Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
File:                     3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          oHdlxtphn248DdUoxZhBxYCzcqgOagxBt66XmKdD9io=
Subject key identifier:   B1:88:B9:37:B3:84:A5:65:62:40:65:6B:DE:B2:95:B4:46:7B:0D:66
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       1DED80F5C013996B4C9B4E4BBF5189E89D442646
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:49 +0000
ROA not before:           Tue 04 Feb 2025 18:20:49 +0000
ROA not after:            Tue 03 Feb 2026 18:25:49 +0000
asID:                     23243
IP address blocks:        186.189.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:80:f5:c0:13:99:6b:4c:9b:4e:4b:bf:51:89:e8:9d:44:26:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:49 2025 GMT
            Not After : Feb  3 18:25:49 2026 GMT
        Subject: CN=B188B937B384A5656240656BDEB295B4467B0D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:05:ac:d6:f8:1e:3e:51:8a:b3:1d:23:40:
                    14:a9:30:c2:52:40:34:a1:6d:e2:ea:3d:ac:7e:b5:
                    d6:05:a0:3c:bb:9b:8d:76:ef:2c:6e:0e:2d:12:61:
                    09:81:3b:84:81:11:e6:00:06:32:63:cb:57:3b:09:
                    48:80:6e:48:84:62:ae:1e:6a:f7:e5:ff:ce:ae:c7:
                    d0:76:6b:75:d5:7a:e7:8b:67:5e:71:17:7d:68:01:
                    eb:89:0b:93:c8:b2:aa:73:23:e0:75:7f:e2:7a:68:
                    db:90:b5:b2:ae:47:e3:c6:a0:cc:8c:12:75:15:8b:
                    3f:44:92:c5:d0:e6:7d:0d:fd:c8:7c:15:54:3e:d0:
                    b3:9b:44:51:3e:ec:a3:7b:9b:81:f7:ff:4b:76:ce:
                    b2:9d:21:1f:7f:ef:6c:52:b1:7d:73:69:35:41:40:
                    b6:81:18:ed:7e:d1:10:16:7c:41:bd:0c:22:56:11:
                    9c:ce:91:a9:be:6b:8e:18:07:42:93:21:ab:e2:22:
                    bc:f1:39:6f:39:a1:da:84:39:64:04:7e:4e:3f:54:
                    52:31:e3:94:68:d3:61:4f:e6:a2:4b:18:9a:a7:eb:
                    35:cc:00:de:1d:33:77:5c:99:b1:b2:2c:67:3f:53:
                    af:19:24:4d:f4:49:dd:f6:47:46:a4:32:fa:66:f4:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:88:B9:37:B3:84:A5:65:62:40:65:6B:DE:B2:95:B4:46:7B:0D:66
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:92:90:a0:2e:e7:f1:90:9c:36:fc:6b:58:65:34:8d:00:67:
         45:d0:85:2d:ef:3b:49:84:8f:71:4e:35:4a:cd:1f:73:2e:f0:
         60:ea:f5:64:5b:90:55:5b:76:1e:19:a0:69:35:fa:32:ec:c9:
         b7:4d:17:99:28:c9:b6:a1:bf:97:04:23:c3:4d:fd:f0:1f:ae:
         dd:dd:0d:79:db:80:ec:d7:5d:32:05:f7:f8:50:10:0d:d4:e4:
         f3:c3:f7:5a:f5:e3:31:4d:57:72:cc:49:60:31:6b:53:0b:e6:
         94:01:79:5d:9e:98:f0:36:8d:48:e3:db:af:bb:ca:db:9e:6a:
         6f:37:82:79:16:fb:7f:28:aa:8f:85:07:8f:74:13:2a:00:64:
         7e:2a:34:4e:ae:dc:3e:6e:4b:99:23:62:74:56:d4:4b:3c:c4:
         3a:43:0b:26:2a:59:a1:61:e7:dd:34:94:ff:07:4c:93:ca:fe:
         d5:5d:ac:bd:00:b4:01:d5:05:81:af:dd:f5:32:53:21:d1:29:
         f8:2a:28:d9:cc:84:07:da:1b:e7:d2:90:cd:29:43:47:04:4c:
         44:d9:80:91:01:6b:01:18:6c:65:f6:58:89:8a:65:fe:83:42:
         42:3d:43:4e:8a:06:e4:74:3d:a6:00:90:34:ba:94:08:a0:61:
         69:da:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:51 2025 by rpki-client