Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa
File:                     AS262182.roa (raw, json)
Hash identifier:          y9551sd6v1mJ6rRd0zojHdkWEPo9FPiaUgWdXbQqh18=
Subject key identifier:   00:05:12:7E:02:8F:D5:AD:5D:66:39:B9:3F:C5:3D:0A:6F:13:C8:5F
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       1B6701237E7E1EB39EA959C969B0A1460762D4CB
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa
Signing time:             Tue 04 Feb 2025 18:19:57 +0000
ROA not before:           Tue 04 Feb 2025 18:14:57 +0000
ROA not after:            Tue 03 Feb 2026 18:19:57 +0000
asID:                     262182
IP address blocks:        186.118.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:67:01:23:7e:7e:1e:b3:9e:a9:59:c9:69:b0:a1:46:07:62:d4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Feb  4 18:14:57 2025 GMT
            Not After : Feb  3 18:19:57 2026 GMT
        Subject: CN=0005127E028FD5AD5D6639B93FC53D0A6F13C85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:9b:f1:ef:ae:07:fb:76:f4:d0:81:62:23:
                    e8:d1:e4:58:20:54:49:d8:90:db:f1:19:0e:ff:a4:
                    42:1e:7b:31:a0:5b:31:ff:7c:c5:63:dc:86:f2:3f:
                    62:e8:e5:66:d2:02:03:34:79:d3:4d:a8:10:ca:ce:
                    36:6f:3a:49:c9:51:ac:44:b3:cd:08:1f:0b:b9:6f:
                    44:e3:24:31:57:c1:9f:c9:b1:41:48:36:9a:08:a2:
                    f2:71:07:15:c8:f4:59:bb:6b:b4:7e:e5:cd:ed:ac:
                    c6:61:48:69:ad:a8:a4:97:30:40:5e:e3:03:d6:a0:
                    86:5b:ec:bb:53:5c:90:47:3f:d8:ad:8f:24:47:3e:
                    9d:c1:b2:62:e4:b0:12:ff:c0:94:49:b0:71:52:29:
                    e7:1c:50:c0:74:c1:cd:b9:e8:2c:e0:e4:c3:3c:d8:
                    32:10:9e:78:7f:15:ab:9e:41:13:e5:73:29:f3:c0:
                    b5:12:15:16:3f:3b:b0:de:6b:8b:b3:95:3e:de:28:
                    45:4e:69:28:8e:d9:64:30:53:a9:10:dc:e9:23:79:
                    cc:9d:f8:0d:a3:63:cd:f1:d7:db:65:e1:e8:25:ba:
                    d9:d7:b9:de:82:8c:61:4d:c1:54:5b:16:f0:3f:b7:
                    3a:6a:65:1f:f9:97:fd:b4:0f:27:e9:ac:59:b8:f5:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:12:7E:02:8F:D5:AD:5D:66:39:B9:3F:C5:3D:0A:6F:13:C8:5F
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.118.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:db:22:61:16:aa:37:5b:e9:87:32:6d:a4:93:c4:68:ad:64:
         be:c1:aa:e1:4c:52:d1:0a:c9:d0:dc:d3:6f:66:53:9e:5e:63:
         c6:3b:6f:49:e3:95:df:c0:e9:87:4c:40:a9:36:43:d8:de:13:
         e4:d9:61:28:2d:12:90:ef:8d:5c:ad:9f:0b:54:18:72:cc:b0:
         8e:ea:89:2b:ef:22:16:47:51:b6:39:b2:ac:f8:c6:f9:41:00:
         b5:6f:49:91:37:a8:cc:42:0d:52:d9:ec:6a:73:74:fa:0e:94:
         1c:33:8a:a3:d7:fe:e0:0e:08:83:97:a3:60:e1:f5:3c:5a:a2:
         90:62:dd:2c:79:fc:34:ba:90:e1:c9:3e:71:f5:ea:38:0f:91:
         de:42:29:41:dd:9e:5d:d9:51:de:23:57:1f:42:eb:50:28:6e:
         58:43:99:23:bd:77:ec:32:a0:12:a8:96:0e:df:49:ad:a8:ae:
         92:3d:54:e0:3b:16:d0:93:c5:57:f5:19:c2:64:63:24:e1:fb:
         2f:d5:3c:b6:bf:32:ab:0c:4d:e5:83:1c:05:bc:aa:6f:80:eb:
         44:b8:7d:77:bc:dc:2d:9e:eb:f5:78:67:63:01:26:43:dc:72:
         f7:c6:ce:85:ce:c0:3e:04:ce:3f:ca:25:c4:8d:01:2f:de:d5:
         80:dc:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:43 2025 by rpki-client