Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa
File:                     3137372e3235302e36342e302f31382d3138203d3e203237373638.roa (raw, json)
Hash identifier:          1OtUUNz1um3D503Mki3pChju1rNapC/rzn6JtfXb4D8=
Subject key identifier:   86:CB:22:8C:36:52:85:F9:99:39:1A:14:48:A1:FE:8C:CD:50:4F:37
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       2D73F0EC0223C57356A74B72D7BB35087A04683C
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa
Signing time:             Fri 06 Dec 2024 18:35:01 +0000
ROA not before:           Fri 06 Dec 2024 18:30:01 +0000
ROA not after:            Fri 05 Dec 2025 18:35:01 +0000
asID:                     27768
IP address blocks:        177.250.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:f0:ec:02:23:c5:73:56:a7:4b:72:d7:bb:35:08:7a:04:68:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  6 18:30:01 2024 GMT
            Not After : Dec  5 18:35:01 2025 GMT
        Subject: CN=86CB228C365285F999391A1448A1FE8CCD504F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:95:ea:8e:f1:eb:46:27:b2:e4:f8:67:8c:
                    cf:4e:69:78:b2:99:a6:ac:82:9a:4f:8e:b6:de:51:
                    51:9c:0a:04:93:6f:88:53:1c:7b:b8:12:ea:8d:06:
                    78:50:52:c2:e4:5c:d7:3d:cf:60:4a:63:84:dc:85:
                    6b:6d:d3:1e:9b:e2:43:de:71:e8:81:9c:b8:1f:6c:
                    0e:1d:a3:d3:a6:a1:32:9e:56:3a:cf:7b:5a:29:51:
                    f2:9b:eb:36:16:2d:44:18:62:94:7b:0c:ac:17:ea:
                    b4:8b:21:f9:90:ec:cc:c4:60:93:7d:03:af:c2:e2:
                    e5:ac:06:6a:96:76:98:23:7c:e9:16:4e:a3:d3:56:
                    03:e2:02:07:83:56:3c:04:63:58:a3:f7:bb:54:98:
                    4e:1c:ab:1e:08:e0:ab:9b:11:9e:b7:da:02:39:22:
                    68:08:3f:ed:5a:62:60:77:ec:1d:67:18:83:ec:2f:
                    c8:b8:8a:05:d4:13:5a:11:9a:17:16:3b:09:a1:c2:
                    ac:fc:e9:59:ac:d9:f0:0c:e3:9e:14:5a:ba:f7:e4:
                    46:cf:79:e1:bc:02:37:21:d1:85:12:b7:11:42:8b:
                    54:41:cf:79:28:3d:cf:ae:0a:48:59:40:c4:30:97:
                    8b:90:91:b9:c4:d1:74:b6:57:4a:4e:73:f5:f9:fa:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:22:8C:36:52:85:F9:99:39:1A:14:48:A1:FE:8C:CD:50:4F:37
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:23:6e:46:3e:7e:9c:86:f6:37:54:2b:17:d2:70:09:8c:93:
         82:ff:ac:77:10:f6:f3:38:2b:65:d0:bd:c2:50:51:cd:54:ff:
         be:af:a0:95:74:86:7e:21:db:a6:dd:2c:3c:7a:35:3e:bc:b0:
         e6:b9:45:4a:1e:23:e2:7f:a2:cd:c8:0d:24:97:ab:f9:36:eb:
         8d:7b:e6:7d:92:27:08:b8:10:7b:61:da:f2:04:37:43:65:d4:
         ca:3c:34:29:74:35:a2:e2:3b:5b:ca:bf:bf:a9:d4:27:f0:1e:
         b1:4c:e3:12:05:fa:0a:c9:7e:3a:98:1f:1a:81:75:ce:ac:84:
         85:3d:a4:be:36:ce:d1:00:ce:19:09:c0:7d:65:d2:02:2d:ba:
         0e:33:c1:e9:56:67:6a:49:99:10:23:43:2c:60:79:ec:6f:49:
         cd:20:c2:15:c9:4a:8a:77:03:80:04:69:05:48:29:84:bc:58:
         e4:29:54:cf:30:51:65:03:de:2a:c9:4f:94:18:d6:46:ce:64:
         71:b3:78:45:e0:23:11:56:65:bc:60:9b:7a:d6:54:63:78:15:
         a7:42:50:09:38:f4:19:f7:2d:8e:40:c0:d0:07:e1:df:a9:7a:
         18:54:ad:45:f0:14:72:f8:e1:09:86:b9:c7:e0:1d:f4:b6:3e:
         2a:82:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:12 2025 by rpki-client