Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa
File:                     3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          u6F6l5im6PLoLA12nZz8LZ/aDpfusqXxxID3Dq3HiNo=
Subject key identifier:   27:29:D8:9D:4A:77:E3:1A:C7:85:51:B2:3D:21:7A:3F:6F:87:42:2E
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       7FC64F4EA50B33739E7030625E2B78EF0057560E
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:25:37 +0000
ROA not before:           Tue 04 Feb 2025 18:20:37 +0000
ROA not after:            Tue 03 Feb 2026 18:25:37 +0000
asID:                     26617
IP address blocks:        186.189.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c6:4f:4e:a5:0b:33:73:9e:70:30:62:5e:2b:78:ef:00:57:56:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:37 2025 GMT
            Not After : Feb  3 18:25:37 2026 GMT
        Subject: CN=2729D89D4A77E31AC78551B23D217A3F6F87422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:77:29:37:17:35:4b:19:21:12:af:41:3f:
                    8e:1f:d9:d6:3b:fc:a8:ec:e0:5c:01:b5:cd:23:44:
                    a6:63:17:df:f7:10:e8:c6:ea:88:16:c3:56:5e:a5:
                    2e:cc:19:f7:0b:c5:3f:7f:01:6a:ea:d8:fe:b7:4b:
                    c8:33:0a:37:0e:db:48:41:9a:59:2c:1b:2d:22:8b:
                    57:86:b0:3b:14:80:61:ee:41:46:08:bf:d8:8f:95:
                    34:fa:5b:f2:9f:99:da:9a:16:82:3f:67:64:f8:9a:
                    75:9e:a9:c6:c9:59:75:7a:fb:32:70:a9:89:55:af:
                    37:69:32:39:f7:b9:ed:e9:d8:45:9f:d0:82:85:eb:
                    88:f2:45:0d:62:a6:7f:cb:09:a2:ce:28:b3:6f:21:
                    e9:43:58:18:e8:f5:15:ca:c5:cc:9e:3a:a1:c5:23:
                    39:1e:4d:b4:be:00:0b:af:c0:49:0d:c9:8b:e7:16:
                    23:3b:28:1e:f2:0a:79:70:a7:d6:e5:ba:4f:54:f7:
                    f2:90:e5:31:77:42:69:bd:9f:80:05:46:cc:78:b4:
                    d0:79:2b:7b:95:5e:a9:9c:28:a2:4e:de:71:55:ac:
                    f8:bd:b2:a3:1d:12:7f:4b:43:1a:a5:7b:cf:88:de:
                    ad:33:2d:20:47:97:f4:cb:18:6e:dc:22:35:55:94:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:D8:9D:4A:77:E3:1A:C7:85:51:B2:3D:21:7A:3F:6F:87:42:2E
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:fa:09:50:c9:19:93:31:3a:2a:bf:0f:5f:02:e8:e0:de:
         83:1d:8c:f5:ce:a4:db:25:96:d0:a8:bb:6c:18:08:75:d8:5f:
         1c:e2:17:b2:e1:cd:db:48:22:6e:d0:9e:c3:ca:51:a4:bb:5f:
         74:5c:7b:12:6e:dc:d7:1b:d2:0a:f8:3c:f6:09:c4:c0:17:14:
         66:ec:96:f1:36:f4:db:7e:e2:9f:02:ac:8f:8d:86:ce:80:b7:
         ac:3a:a7:6f:de:ab:c1:c2:03:40:6e:8c:d8:91:0b:ab:70:a0:
         45:d7:12:22:c4:b2:c4:c0:6f:26:7a:03:90:b2:a7:62:0e:06:
         01:bf:5f:a3:bc:a7:33:a1:5e:a1:b2:03:d5:87:c9:49:54:bb:
         e9:59:22:71:43:2d:24:29:4b:81:b1:93:a9:16:f8:2f:74:a9:
         b8:2f:4f:50:4b:7d:34:45:58:eb:d9:c0:3f:89:a7:34:e1:62:
         15:25:b5:23:93:65:8d:e2:f2:30:c0:26:6a:2c:13:23:b7:62:
         20:8d:b1:54:66:12:98:1f:8b:37:22:4b:fe:4f:39:20:2f:59:
         3d:54:53:4e:1f:e5:c8:65:ac:83:96:d4:c1:34:37:f8:fc:21:
         96:cf:04:f3:74:fe:64:6f:ce:69:2e:c0:6a:51:62:29:01:83:
         a5:7a:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client