Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136332e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3136332e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          0haFO8cPWvizuHzRO3yqDd2p1/JRQgL6rzQrjnpXkiY=
Subject key identifier:   C2:E7:C6:4B:C9:00:04:9A:A0:C1:7F:86:FA:E8:88:9B:6B:56:3C:A2
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4507A65C45FC8AD547B2E3542288D9A5C2ADD3D4
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136332e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:59 +0000
ROA not before:           Tue 04 Feb 2025 19:58:59 +0000
ROA not after:            Tue 03 Feb 2026 20:03:59 +0000
asID:                     22927
IP address blocks:        186.141.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:a6:5c:45:fc:8a:d5:47:b2:e3:54:22:88:d9:a5:c2:ad:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:59 2025 GMT
            Not After : Feb  3 20:03:59 2026 GMT
        Subject: CN=C2E7C64BC900049AA0C17F86FAE8889B6B563CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:ba:e6:54:5f:71:c4:81:f6:93:99:34:e6:
                    11:94:31:7f:f0:a7:e0:f2:38:f6:9c:65:93:9d:f4:
                    ea:f1:bd:de:80:f2:24:26:82:b4:86:50:50:5d:9b:
                    fb:fc:a6:f5:09:86:88:a0:93:a8:cf:3d:73:f5:cf:
                    90:61:b1:7d:2a:54:70:50:16:d8:75:3d:a6:0d:ea:
                    91:ae:af:12:97:72:92:41:6c:58:da:71:c4:00:4b:
                    d5:8b:3e:4b:43:58:70:bb:e8:0b:34:d3:6c:7d:f8:
                    1a:73:ad:77:27:13:dc:68:68:59:41:48:fd:14:63:
                    03:c4:b1:a0:aa:66:69:9e:c2:0a:f5:0a:a8:b8:38:
                    5c:cc:64:88:80:2a:7d:6e:42:51:ee:13:7c:8d:3c:
                    bd:1b:75:85:2a:43:34:d0:63:79:23:7a:9c:a8:57:
                    a4:e8:08:b9:8d:49:96:26:75:e3:50:74:73:e7:47:
                    a4:f2:36:04:8e:ad:8d:c9:89:73:f3:a9:e3:97:a4:
                    b3:53:b7:6a:aa:f6:3c:6d:dc:77:bf:0f:ff:a3:67:
                    ae:4d:b0:ff:53:03:d8:81:68:33:35:14:2d:1e:7d:
                    14:0e:81:07:b5:52:5d:35:de:29:80:07:b6:9a:5e:
                    31:c1:b7:46:d3:97:20:cd:e8:94:e5:92:40:74:a6:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:C6:4B:C9:00:04:9A:A0:C1:7F:86:FA:E8:88:9B:6B:56:3C:A2
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136332e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:6e:f3:f1:d0:19:82:a1:94:18:7b:04:22:78:ba:3c:56:
         7b:8a:b2:94:69:26:46:7b:44:e1:97:da:40:71:8a:44:69:47:
         62:a2:90:88:f6:e1:46:23:b6:d9:d9:21:da:c1:c8:ae:20:a0:
         94:39:85:af:d5:bb:66:76:e2:11:7e:c8:74:4c:1d:35:17:11:
         22:a7:14:85:cb:64:e7:e7:cb:0b:14:24:d5:f8:19:95:4c:d0:
         d4:15:8b:b0:83:49:bc:db:cd:58:09:bc:e4:1a:ea:ac:14:a2:
         7b:19:51:2e:82:79:e3:1b:6c:5a:7f:13:82:c4:3d:49:99:4f:
         e0:90:77:05:8b:dd:35:0e:c8:ba:a4:46:50:f8:4e:e6:91:ac:
         0a:29:28:a2:4e:cb:ae:eb:09:37:ff:09:37:c8:b2:bd:d0:d0:
         ed:bd:f9:af:d8:4a:b3:48:34:c8:df:f6:3f:95:e8:2a:dc:88:
         9b:f2:1f:d1:c7:46:23:f8:9f:4b:e3:db:4f:cc:72:43:14:82:
         9a:b0:8e:29:2c:f9:86:70:8e:89:52:3e:fd:4b:02:11:7b:b1:
         11:22:60:b1:7e:4b:ae:31:ad:76:8e:c4:2d:8c:07:25:f5:b6:
         27:33:35:4b:69:34:a2:e1:98:9f:7f:f3:3d:83:85:73:8d:59:
         8d:36:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:42 2025 by rpki-client