D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa
Signing time:             Tue 04 Feb 2025 18:13:40 +0000
ROA not before:           Tue 04 Feb 2025 18:08:40 +0000
ROA not after:            Tue 03 Feb 2026 18:13:40 +0000
asID:                     263786
IP address blocks:        186.38.60.0/24 maxlen: 24
                          186.38.61.0/24 maxlen: 24
                          201.251.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:a7:af:ab:6b:4c:dc:6f:0e:d4:11:56:d7:c2:5a:85:6f:e6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:40 2025 GMT
            Not After : Feb  3 18:13:40 2026 GMT
        Subject: CN=6CE55A4C613C572BC1677B82F7F2AA54B61B6294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:13:45:26:1f:38:43:68:0d:e0:02:5b:bf:
                    70:4b:ab:e5:87:22:0f:6a:0f:84:bb:47:08:bf:2e:
                    9b:f7:c5:31:cb:86:4b:c7:a3:66:ab:74:fe:ea:64:
                    0d:d8:08:e8:32:b1:ce:75:eb:38:14:dd:d1:65:9a:
                    39:6c:3c:a4:3b:f3:8d:0a:22:38:83:01:c6:64:28:
                    d2:a5:c8:18:b9:8e:96:a0:99:eb:6a:a6:d2:2e:cf:
                    d0:3a:07:a5:68:3e:57:66:9b:0c:d5:4b:4a:23:f1:
                    e8:53:6c:5c:af:63:fd:0b:ce:c0:7e:4c:b3:49:45:
                    65:28:10:07:9d:9f:f8:5b:d4:88:93:b1:0b:35:63:
                    c6:77:02:48:86:b1:c9:ee:fb:7f:85:44:ae:91:fe:
                    c6:f1:92:56:85:d2:88:6d:75:3f:c9:18:ce:73:4f:
                    2b:bb:cf:d2:66:de:11:3c:0f:35:b8:2d:89:84:26:
                    1e:bd:69:df:7b:2e:c4:f3:95:74:9a:d3:ef:23:1f:
                    aa:81:be:b0:f9:47:4f:02:72:1a:30:35:2b:a6:ab:
                    d2:30:f5:66:21:d4:17:fc:4f:08:cc:36:d3:ea:d9:
                    2c:60:7c:09:ab:5a:83:3f:dc:f0:c6:e8:2c:6b:a1:
                    af:37:77:5b:37:1a:50:d2:f7:ae:f5:da:3b:f2:08:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:5A:4C:61:3C:57:2B:C1:67:7B:82:F7:F2:AA:54:B6:1B:62:94
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.60.0/23
                  201.251.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:7e:43:24:c5:27:49:03:e6:f3:de:9a:f8:5f:4f:ef:59:ce:
         65:0e:e2:54:87:b9:4a:b0:ea:77:25:9c:77:e8:50:3e:8b:9d:
         34:c4:50:fb:9a:af:ba:37:a5:42:d9:b3:61:93:03:13:ff:0e:
         d4:58:df:22:eb:64:1a:fa:ef:ef:45:d5:58:9b:7a:e7:2d:68:
         28:e1:b0:e2:83:59:9d:6f:25:db:e9:00:be:b3:d4:4c:3a:03:
         42:41:5e:b7:ec:85:75:17:56:76:29:47:52:c8:fb:80:98:32:
         86:f3:a9:f9:ad:41:8c:95:ca:45:74:c9:9d:11:a7:a3:ae:35:
         f6:ff:16:75:ae:e4:9e:22:68:5c:6b:c9:f8:10:d5:c0:0f:0c:
         87:30:fd:d1:9d:ad:f3:01:c3:98:3a:ab:a1:de:4c:eb:91:0b:
         a0:a1:76:38:fc:a1:81:0c:42:d9:48:19:f7:8a:52:b8:2f:97:
         c1:95:8e:05:89:81:08:3a:e9:be:ac:cd:eb:40:4e:89:1a:57:
         2f:8c:ed:9a:39:6c:da:14:4e:06:e3:5b:3d:e6:13:b1:24:ae:
         ab:d1:72:32:3c:e7:ee:75:2d:92:c4:58:11:89:b6:38:fe:f2:
         bd:47:05:9b:f4:4e:08:8c:31:4b:10:b9:e5:3a:2a:eb:ee:33:
         5d:95:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:03 2025 by rpki-client