Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203232393237.roa
File:                     3138362e3134302e302e302f31342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          VLUt4sIaYtX/FywA4bFMMdWszg/K6UZL+uU+bt06JXI=
Subject key identifier:   57:2E:D1:D1:9A:9A:92:BE:DF:CF:07:DF:EF:52:67:1C:D9:22:08:D1
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5CE9F7330D767C11AC3422A159D66CC242484ACD
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203232393237.roa
Signing time:             Tue 07 Jan 2025 17:35:01 +0000
ROA not before:           Tue 07 Jan 2025 17:30:01 +0000
ROA not after:            Tue 06 Jan 2026 17:35:01 +0000
asID:                     22927
IP address blocks:        186.140.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e9:f7:33:0d:76:7c:11:ac:34:22:a1:59:d6:6c:c2:42:48:4a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  7 17:30:01 2025 GMT
            Not After : Jan  6 17:35:01 2026 GMT
        Subject: CN=572ED1D19A9A92BEDFCF07DFEF52671CD92208D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:3c:26:3f:45:1d:f4:58:6c:3e:04:f1:8e:
                    f2:16:ed:41:fc:85:16:08:24:a6:a3:51:24:f2:54:
                    77:36:07:d3:85:88:ac:13:d9:fa:34:34:27:79:15:
                    11:a2:fb:4b:a7:ca:46:aa:aa:19:9e:d1:29:d0:c2:
                    ef:46:a8:5c:74:66:e5:bb:81:64:24:96:e4:80:f5:
                    8d:2c:0b:ed:04:53:fd:c3:3a:7f:3d:49:1f:b4:62:
                    2a:d6:59:36:6f:71:02:9a:0b:ac:e1:15:4d:2a:23:
                    6a:61:d9:84:40:b2:0d:a3:db:c6:ec:22:b7:61:fa:
                    60:0e:44:79:23:6b:5c:00:55:02:73:39:a5:d0:ef:
                    c4:c5:7d:4b:49:5d:a3:4d:14:73:43:89:51:d5:de:
                    fa:20:14:c8:60:eb:19:38:5a:39:2f:b1:41:17:25:
                    77:94:1c:2f:64:11:bb:ee:c7:f5:21:90:3f:e9:04:
                    1d:28:43:9c:34:be:f1:03:36:50:45:f9:2b:2a:ef:
                    3c:7c:c6:18:20:82:10:d6:7b:e4:93:02:fc:b8:3d:
                    32:2e:c9:7b:16:f1:2e:91:0b:d6:89:45:24:b8:f1:
                    e6:a0:0f:da:15:23:8b:ef:e4:fa:af:6f:53:fb:96:
                    af:2c:9c:c5:27:71:bc:a2:7d:d9:dc:27:fc:d7:3f:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:D1:D1:9A:9A:92:BE:DF:CF:07:DF:EF:52:67:1C:D9:22:08:D1
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:cb:53:ba:1e:01:af:eb:37:65:aa:b2:7c:1a:80:30:68:
         c6:96:b1:92:e2:86:bc:34:dd:12:6d:29:92:fa:61:51:4b:c6:
         ae:9d:4d:3b:e0:63:6d:de:47:49:08:ee:6f:1e:2f:d8:7e:56:
         4c:6d:d9:c4:86:43:1b:fe:09:de:76:4e:7a:a8:8b:c4:fb:8b:
         51:b0:e9:a7:15:3e:10:25:6c:bb:76:7f:04:79:37:3a:c9:25:
         f3:d2:26:df:e4:33:05:4a:e9:5f:0d:f1:5d:ab:c2:a9:26:8f:
         e0:bc:65:de:4a:04:13:9e:6f:2d:5a:ac:5f:c9:17:49:a7:39:
         d2:b8:c5:76:10:b6:10:0d:cc:70:cb:50:53:24:58:87:6a:7e:
         f3:8c:e8:dd:82:e7:33:3d:34:ee:e6:d2:a1:7b:ab:3c:48:bc:
         c8:7c:f9:3f:9d:9c:2a:5c:ed:4e:a1:20:36:c5:d5:2a:ad:0a:
         e4:70:48:9c:12:68:9f:93:1e:3b:78:01:be:d0:16:41:32:d6:
         2a:75:44:2f:5b:72:47:70:a7:e8:65:68:7b:b8:f5:f3:11:e8:
         8b:a6:1a:ce:e1:18:6b:bb:8e:f6:18:e1:a6:db:46:6f:df:72:
         97:4b:3b:f7:97:26:dc:8c:05:4d:0f:8f:bd:8f:04:ee:fd:9f:
         99:1c:a7:44
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXOn3Mw12fBGsNCKhWdZswkJISs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNTAxMDcxNzMwMDFaFw0yNjAxMDYxNzM1MDFaMDMxMTAvBgNV
BAMTKDU3MkVEMUQxOUE5QTkyQkVERkNGMDdERkVGNTI2NzFDRDkyMjA4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+zwmP0Ud9FhsPgTxjvIW7UH8
hRYIJKajUSTyVHc2B9OFiKwT2fo0NCd5FRGi+0unykaqqhme0SnQwu9GqFx0ZuW7
gWQkluSA9Y0sC+0EU/3DOn89SR+0YirWWTZvcQKaC6zhFU0qI2ph2YRAsg2j28bs
Irdh+mAORHkja1wAVQJzOaXQ78TFfUtJXaNNFHNDiVHV3vogFMhg6xk4WjkvsUEX
JXeUHC9kEbvux/UhkD/pBB0oQ5w0vvEDNlBF+Ssq7zx8xhggghDWe+STAvy4PTIu
yXsW8S6RC9aJRSS48eagD9oVI4vv5Pqvb1P7lq8snMUncbyifdncJ/zXP/ChAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUVy7R0Zqakr7fzwff71JnHNkiCNEwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMwMmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzIzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK6jDANBgkq
hkiG9w0BAQsFAAOCAQEAHoLLU7oeAa/rN2WqsnwagDBoxpaxkuKGvDTdEm0pkvph
UUvGrp1NO+Bjbd5HSQjubx4v2H5WTG3ZxIZDG/4J3nZOeqiLxPuLUbDppxU+ECVs
u3Z/BHk3Oskl89Im3+QzBUrpXw3xXavCqSaP4Lxl3koEE55vLVqsX8kXSac50rjF
dhC2EA3McMtQUyRYh2p+84zo3YLnMz007ubSoXurPEi8yHz5P52cKlztTqEgNsXV
Kq0K5HBInBJon5MeO3gBvtAWQTLWKnVEL1tyR3Cn6GVoe7j18xHoi6YazuEYa7uO
9hjhpttGb99yl0s795cm3IwFTQ+PvY8E7v2fmRynRA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:32 2025 by rpki-client