Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231352e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231352e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          GpntA59Z4qrneiF2p7+vUA34gzctmTMp736k1ywBQaU=
Subject key identifier:   5F:1B:65:7C:B7:01:24:3E:17:E7:29:74:C8:4C:D0:EA:84:43:B3:82
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       3A076DCE5D04CC3691A14260BE60CAAC64B76495
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231352e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:15 +0000
ROA not before:           Tue 04 Feb 2025 18:29:15 +0000
ROA not after:            Tue 03 Feb 2026 18:34:15 +0000
asID:                     262189
IP address blocks:        186.1.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:6d:ce:5d:04:cc:36:91:a1:42:60:be:60:ca:ac:64:b7:64:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:15 2025 GMT
            Not After : Feb  3 18:34:15 2026 GMT
        Subject: CN=5F1B657CB701243E17E72974C84CD0EA8443B382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:1f:2e:36:93:a0:5a:0e:23:56:ff:0e:e5:
                    b0:4a:5f:2f:64:e6:a9:16:83:fa:cb:b7:66:94:09:
                    78:48:a4:41:59:45:48:d4:a2:f8:f1:37:d6:6c:5b:
                    0b:b8:8b:d2:84:b3:3b:2b:41:76:71:8f:69:bf:b2:
                    31:36:c5:3a:3f:f9:e2:98:7a:44:ac:d5:82:c2:54:
                    98:bd:1e:a6:ad:c3:98:10:a7:8f:f3:4f:8d:3c:8c:
                    b9:89:d6:09:21:e3:7a:73:a2:74:96:bf:96:60:53:
                    4b:23:75:c4:67:8f:8b:40:90:11:c0:80:3a:6f:e5:
                    6e:f8:4d:68:c8:c1:9d:5f:ba:13:ab:10:c9:de:c5:
                    ba:16:44:08:e5:e4:29:4e:5c:b9:e1:88:c1:39:52:
                    83:a6:cb:f3:b7:1a:94:4e:6c:9b:13:b8:98:10:97:
                    32:b5:0e:13:cc:ce:80:d7:3d:6b:c4:6d:d2:37:34:
                    bb:bd:bd:88:cc:74:56:26:8e:ac:c9:1e:81:91:94:
                    bb:5f:26:71:97:a2:bf:52:da:c6:59:db:22:87:3b:
                    d9:e7:3f:d4:a1:98:57:d6:da:9a:de:32:f9:0b:d0:
                    33:e4:b3:66:6f:95:e8:6b:62:c3:41:30:38:d9:6a:
                    2a:a2:5c:e6:46:10:e2:a6:49:37:09:89:63:54:5e:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:65:7C:B7:01:24:3E:17:E7:29:74:C8:4C:D0:EA:84:43:B3:82
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231352e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:0d:9a:66:31:d2:f3:9d:b1:84:03:7d:fa:94:f0:dd:b4:
         21:2d:5f:8d:97:c5:db:c7:58:85:89:cc:18:bb:62:ea:6c:ac:
         b6:89:bb:df:96:50:50:9f:30:9c:f0:ce:67:1f:63:e3:0b:47:
         1e:9b:86:93:45:97:d2:f3:de:df:6e:8d:8e:cb:7d:8f:61:b2:
         ff:71:74:6b:25:d7:bf:79:65:5d:5b:c3:a0:44:88:e2:a0:71:
         98:3e:5a:a3:38:76:60:06:38:8a:95:b3:06:5e:7a:db:b5:4e:
         37:14:7f:dd:7a:7f:c2:a7:75:32:3e:09:03:7f:f8:33:3a:aa:
         07:4f:c6:30:1b:ff:2d:d6:d5:6c:97:b7:07:2f:27:f2:35:1b:
         f1:1c:6a:33:4c:88:d2:a5:63:73:90:cd:8b:46:3c:aa:92:90:
         cd:ba:48:39:02:41:4d:ab:1c:61:a4:03:03:1f:ad:51:81:ec:
         8d:34:93:4b:70:30:f7:60:64:95:14:77:92:9b:82:f7:0f:13:
         f1:c5:e7:5c:46:8e:94:27:e9:b9:a0:7a:2c:79:e9:ef:31:c4:
         5e:04:c0:32:0e:b2:78:bf:b5:ea:58:88:5f:10:78:4a:f0:20:
         45:d5:98:53:14:22:be:10:38:2f:47:37:0b:e8:0f:71:d2:9c:
         5f:80:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:39 2025 by rpki-client