Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231302e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231302e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          EOk1IdjUrkJhXLxbbwxBZN8/5FkhIVJDNHblIsqoVR0=
Subject key identifier:   F3:F5:52:4B:DE:71:A2:95:69:41:A1:22:FD:62:C2:DB:91:6E:C6:49
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       5173519C4D9B3EE1C169632ACE37EDFEB8EE2DC2
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231302e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:13 +0000
ROA not before:           Tue 04 Feb 2025 18:29:13 +0000
ROA not after:            Tue 03 Feb 2026 18:34:13 +0000
asID:                     262189
IP address blocks:        186.1.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:51:9c:4d:9b:3e:e1:c1:69:63:2a:ce:37:ed:fe:b8:ee:2d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:13 2025 GMT
            Not After : Feb  3 18:34:13 2026 GMT
        Subject: CN=F3F5524BDE71A2956941A122FD62C2DB916EC649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:05:c3:04:5f:94:0c:f9:87:cc:6b:8b:bb:
                    00:38:c9:e1:90:71:63:d9:fd:f1:2d:82:62:0c:fe:
                    22:80:b3:88:74:22:ee:37:88:83:cd:09:58:b9:c5:
                    fa:17:48:54:a8:04:66:9d:5d:1d:da:9e:f6:7d:dd:
                    63:5d:c5:79:7e:4b:2c:49:92:d5:7c:67:cf:6a:d2:
                    3b:4a:19:ad:1e:cd:cc:c0:23:4c:93:a5:97:3b:10:
                    fb:bb:d7:74:31:80:74:93:3a:6f:22:2b:ba:83:6c:
                    37:e6:e1:38:10:95:6d:8c:3e:08:c5:bc:a5:a8:71:
                    5f:72:2c:0c:18:8d:b7:71:65:9b:3a:b8:0d:0a:51:
                    cd:21:a7:bd:aa:52:aa:d0:78:87:68:a0:7e:e3:3c:
                    83:de:8f:f9:e3:c8:93:6a:4a:c1:d6:34:bf:98:e6:
                    2d:4b:56:c7:b3:2d:a8:96:66:ef:ca:c6:bd:c5:1a:
                    ab:91:6f:89:51:b1:6e:f2:88:03:88:d5:91:64:86:
                    6a:38:1d:8d:60:45:7c:1b:ae:19:e8:19:fc:1d:80:
                    d9:13:6d:57:64:5c:3a:75:9e:10:82:4f:10:82:40:
                    ac:e9:05:8d:c4:48:f4:37:84:97:ef:07:69:04:66:
                    09:06:3f:d2:a3:8b:9d:18:e1:00:c4:50:11:fb:db:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F5:52:4B:DE:71:A2:95:69:41:A1:22:FD:62:C2:DB:91:6E:C6:49
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231302e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:d5:04:03:38:85:ca:bb:75:5f:b5:8c:17:1b:d7:6e:96:
         c4:2c:96:f3:3f:08:51:80:0d:ee:17:b4:a0:2c:cf:2f:fe:42:
         0e:d5:f8:ee:22:22:52:25:f2:4e:f0:1e:b0:c8:07:2e:21:a9:
         50:5d:9a:4d:55:d0:6a:2a:f8:c5:9b:e9:03:0f:da:52:5e:06:
         21:6c:99:f8:25:45:cd:9b:83:1b:6f:bd:cc:a3:c1:00:25:c6:
         d1:52:fc:40:e3:88:e5:22:49:ea:20:3e:58:c8:0f:9b:4d:17:
         26:05:94:2d:7a:de:dc:ed:73:a7:9e:1d:fc:79:e0:c5:1e:4f:
         93:c8:5a:2a:01:a3:b5:64:02:9e:df:35:94:98:eb:26:7b:e5:
         5a:55:b3:c0:fe:7c:2f:27:c5:91:fd:4c:dd:ed:8f:af:fe:e9:
         ba:50:39:14:32:52:42:22:bb:db:da:1c:55:1a:e2:71:52:4a:
         14:9a:cf:d8:ad:ad:ce:6e:39:93:c5:11:ab:7a:17:bf:41:81:
         61:5c:6a:b0:e7:98:ed:96:42:79:63:e7:55:4f:92:49:7d:d7:
         76:31:db:69:b6:7a:14:f0:fc:2b:90:c3:f0:9f:53:b0:9c:47:
         3d:6b:0e:29:e7:da:10:dd:37:56:88:a3:9f:9a:8b:9a:76:b4:
         08:8f:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:42 2025 by rpki-client