Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136322e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3136322e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          /jJCWPalWt5Rc0PljFxe4l7DOsN6AFgUJSKN5RB7Ri4=
Subject key identifier:   AC:9E:A3:C1:1E:67:0F:32:81:71:E9:59:79:CD:E2:63:14:A3:C1:32
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       2CB4EB804CFF63BD6CACA0EECA5632D81F41C5F3
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136322e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:53 +0000
ROA not before:           Tue 04 Feb 2025 19:58:53 +0000
ROA not after:            Tue 03 Feb 2026 20:03:53 +0000
asID:                     22927
IP address blocks:        186.141.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b4:eb:80:4c:ff:63:bd:6c:ac:a0:ee:ca:56:32:d8:1f:41:c5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:53 2025 GMT
            Not After : Feb  3 20:03:53 2026 GMT
        Subject: CN=AC9EA3C11E670F328171E95979CDE26314A3C132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:a4:2c:2a:22:72:ed:fe:bf:a2:fc:0c:a0:
                    71:fd:e2:6d:a3:f8:8c:01:92:00:b2:e0:b9:54:41:
                    75:59:ce:8c:b3:70:33:a9:13:36:9b:b1:06:1f:e8:
                    c3:d0:58:c2:5f:61:4e:5e:ee:ed:68:6e:63:6c:1e:
                    4b:9d:20:26:77:b8:3e:89:67:28:0a:26:60:d1:c9:
                    c9:b9:2c:cc:45:e3:bd:38:b6:0d:7c:c9:dc:c8:38:
                    ea:c0:4c:31:c5:aa:0c:6f:8d:e4:a0:35:10:a8:2b:
                    41:d5:71:3c:9c:d5:c2:18:21:0a:3f:80:60:5e:a6:
                    c6:72:f9:68:66:5f:15:8f:86:85:0a:76:47:bf:35:
                    1d:a0:7d:f7:9e:09:a6:96:e9:ef:24:d0:1e:62:7f:
                    2f:b7:c8:ae:25:37:91:7f:35:2b:53:cc:88:38:a8:
                    74:ab:ba:2b:f6:5e:9e:68:09:ff:79:7e:24:ac:37:
                    4d:62:e0:55:32:e9:e4:21:f2:79:f3:dd:53:da:c6:
                    82:83:62:85:7e:7c:09:07:37:48:87:eb:ca:4b:1c:
                    76:59:33:4d:9a:60:6f:bb:22:6e:56:b4:bc:3e:59:
                    f8:6a:ed:98:0b:5b:f4:26:b0:13:d4:4d:7d:c5:a0:
                    ed:6b:df:e5:a5:ea:94:ae:c7:32:3a:37:6c:f7:3a:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9E:A3:C1:1E:67:0F:32:81:71:E9:59:79:CD:E2:63:14:A3:C1:32
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136322e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:1e:3a:e9:ab:a8:d5:95:6b:23:16:0e:b3:15:8f:33:6d:
         a9:72:3e:6a:3f:9c:b9:da:9e:0c:04:b8:1c:70:c7:87:64:8e:
         e8:0a:5b:fb:90:13:f7:58:6f:84:bd:fd:2b:a7:c1:68:e5:9b:
         10:fa:27:2b:91:d2:c3:52:0e:82:18:7f:17:be:00:29:c4:e1:
         81:29:f0:c2:a8:f3:49:71:68:0c:5b:76:f9:8b:c6:46:c5:a0:
         c1:bd:95:5e:10:60:7a:8c:b9:fb:d8:69:49:75:50:5f:a6:b9:
         59:29:64:e1:ed:90:b0:b1:12:fd:02:32:1e:2b:8b:c1:40:fa:
         4f:bc:11:38:12:aa:b6:57:a7:76:e7:00:16:1a:41:1f:e2:09:
         d1:eb:d6:b3:b0:02:2d:0c:70:3f:66:bf:81:39:6b:28:9d:79:
         00:1c:e4:a0:b7:64:12:2a:d9:f7:3f:da:c4:dd:0e:66:01:6c:
         a3:dd:9d:03:d2:bb:2f:f1:fa:5d:14:22:76:71:8f:af:84:30:
         06:e3:17:a8:e3:83:4b:9a:09:d3:68:68:aa:a8:27:3c:37:77:
         3a:bd:ae:88:07:f5:df:0a:5c:45:1a:88:b5:13:90:37:e0:17:
         f9:50:fb:8f:fe:87:b8:eb:e5:a4:81:9e:f2:ad:fc:de:a5:57:
         3d:13:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:35 2025 by rpki-client