Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203139393035.roa
File:                     3138362e3136302e302e302f31342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          /wumUE3MWG3ay7xoySfL4J8lgN/MsgQVXS62jG16EAQ=
Subject key identifier:   9B:8D:B6:2D:F5:6D:C5:8A:06:C9:C7:9D:EC:28:9B:58:DF:68:6C:64
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       627BAD91A45987300EF6C3B5D950611D5F52C190
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:14 +0000
ROA not before:           Tue 04 Feb 2025 18:13:14 +0000
ROA not after:            Tue 03 Feb 2026 18:18:14 +0000
asID:                     19905
IP address blocks:        186.160.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7b:ad:91:a4:59:87:30:0e:f6:c3:b5:d9:50:61:1d:5f:52:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:14 2025 GMT
            Not After : Feb  3 18:18:14 2026 GMT
        Subject: CN=9B8DB62DF56DC58A06C9C79DEC289B58DF686C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:70:4a:03:8d:14:96:6f:45:c5:0a:80:5d:52:
                    30:51:0e:6a:6c:31:61:e6:0c:60:57:06:b5:5d:2d:
                    68:d8:88:17:67:0c:44:db:13:5e:cd:d0:92:b2:5b:
                    1a:cf:30:a9:19:cc:a4:24:50:f6:b6:37:e5:56:83:
                    66:3d:94:f3:79:85:1d:79:28:7a:a4:ab:52:71:3f:
                    55:4b:22:0e:5c:3c:37:c8:d3:f2:4a:ae:7b:f3:23:
                    9e:f9:aa:61:6f:94:f9:43:87:2e:be:a0:a3:ba:dc:
                    62:d0:85:a7:b1:0f:97:fb:9c:13:a8:3f:e7:43:4c:
                    d6:c1:3a:61:c9:99:fa:4b:b8:01:70:96:1d:e4:b1:
                    a0:9f:7d:8d:99:e3:d6:e6:86:57:e1:e6:30:7a:f6:
                    b9:5f:af:10:6c:af:90:4f:ca:98:fd:b5:27:19:be:
                    a1:43:fe:55:bd:88:73:8a:2b:63:ac:54:f0:df:0c:
                    5f:a9:6d:55:e0:dc:a4:81:22:64:fb:1d:67:5c:06:
                    dc:92:6e:34:cc:af:69:28:10:6f:2e:35:80:3d:15:
                    20:01:16:f2:92:58:f9:b9:d3:1f:01:6d:ce:09:00:
                    b5:a1:7f:bd:f1:ed:29:46:15:be:df:2b:ca:e7:77:
                    0a:78:82:35:be:12:9b:ae:24:ed:05:eb:9d:f9:a0:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:B6:2D:F5:6D:C5:8A:06:C9:C7:9D:EC:28:9B:58:DF:68:6C:64
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:ba:52:af:31:3f:a9:db:3e:f3:35:c7:48:e1:28:47:dc:
         a5:38:9e:a4:4b:87:eb:39:69:f3:0a:37:8b:ba:8e:1e:bd:06:
         18:d2:b5:3a:62:d9:02:76:e7:39:23:20:6a:90:46:85:9e:d9:
         fb:08:18:b0:66:15:b8:6d:1e:ae:fa:03:a3:1e:3b:00:06:aa:
         9b:1b:3d:3e:cf:b9:0d:ef:fb:4e:0b:ff:16:34:fb:54:d0:63:
         07:c8:f1:8e:12:b8:5f:29:e2:b3:12:48:55:c8:b9:e4:07:c1:
         23:b9:df:d9:5d:ea:ba:d7:a6:7c:6a:40:56:f6:c9:2d:95:c0:
         7e:c3:c7:3d:9f:99:cd:12:0c:1e:1e:86:06:1f:c0:5a:96:1a:
         19:c5:b1:1c:54:d9:57:e8:95:05:e5:3b:15:50:f8:7f:a1:39:
         72:03:9c:7c:20:88:aa:21:e6:fa:93:be:c1:c3:b2:b7:a1:26:
         96:c9:ea:ef:3e:b5:13:2f:82:13:28:ad:73:4f:1f:62:cd:98:
         d7:c5:a7:c8:d1:18:12:01:4a:dd:59:b3:d3:86:d3:50:3b:41:
         07:c1:e7:12:a9:a5:ff:2e:d6:1e:b9:63:e8:07:ec:dc:22:0b:
         b0:ba:47:1c:db:11:bf:34:f2:5c:6d:bd:fd:6d:1a:45:7a:d1:
         ae:2d:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:43 2025 by rpki-client