Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
File:                     AS270022.roa (raw, json)
Hash identifier:          TsUhJvYlBEd0aQU5O0viB6I6Kme6ZIGRoKtHRq5+2lc=
Subject key identifier:   D1:BA:BA:7F:77:12:CA:34:D1:BB:A9:AF:52:8B:FD:D5:D5:D6:52:B2
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6E2A6368904CDE1F8D4FB43ED512ACB17E184EB3
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
Signing time:             Tue 04 Feb 2025 18:13:45 +0000
ROA not before:           Tue 04 Feb 2025 18:08:45 +0000
ROA not after:            Tue 03 Feb 2026 18:13:45 +0000
asID:                     270022
IP address blocks:        186.38.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2a:63:68:90:4c:de:1f:8d:4f:b4:3e:d5:12:ac:b1:7e:18:4e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:45 2025 GMT
            Not After : Feb  3 18:13:45 2026 GMT
        Subject: CN=D1BABA7F7712CA34D1BBA9AF528BFDD5D5D652B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:92:aa:1c:21:2b:1f:35:0e:30:0f:6b:a4:
                    b3:f7:b0:7f:67:9e:72:19:49:57:72:3a:03:c6:e8:
                    1e:42:57:9c:a9:77:c8:3d:da:f4:f5:be:57:30:9c:
                    89:98:e1:8c:aa:51:bf:f4:5d:d2:f9:39:fc:78:09:
                    78:a1:a2:97:40:fd:ab:72:29:96:de:ae:96:8e:c0:
                    45:39:70:98:e0:f8:20:51:90:b6:10:17:03:0e:46:
                    1d:e4:72:45:39:94:e7:5a:d4:9e:af:53:f5:11:bf:
                    43:3a:25:50:4f:78:da:26:d6:ca:86:69:97:33:cc:
                    f1:40:46:fc:f0:c2:7a:e4:50:66:92:6e:6a:e3:e7:
                    64:9e:d5:b7:41:cc:ba:f4:bf:ba:15:a3:30:7e:a9:
                    54:ed:3d:e2:41:72:87:c6:79:94:5e:d7:54:d0:72:
                    6e:c7:d8:67:e9:2c:56:58:fe:f2:88:ec:1a:6e:82:
                    9b:86:a8:a5:91:10:59:02:1c:97:8b:e0:d2:7f:f5:
                    df:f4:5d:35:51:fc:85:ef:5b:1d:6f:0d:25:42:3f:
                    a8:c4:7e:ce:06:8c:59:2f:c7:1a:9f:06:18:09:ab:
                    e6:6a:9e:ef:a8:60:9b:8b:96:d3:f5:45:9a:98:4c:
                    b0:c2:55:41:ba:10:fa:eb:e3:a7:a5:b5:45:15:c4:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:BA:7F:77:12:CA:34:D1:BB:A9:AF:52:8B:FD:D5:D5:D6:52:B2
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:08:33:22:b0:b7:f8:f0:b8:f9:7a:c4:2a:86:9f:05:03:
         32:e0:1d:57:31:d4:5c:99:be:43:d3:ad:60:cb:df:49:1f:47:
         13:ff:0b:9c:ef:92:db:46:03:09:41:a8:48:37:74:ed:eb:8b:
         cc:67:de:6d:33:49:7c:a1:4e:35:f9:bf:f5:0e:28:13:dc:fd:
         de:30:86:f2:51:f4:41:ad:c0:b6:eb:f4:87:87:00:fa:76:f1:
         5a:5c:63:99:53:f5:17:df:e0:c8:5b:44:2f:84:75:d5:19:a9:
         0d:f7:3c:30:03:7a:ed:27:be:59:3a:90:97:3d:07:7c:bc:fd:
         2c:f8:30:a7:40:2d:ed:11:c5:b9:44:58:4e:75:37:1e:a4:99:
         f4:a4:ab:19:3a:49:4f:79:b2:44:9f:d0:34:8f:a5:aa:10:55:
         a3:b4:22:61:41:bf:1b:41:01:56:cf:bf:dc:c3:df:08:1f:5f:
         04:f5:64:36:80:35:c1:de:09:21:67:f5:e5:34:25:ed:7a:d2:
         0f:23:96:ea:47:c1:7d:4c:cf:82:a1:5b:85:24:c0:22:e8:33:
         2b:61:6d:dc:02:de:a0:ed:05:83:11:e8:9d:6e:99:2a:b3:53:
         d1:c8:b7:cc:57:ff:c8:0c:00:7c:a5:4a:bd:26:8f:5a:f9:54:
         43:72:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:01 2025 by rpki-client