Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231332e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          RMXJuXXBLg2WJuWdggFILjA1RIrkR94L6AFaHeuq5kQ=
Subject key identifier:   8C:50:BD:8D:1B:6C:70:96:18:19:4E:E4:8E:8A:14:F8:92:EE:1D:05
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       6030526613E9325641F6E909955495617B50AEBF
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:11 +0000
ROA not before:           Tue 04 Feb 2025 18:29:11 +0000
ROA not after:            Tue 03 Feb 2026 18:34:11 +0000
asID:                     262189
IP address blocks:        186.1.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:30:52:66:13:e9:32:56:41:f6:e9:09:95:54:95:61:7b:50:ae:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:11 2025 GMT
            Not After : Feb  3 18:34:11 2026 GMT
        Subject: CN=8C50BD8D1B6C709618194EE48E8A14F892EE1D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:51:8b:7a:a1:9c:0c:c1:2a:b6:72:96:95:
                    b1:33:4a:c8:71:23:cf:ef:5f:34:84:6a:1c:69:2f:
                    a7:33:4f:3e:41:1c:22:ed:5e:89:d1:bf:dd:80:2e:
                    4e:fa:4b:e0:3a:2d:a2:2f:b6:c4:9b:7e:4e:be:72:
                    51:89:2f:17:b4:c0:ba:81:59:79:a4:2d:2e:da:3e:
                    78:4b:97:72:38:28:de:c9:91:31:f4:e4:62:04:0e:
                    a9:cc:4d:ef:c1:b0:42:1b:11:d7:13:18:ef:a7:a5:
                    c2:8d:ba:e9:8a:f1:0d:0e:17:8e:01:af:85:6d:10:
                    94:d3:8b:59:7f:97:d2:41:fc:cd:89:61:12:29:3a:
                    e8:f9:80:ee:15:2f:b3:7f:27:00:e3:dc:52:82:49:
                    45:00:b0:0c:cd:7c:b4:23:5d:4e:c0:ff:10:53:97:
                    11:5b:54:98:d4:83:cd:0b:df:40:ba:1e:d0:42:e1:
                    6c:83:a4:34:b6:88:f5:80:8c:fe:49:95:ef:47:84:
                    f9:e2:f6:8d:5e:b1:ae:0f:74:48:4b:a6:0a:a9:b7:
                    ef:67:61:d9:21:04:31:1c:a1:9c:3a:d0:25:65:30:
                    ca:f7:e3:8b:8b:29:60:f4:4b:86:69:54:c5:50:b0:
                    0f:d1:82:2d:1b:37:b7:ab:d8:77:f8:5f:b0:f3:a6:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:50:BD:8D:1B:6C:70:96:18:19:4E:E4:8E:8A:14:F8:92:EE:1D:05
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:5e:19:e5:ec:54:70:29:d8:b6:5d:e9:d2:99:cf:8e:2e:
         5d:db:ad:7f:a2:79:23:30:24:2c:53:77:d6:36:9b:97:ca:d2:
         17:e6:7c:b7:57:92:44:00:1a:2c:97:64:d4:a1:75:60:94:cd:
         b5:82:40:bd:8c:cb:de:4f:70:4d:2f:85:b6:47:af:b0:69:4d:
         9e:6b:7f:08:56:32:bc:cc:ce:7b:24:1a:4a:f7:ef:8f:0d:b4:
         8b:9f:46:1c:c5:b5:25:43:92:c8:ec:7e:bb:90:74:e3:e0:d2:
         83:88:bc:8b:a3:14:5c:0b:d6:fb:89:8f:f7:6d:46:85:87:cc:
         f7:84:02:8e:f9:5d:de:d1:89:b8:65:56:6b:25:38:d8:15:2b:
         a1:da:c6:f1:81:28:10:9f:05:d8:b8:43:d5:78:5b:2a:2e:26:
         26:ce:22:b5:3f:cf:f5:c0:fe:78:ac:bc:2d:ba:b5:35:15:a7:
         88:ef:2c:4f:0e:e5:ee:f4:9f:08:8c:b2:57:df:98:f6:f4:81:
         40:86:bc:8f:5f:9e:45:22:63:53:6d:ef:b5:68:0c:d5:81:10:
         de:53:a3:ea:a0:7d:26:d9:65:bf:9f:f5:f3:f0:6b:7b:4c:4b:
         57:03:25:54:3f:6a:60:58:03:5c:fa:b4:89:58:25:1f:87:58:
         9a:5f:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:55 2025 by rpki-client