Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32342d3234203d3e20323639393739.roa
File:                     3138372e302e34302e302f32342d3234203d3e20323639393739.roa (raw, json)
Hash identifier:          CJdZHdSkyPf5nXcD31/71hYdXpbuHCKJqInDyJVCoCM=
Subject key identifier:   5B:BD:58:67:AA:03:B1:91:91:3D:DB:D5:3C:B9:96:D5:D4:BD:5C:EB
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       2CB4DE93A38441995A242B14D45F4C9D56EB3F58
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32342d3234203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:01 +0000
ROA not before:           Tue 07 Jan 2025 14:40:01 +0000
ROA not after:            Tue 06 Jan 2026 14:45:01 +0000
asID:                     269979
IP address blocks:        187.0.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b4:de:93:a3:84:41:99:5a:24:2b:14:d4:5f:4c:9d:56:eb:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:01 2025 GMT
            Not After : Jan  6 14:45:01 2026 GMT
        Subject: CN=5BBD5867AA03B191913DDBD53CB996D5D4BD5CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:10:ef:43:2d:a9:1c:75:e8:28:cf:b9:e9:
                    0d:65:e0:f5:7a:30:f7:bc:6c:7d:e6:69:a2:50:7d:
                    e9:33:7c:e5:86:59:cc:f1:81:ed:1d:ef:3d:9e:e9:
                    25:e8:82:63:32:3d:3a:04:be:a4:1e:77:62:a6:83:
                    7b:4d:d6:e6:10:87:d1:a7:ea:25:34:c9:fd:f6:26:
                    40:e3:96:4b:ed:14:6e:6a:05:88:a7:52:45:64:37:
                    2c:ac:35:cf:e3:3a:5a:f2:f8:3c:71:63:8e:cd:10:
                    66:24:ae:72:37:a0:bc:34:ae:b4:e8:96:23:d9:60:
                    c7:b8:e6:b2:83:3d:54:41:c1:64:2f:e9:97:fc:e9:
                    5d:2e:5b:23:17:7f:e1:bf:e1:ab:7f:40:a8:a7:ff:
                    ef:40:ea:37:b2:1b:be:9b:7a:61:e6:ec:02:15:f7:
                    ac:3c:ba:d8:ad:3b:ad:37:c0:8c:20:89:ce:74:4e:
                    aa:12:48:a9:81:3f:56:e0:84:58:59:97:0a:7e:af:
                    ed:77:b8:98:74:7c:ea:e9:be:cb:c1:b6:8e:9c:05:
                    27:8c:f8:34:f2:30:98:d9:c0:44:9d:92:5e:91:a8:
                    23:0b:b2:e5:f1:0a:ec:2c:32:97:de:3d:06:96:1b:
                    e5:02:86:ed:32:80:67:75:0e:a3:8f:24:9e:14:80:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:58:67:AA:03:B1:91:91:3D:DB:D5:3C:B9:96:D5:D4:BD:5C:EB
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32342d3234203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:dd:65:ed:a7:4a:b4:c4:7b:97:83:59:b0:d8:14:71:6c:
         05:86:9f:19:24:ed:bf:3e:45:f2:eb:76:db:2c:ee:14:c4:d1:
