Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3230392e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          fbuhmpXZj7iOtFyFgHYoCTYCTM7SwpC0j5hwX6FAThk=
Subject key identifier:   A3:C5:21:B5:EF:1A:01:E1:EA:48:FB:44:3D:E7:4A:33:05:DF:8A:57
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       66946CC700AD1CEE477D708312559A0DFEDCA8A8
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:12 +0000
ROA not before:           Tue 04 Feb 2025 18:29:12 +0000
ROA not after:            Tue 03 Feb 2026 18:34:12 +0000
asID:                     262189
IP address blocks:        186.1.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:6c:c7:00:ad:1c:ee:47:7d:70:83:12:55:9a:0d:fe:dc:a8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:12 2025 GMT
            Not After : Feb  3 18:34:12 2026 GMT
        Subject: CN=A3C521B5EF1A01E1EA48FB443DE74A3305DF8A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:cb:d4:b0:39:f3:59:48:47:de:5a:d4:1f:
                    bb:48:81:56:39:18:2e:6e:df:d9:9b:ef:6e:2b:4f:
                    59:22:10:c5:43:01:f6:d0:0f:c9:d6:02:93:15:5a:
                    91:e0:2c:33:08:38:bc:f3:08:c2:c9:f2:95:b8:96:
                    71:6b:2a:e2:83:b7:b2:6d:99:88:df:9b:df:a7:2b:
                    df:78:02:80:c4:75:74:26:66:72:c8:bf:1c:41:98:
                    8e:a1:be:6b:e0:e5:80:60:2d:e2:98:9c:81:b6:fe:
                    bf:f8:6e:10:63:96:8b:3c:4f:bd:cd:5f:7d:8c:ae:
                    d5:e8:7d:0e:65:8f:79:44:f9:df:2b:2d:16:e8:b4:
                    e7:a8:b9:ea:6c:32:ca:ca:6f:a3:22:5d:c8:c1:fb:
                    3d:4c:ee:92:ce:9f:aa:62:ee:5e:a2:0d:d5:d7:22:
                    5f:58:e6:e6:53:40:a3:71:fa:75:02:17:39:5b:25:
                    d9:1f:b5:f0:0b:6e:4f:9e:0b:c2:5a:75:83:bc:4c:
                    0a:48:34:6f:bc:8a:40:e7:2a:02:50:ec:2e:be:7d:
                    34:e4:f9:dd:93:a6:e2:54:37:d4:80:38:57:5b:68:
                    6e:31:82:6e:57:43:b0:ac:5b:d6:ef:03:f0:11:c5:
                    ab:f4:c7:98:fe:c3:57:12:0b:1a:15:e5:47:e8:d4:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:21:B5:EF:1A:01:E1:EA:48:FB:44:3D:E7:4A:33:05:DF:8A:57
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:00:ec:b8:7f:7d:25:9a:ed:12:6b:8b:42:c7:cd:3d:74:49:
         59:4c:68:29:27:fd:88:7d:6d:59:ba:ea:ab:92:d4:92:4b:36:
         1e:a1:03:27:4f:54:8f:f7:61:f9:2d:6e:7b:ef:1c:69:27:ad:
         d9:5f:6f:00:9e:7e:c0:95:0d:03:2b:ff:bc:bf:97:d1:72:d5:
         32:2c:a4:0e:2a:1b:2d:5f:6d:91:38:75:22:6a:88:6d:d1:83:
         cd:a9:c6:a6:5d:7d:3d:af:ff:09:65:0c:80:25:cf:0f:cc:5e:
         3a:e4:21:04:5e:12:5e:fd:20:b4:31:5f:ce:17:37:d8:f3:65:
         b8:3f:0c:eb:4e:02:91:0f:53:68:b1:03:e0:5a:0f:4c:c3:5a:
         0e:a9:37:4c:0f:df:47:fd:0f:d0:ff:e0:58:2c:ae:5b:6d:e8:
         7a:b3:b5:5b:bb:ba:17:f7:06:68:cc:0e:7b:86:93:3d:17:37:
         ee:c8:34:0e:f3:81:59:12:14:45:40:29:a0:e0:ef:10:e0:1a:
         82:30:71:6c:b7:d8:ca:7a:db:a1:67:f0:6a:5a:64:f8:48:07:
         3e:98:41:68:78:63:ec:63:da:e2:5c:13:09:fb:49:5f:20:74:
         7b:79:c1:50:3f:b1:71:8b:af:ef:da:10:bf:42:fd:6c:bf:b2:
         bf:76:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:37 2025 by rpki-client