Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134332e302f32342d3234203d3e203139313639.roa
File:                     3138362e33332e3134332e302f32342d3234203d3e203139313639.roa (raw, json)
Hash identifier:          RpThEpdhk+xu/YuvEGXBPejVCkZSrE96oA+jPlJDCUM=
Subject key identifier:   27:E9:60:EA:65:A5:62:38:42:9A:3E:F3:7A:F0:AA:CF:E7:51:55:FC
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       3BC1D47F0D15329E3B8F0442F0AA4238C73FDB9D
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134332e302f32342d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 20:01:56 +0000
ROA not before:           Tue 04 Feb 2025 19:56:56 +0000
ROA not after:            Tue 03 Feb 2026 20:01:56 +0000
asID:                     19169
IP address blocks:        186.33.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c1:d4:7f:0d:15:32:9e:3b:8f:04:42:f0:aa:42:38:c7:3f:db:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Feb  4 19:56:56 2025 GMT
            Not After : Feb  3 20:01:56 2026 GMT
        Subject: CN=27E960EA65A56238429A3EF37AF0AACFE75155FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:91:4a:0b:33:29:0d:1a:d1:d9:87:90:c8:
                    4f:5a:96:8d:4d:59:61:26:c0:41:c4:72:e1:17:a3:
                    f3:e5:8b:2e:2a:45:4f:22:67:1c:40:4b:14:43:0c:
                    4c:59:ad:eb:78:97:d6:dc:28:df:d4:6e:e4:00:71:
                    02:fd:f4:10:b1:c2:bf:64:39:05:dc:ae:d4:f0:4b:
                    81:c9:a0:7f:f2:b2:29:1b:8e:63:25:ce:00:12:4c:
                    1d:54:43:a5:41:34:ab:9d:2d:ef:7f:f4:3d:67:a4:
                    71:bb:ba:93:3d:95:7a:c6:fd:da:ab:dc:ca:3a:71:
                    76:39:25:cf:ad:4d:80:fb:aa:6e:e3:ba:64:98:f1:
                    36:df:24:e8:21:a3:29:a6:0c:34:ff:35:26:b1:3c:
                    7d:a6:04:8e:4b:98:b6:69:c8:a9:50:98:4d:b4:6d:
                    ac:d3:02:57:f8:2a:87:de:5d:1c:d7:38:e1:3a:26:
                    17:ae:95:1c:09:72:a7:8a:94:8d:16:01:1f:ac:a4:
                    14:86:e4:54:47:79:39:12:c6:af:32:ca:5b:b7:10:
                    9b:9b:59:95:33:76:fe:ca:99:b1:a5:c8:e0:9b:d6:
                    14:88:90:70:19:ec:df:e9:68:be:7f:df:e4:3b:89:
                    64:c2:8a:a1:01:b1:64:81:0e:85:5e:61:3a:41:f9:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E9:60:EA:65:A5:62:38:42:9A:3E:F3:7A:F0:AA:CF:E7:51:55:FC
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134332e302f32342d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:9f:f6:12:30:aa:c5:e4:bc:77:76:9f:a0:8d:22:6f:42:
         66:2a:4b:83:42:17:6d:04:f7:0d:f3:da:11:1c:13:91:42:75:
         42:bc:5f:c1:34:44:e2:c3:0a:74:01:4e:28:23:63:82:34:95:
         27:d4:77:e2:15:64:d3:51:67:28:98:73:37:b7:06:16:6c:4d:
         01:a5:68:80:b2:bb:c7:09:80:38:01:62:6b:75:c7:ba:13:74:
         13:62:b4:c7:d0:31:6e:10:c9:e4:c2:ca:f9:85:ee:a7:86:cc:
         72:01:34:fa:c9:3c:3b:47:85:c5:3c:9d:36:2f:43:1a:80:59:
         a3:1c:aa:1b:83:79:fd:08:f6:0e:7e:ee:e0:f9:99:d9:d9:37:
         3a:24:72:50:79:80:ce:63:0b:2e:d8:57:ff:23:4b:19:02:c9:
         62:ad:a1:0d:41:0e:db:98:df:ee:d2:07:2c:e0:25:fa:3b:f1:
         c7:b9:5b:30:ee:c0:73:f3:7d:d1:20:36:00:19:cc:af:f9:72:
         ce:cb:8c:f5:d6:83:b1:87:33:fc:d0:a6:8e:0c:0f:33:2c:5a:
         71:da:5d:98:38:7a:6e:4a:8a:a6:33:2b:ad:18:3f:08:a4:c6:
         61:03:46:a9:e0:74:71:57:1d:f0:3a:57:c5:20:79:79:54:d0:
         53:dd:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:16 2025 by rpki-client