Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3136312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          H6MlB4Ce7hY2v44gNzHThYf48wZ//q+ePb8TmMvqGzw=
Subject key identifier:   87:81:9A:C5:0A:F7:41:1A:B1:8E:E3:AC:9C:3C:B2:F3:7D:8E:D3:52
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       58F279776D4D4C91E080BB4F51B78CC78DC99888
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136312e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:57 +0000
ROA not before:           Tue 04 Feb 2025 19:58:57 +0000
ROA not after:            Tue 03 Feb 2026 20:03:57 +0000
asID:                     22927
IP address blocks:        186.141.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f2:79:77:6d:4d:4c:91:e0:80:bb:4f:51:b7:8c:c7:8d:c9:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:57 2025 GMT
            Not After : Feb  3 20:03:57 2026 GMT
        Subject: CN=87819AC50AF7411AB18EE3AC9C3CB2F37D8ED352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:03:4b:76:66:88:1e:2a:67:24:c8:32:aa:
                    9d:07:de:64:74:01:d0:db:c9:5d:5b:83:db:2f:d6:
                    49:1d:3b:5d:e8:a3:7f:05:96:f4:e7:0f:12:a7:b8:
                    c0:d3:8d:67:db:19:58:74:01:91:0d:f5:94:d3:65:
                    04:21:84:78:7e:d8:ab:c7:fd:e4:c6:eb:35:3a:b8:
                    20:f3:2c:e3:93:7b:c4:3c:f6:50:e6:e4:2c:9b:0a:
                    a7:bc:73:31:8b:74:97:2f:76:33:92:e2:f6:c8:80:
                    4d:e5:83:52:00:ec:89:42:48:ff:6c:2b:8c:31:0e:
                    e4:75:f1:58:13:c6:ba:bb:f7:e2:62:dd:b5:60:f4:
                    c5:cc:01:c7:a7:9a:7a:41:40:a2:ed:c2:d3:e8:6c:
                    65:66:b0:46:0c:26:69:5c:00:15:32:cf:5b:a7:f0:
                    3e:ee:f3:69:23:7e:e8:af:40:9f:99:f0:3f:8b:43:
                    a6:df:73:47:da:c3:34:53:44:7e:e0:60:46:0f:0d:
                    30:55:05:19:87:49:88:40:78:53:a8:a4:d2:8d:1b:
                    5a:62:f3:41:7c:93:a1:42:e2:e3:1e:de:9a:88:06:
                    2e:09:e0:a6:0e:50:93:43:0f:62:aa:70:5d:66:25:
                    21:b6:6c:8a:07:ed:72:af:3d:fb:10:7e:95:c4:fc:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:9A:C5:0A:F7:41:1A:B1:8E:E3:AC:9C:3C:B2:F3:7D:8E:D3:52
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:a4:52:dd:45:5f:34:c1:a0:36:e9:17:cd:ac:00:dd:3a:
         fc:fe:96:ac:6d:56:78:d6:eb:b5:87:1a:f8:2a:d1:45:bb:26:
         62:de:af:6d:ad:43:2e:52:ca:e0:da:e4:79:e1:d9:9d:72:60:
         fe:2c:6a:35:bd:1e:a8:33:51:1d:c7:9e:c9:d1:e1:50:5b:78:
         8d:9d:9a:7f:59:5f:5e:e5:9c:41:0c:a9:fa:fe:85:f7:14:26:
         9d:85:89:d6:4d:74:3a:bb:c9:53:e3:c6:12:f8:de:44:6d:08:
         6f:c6:5f:ce:e6:aa:7f:a2:14:49:dd:6d:07:20:53:22:ee:78:
         d2:0f:24:cf:de:2e:b2:5c:4b:9d:44:40:ef:ac:69:a5:55:2b:
         ee:7f:9e:67:a3:78:73:ba:bf:40:cd:35:69:50:68:ff:32:0a:
         9a:c3:f0:a3:c8:f5:53:a8:2a:9b:ea:17:28:6f:6e:6b:b8:e8:
         b4:81:01:9d:25:ae:e7:cd:f3:1a:03:0c:c8:12:d7:34:b7:1d:
         13:48:84:e3:76:de:6c:82:9f:61:a1:6d:ef:d1:ff:ad:a6:b6:
         42:93:7c:41:20:88:9e:bd:d4:4e:65:4d:c1:41:b9:ec:bc:03:
         dc:6d:f4:16:f0:ac:0f:31:8f:e1:e5:a7:75:c9:a2:1c:2d:90:
         45:a7:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:50 2025 by rpki-client