Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          MTNCTZLX1yzLm8ssl8zkCfo1lDOykCmaTaMWTB+NBGs=
Subject key identifier:   00:51:75:3C:74:22:28:E9:59:A8:B5:75:DF:FF:AA:B0:EA:D2:45:BB
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       02F75C501F333FB45486AFE476A51A65C33B355A
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:49 +0000
ROA not before:           Tue 04 Feb 2025 19:58:49 +0000
ROA not after:            Tue 03 Feb 2026 20:03:49 +0000
asID:                     22927
IP address blocks:        186.141.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:5c:50:1f:33:3f:b4:54:86:af:e4:76:a5:1a:65:c3:3b:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:49 2025 GMT
            Not After : Feb  3 20:03:49 2026 GMT
        Subject: CN=0051753C742228E959A8B575DFFFAAB0EAD245BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:b7:d7:30:a6:6e:22:f5:af:e0:bf:31:00:
                    62:d6:de:0a:c9:6e:2c:b6:70:60:6a:ff:4f:18:36:
                    9b:a0:2c:a6:42:56:83:ca:bd:06:41:4a:32:1c:cc:
                    68:ac:80:fb:42:da:d7:f2:88:f6:7b:2d:ca:e7:e3:
                    51:79:df:5a:28:42:55:fb:2d:97:ac:c7:1a:39:8d:
                    4d:bb:3d:2c:94:bb:9a:49:83:67:66:98:a1:cf:5e:
                    da:46:c6:be:b7:2c:c6:48:0c:03:c6:08:9e:eb:28:
                    fa:31:56:5e:64:30:47:19:c9:7c:37:f1:43:a5:e2:
                    cf:41:b3:52:8e:8d:a4:73:30:ac:57:6f:fa:aa:04:
                    f5:19:81:20:34:b8:8d:05:79:55:90:26:18:d7:04:
                    bc:9a:37:4b:67:73:49:b7:4e:8a:38:db:36:e2:0b:
                    32:e4:8d:c7:a8:3e:10:d8:c9:b4:b0:0e:ba:64:48:
                    6b:f0:7c:4b:c8:d3:26:f7:7f:d1:21:30:81:24:0c:
                    09:b4:5a:66:a4:d7:ff:92:9c:4b:0b:c4:b9:9c:aa:
                    94:57:ea:4e:7e:ef:5c:15:96:ea:5d:92:1a:15:61:
                    b7:a3:a4:9e:89:dc:8d:af:06:3a:c4:a8:c8:a1:f7:
                    9c:84:8b:34:8b:78:cf:78:66:ed:aa:80:e6:47:1f:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:75:3C:74:22:28:E9:59:A8:B5:75:DF:FF:AA:B0:EA:D2:45:BB
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:56:d9:58:16:8b:2a:ab:b4:da:79:7b:ad:09:5f:9b:34:
         ae:1a:d1:f4:af:ca:dc:e8:2a:62:ba:49:d7:d5:fa:cf:90:2a:
         85:94:dd:9b:01:99:fa:87:c5:8d:aa:ba:e9:97:20:e5:94:76:
         74:31:54:d8:3a:c4:c8:ce:38:4b:17:b8:be:b6:79:0d:af:a7:
         cd:c0:13:ce:68:12:90:bc:8d:4f:a9:42:35:f2:ff:87:88:7f:
         54:e3:d1:61:b9:5a:2c:d1:16:8e:ff:df:e3:49:19:6e:72:f6:
         99:af:f2:7c:b2:fa:df:a1:da:44:81:e3:57:55:f7:67:84:69:
         4a:e3:c8:0d:76:dc:40:08:fa:70:48:58:c5:eb:b2:b7:75:01:
         22:24:71:74:ab:9f:3b:b5:dc:d5:68:da:86:42:5b:e9:73:84:
         f6:44:11:04:d3:84:25:ae:ed:dc:6a:03:7a:35:ee:b2:ef:48:
         52:9c:53:8b:fe:61:46:79:70:e9:5c:ac:51:9a:50:97:af:f5:
         88:9f:4e:f1:ed:ba:31:1f:b0:08:53:a0:dd:49:47:51:04:92:
         93:54:ef:c3:82:66:98:0d:a2:c1:c9:5b:a9:de:56:32:ce:7e:
         2e:b1:bd:30:07:60:1a:65:69:9a:ed:03:0c:a7:8b:61:12:49:
         5f:f4:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:04 2025 by rpki-client