         2c:4d:23:aa:22:24:9a:b9:cd:29:de:c3:0b:25:c4:59:c5:35:
         fa:05:72:b1:bf:34:b0:84:0a:22:a5:28:1a:81:59:ae:45:ff:
         02:c0:10:13:bc:94:5f:e3:70:c3:69:85:4c:c2:65:0d:13:32:
         7e:37:6f:07:27:e8:15:7b:50:9c:8b:31:e7:13:28:8f:7c:4d:
         ae:04:8c:81:38:ae:a2:4d:63:15:29:f9:6b:93:c0:98:ab:95:
         67:e0:59:c4:45:b5:22:a8:d7:c5:b9:67:ac:52:f5:a1:eb:41:
         73:8f:25:70:6e:3a:f7:bc:53:9a:5d:45:44:d6:b0:ff:19:4d:
         73:8a:e7:64:85:37:eb:34:8c:0d:02:00:99:08:20:7e:b2:45:
         c5:4b:f4:a4:2b:98:33:a6:c6:a9:2e:50:30:6a:92:a4:83:1a:
         06:5b:7f:6c:12:26:b5:38:e2:59:d9:90:c9:db:20:e9:d6:c5:
         14:12:30:b6:a0:25:fe:30:33:d1:8f:a0:be:ec:b3:f5:8a:6f:
         47:db:e4:c7:b7:1d:dd:e7:ec:cc:00:5b:7e:09:08:32:e4:ae:
         78:8c:31:0d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULLTek6OEQZlaJCsU1F9MnVbrP1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNkE2MzgyQjYwOUFFQTdGNDEyREJGQTYzNEZBM0U3
NzVEMzMzRjAeFw0yNTAxMDcxNDQwMDFaFw0yNjAxMDYxNDQ1MDFaMDMxMTAvBgNV
BAMTKDVCQkQ1ODY3QUEwM0IxOTE5MTNEREJENTNDQjk5NkQ1RDRCRDVDRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qRDvQy2pHHXoKM+56Q1l4PV6
MPe8bH3maaJQfekzfOWGWczxge0d7z2e6SXogmMyPToEvqQed2Kmg3tN1uYQh9Gn
6iU0yf32JkDjlkvtFG5qBYinUkVkNyysNc/jOlry+DxxY47NEGYkrnI3oLw0rrTo
liPZYMe45rKDPVRBwWQv6Zf86V0uWyMXf+G/4at/QKin/+9A6jeyG76bemHm7AIV
96w8utitO603wIwgic50TqoSSKmBP1bghFhZlwp+r+13uJh0fOrpvsvBto6cBSeM
+DTyMJjZwESdkl6RqCMLsuXxCuwsMpfePQaWG+UChu0ygGd1DqOPJJ4UgGlxAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUW71YZ6oDsZGRPdvVPLmW1dS9XOswHwYDVR0j
BBgwFoAUeDamOCtgmup/QS2/pjT6PnddMz8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REExN0QwNjY2NjZFODhGMzZGMUYxRTQxOTFBQTNCQTA5
MDI2RTgxQTYzMzI5MzMzMjVFNkJFRDUxOUNCODUwLzAvNzgzNkE2MzgyQjYwOUFF
QTdGNDEyREJGQTYzNEZBM0U3NzVEMzMzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODM2QTYzODJCNjA5QUVBN0Y0
MTJEQkZBNjM0RkEzRTc3NUQzMzNGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRBMTdEMDY2NjY2RTg4RjM2RjFGMUU0MTkxQUEzQkEwOTAyNkU4MUE2
MzMyOTMzMzI1RTZCRUQ1MTlDQjg1MC8wLzMxMzgzNzJlMzAyZTM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC7ACgwDQYJ
KoZIhvcNAQELBQADggEBAIHl3WXtp0q0xHuXg1mw2BRxbAWGnxkk7b8+RfLrdtss
7hTE0SxNI6oiJJq5zSnewwslxFnFNfoFcrG/NLCECiKlKBqBWa5F/wLAEBO8lF/j
cMNphUzCZQ0TMn43bwcn6BV7UJyLMecTKI98Ta4EjIE4rqJNYxUp+WuTwJirlWfg
WcRFtSKo18W5Z6xS9aHrQXOPJXBuOve8U5pdRUTWsP8ZTXOK52SFN+s0jA0CAJkI
IH6yRcVL9KQrmDOmxqkuUDBqkqSDGgZbf2wSJrU44lnZkMnbIOnWxRQSMLagJf4w
M9GPoL7ss/WKb0fb5Me3Hd3n7MwAW34JCDLkrniMMQ0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:02 2025 by rpki-client