Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138362e3138392e36342e302f32322d3234203d3e203238303735.roa
File:                     3138362e3138392e36342e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier:          LyT/qKfw8pcJ8jT8+wmrtdkJZ+WuobG2xQ6Mbf1JxR0=
Subject key identifier:   D3:8A:6D:0A:FA:BA:2B:5E:6C:D6:72:1E:C6:BA:22:A1:A2:7F:6B:24
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       1B46B8F0FECB296DBBCEA9CD451486AB3ADA006F
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138362e3138392e36342e302f32322d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:05 +0000
ROA not before:           Tue 04 Feb 2025 19:54:05 +0000
ROA not after:            Tue 03 Feb 2026 19:59:05 +0000
asID:                     28075
IP address blocks:        186.189.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:46:b8:f0:fe:cb:29:6d:bb:ce:a9:cd:45:14:86:ab:3a:da:00:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:05 2025 GMT
            Not After : Feb  3 19:59:05 2026 GMT
        Subject: CN=D38A6D0AFABA2B5E6CD6721EC6BA22A1A27F6B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:bf:16:24:ad:75:d1:e3:7f:85:f0:dd:2a:
                    b9:20:03:64:0d:6f:ce:5f:f0:b8:eb:20:60:4e:1c:
                    be:73:4d:9b:a2:f2:cb:6b:1b:82:8f:59:53:c9:de:
                    a2:2a:5e:dd:e5:c7:b8:22:89:fe:d2:b3:a1:6b:43:
                    28:8e:df:29:a8:ea:c7:f3:77:ee:dd:0f:23:56:65:
                    98:f1:e2:f0:27:24:6b:73:8d:e2:00:79:0d:4f:e8:
                    20:64:29:4d:0f:bd:2e:2a:76:cb:10:6c:6d:63:85:
                    5e:b7:e9:13:be:32:81:7e:cb:d3:ed:93:7a:08:c2:
                    75:bf:47:cf:32:50:6d:30:c0:b5:c8:f4:74:bd:76:
                    29:66:4d:80:a7:c9:6e:60:eb:f1:7e:f2:5e:0e:ce:
                    c9:b6:a6:b9:ab:42:e4:6a:3f:b0:a0:b8:83:d8:83:
                    5e:35:7c:a7:8b:82:7e:cb:de:ba:b0:b0:02:43:da:
                    5b:08:2a:52:be:63:f8:0f:4c:22:7b:a8:47:05:3f:
                    0b:f8:b9:50:5c:d1:65:b0:9e:d1:45:8e:dc:54:a5:
                    ec:d6:2e:40:d6:39:b2:a0:95:1d:ce:60:3a:f9:41:
                    72:53:fb:59:d5:41:26:0b:b7:f3:6e:6c:04:df:62:
                    40:4b:5e:12:1e:fa:cc:9b:0c:b0:14:15:c0:77:94:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8A:6D:0A:FA:BA:2B:5E:6C:D6:72:1E:C6:BA:22:A1:A2:7F:6B:24
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138362e3138392e36342e302f32322d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:a7:04:90:c3:58:f3:7e:01:e9:d9:5a:70:3d:d8:22:e9:
         8c:ce:b3:55:f9:21:6d:cc:53:58:52:9e:9e:cf:63:d9:5c:b5:
         6b:f1:f2:a1:09:a7:a3:62:aa:9d:fb:51:9a:0d:6d:ef:62:0c:
         90:fc:fc:17:15:d6:ed:d5:00:9a:08:6f:61:4f:86:e9:4f:9b:
         5f:6e:57:6f:47:96:c3:92:30:9f:41:b8:c7:b1:a0:98:ba:1e:
         ae:4c:26:ad:53:81:34:8d:cc:e9:62:ac:ae:f9:a7:de:34:d8:
         84:e3:41:f6:01:57:03:d8:ec:7f:33:6c:4c:32:c5:c2:43:30:
         11:cf:98:6b:a7:c9:94:c1:cb:99:57:63:d0:f1:84:7c:1c:da:
         61:ff:61:aa:3c:14:e0:df:0e:5d:cf:c5:30:89:43:a4:e1:46:
         2f:8b:eb:8b:14:65:15:58:e7:c8:d8:1d:43:71:15:c1:a8:a1:
         29:fa:e8:08:bc:b5:da:ba:b5:68:7e:f5:c8:35:84:2d:16:39:
         30:05:f8:c5:8c:0e:37:d1:70:4b:08:42:5d:8c:69:33:17:71:
         a8:72:4e:73:28:1f:c6:ff:86:c6:50:e6:1f:37:5c:ee:b6:e1:
         05:7b:b0:1a:d1:fe:10:31:d0:25:3a:46:1d:6a:86:9f:d8:30:
         a4:b3:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client