Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3138362e342e36342e302f31382d3234203d3e203237393634.roa
File:                     3138362e342e36342e302f31382d3234203d3e203237393634.roa (raw, json)
Hash identifier:          fgnSsTtOpxsS1ljQDYZXpoJo825DB9ut69lXMJR72P8=
Subject key identifier:   07:29:60:3E:66:9C:32:B2:EA:6F:5C:29:95:97:B4:3E:39:CA:A6:99
Certificate issuer:       /CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
Certificate serial:       379DDD3667F930FCB846C10C2C1163C411786764
Authority key identifier: 80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3138362e342e36342e302f31382d3234203d3e203237393634.roa
Signing time:             Tue 04 Feb 2025 18:22:54 +0000
ROA not before:           Tue 04 Feb 2025 18:17:54 +0000
ROA not after:            Tue 03 Feb 2026 18:22:54 +0000
asID:                     27964
IP address blocks:        186.4.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9d:dd:36:67:f9:30:fc:b8:46:c1:0c:2c:11:63:c4:11:78:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
        Validity
            Not Before: Feb  4 18:17:54 2025 GMT
            Not After : Feb  3 18:22:54 2026 GMT
        Subject: CN=0729603E669C32B2EA6F5C299597B43E39CAA699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:e3:51:3d:5f:49:bc:7c:3d:9c:2b:c4:47:
                    3c:f1:7e:a6:73:b7:ac:d6:6c:da:5f:6c:7a:bb:d4:
                    91:ed:d1:e8:98:d0:3d:30:a9:38:c3:f0:81:ac:ae:
                    7e:6e:19:b3:1c:3c:80:56:e8:cc:b5:0b:55:e8:7d:
                    fb:bf:57:69:72:b2:e2:c9:45:25:07:e7:df:c9:78:
                    7a:43:35:e9:30:f1:a3:bc:c3:ae:1f:c3:2e:db:d6:
                    65:e5:86:b8:27:f9:ed:b5:e3:d8:e3:5c:2b:59:3f:
                    f9:cd:4a:eb:27:f5:5d:e4:8d:66:3b:43:1e:bd:19:
                    56:7a:e6:33:08:a7:2c:d4:3e:fb:f3:59:77:6d:d1:
                    b6:a4:a0:14:c2:43:c7:77:87:dd:5a:c4:02:9f:fb:
                    a5:4b:96:cb:e0:27:80:ba:8d:76:bd:98:9c:38:6b:
                    c9:c0:95:90:59:5d:35:3c:74:a0:e5:11:bc:81:1f:
                    64:90:35:62:a9:d4:5c:25:c7:58:73:b7:3e:bc:95:
                    4f:f1:af:e7:af:b0:ee:11:30:4a:f2:35:8e:4f:65:
                    b9:c0:6d:ed:73:c6:7c:30:43:cd:8a:9f:eb:85:be:
                    c2:2b:91:09:a4:98:84:0c:30:aa:93:48:ee:96:c4:
                    45:a2:b0:57:5b:2c:6b:38:70:b9:c3:45:fc:35:65:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:60:3E:66:9C:32:B2:EA:6F:5C:29:95:97:B4:3E:39:CA:A6:99
            X509v3 Authority Key Identifier:
                keyid:80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3138362e342e36342e302f31382d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:eb:7f:e9:08:9c:04:b7:e6:08:2e:fa:3f:dc:9e:78:67:
         90:07:8a:97:91:03:33:36:cf:01:bf:b1:a0:fc:e9:42:0d:41:
         ff:c3:21:27:e4:21:8f:3c:3a:df:7e:92:09:62:bf:60:40:24:
         40:0b:78:c3:37:48:a7:7b:16:d1:1b:b8:ee:ed:47:4b:9a:67:
         de:3d:89:61:ec:00:ad:51:7b:35:86:4d:1b:e1:cc:75:82:74:
         4a:c1:07:af:6f:6e:00:95:f2:76:b8:41:d3:9e:a7:79:f6:71:
         fb:d8:17:66:cf:5f:39:fc:e0:b1:36:72:cb:a3:b3:90:05:44:
         fd:9b:51:6a:58:27:f2:1d:c4:9c:c3:e3:e8:10:2b:f3:25:47:
         ed:45:56:90:9b:e9:a0:b9:0c:65:22:6a:a9:24:ae:bf:a8:16:
         f3:cc:8a:64:7b:d9:87:11:1a:5d:8e:88:88:1e:59:a3:7e:e0:
         1d:6f:a1:70:26:7a:ef:39:1f:a2:75:7e:4b:9d:a3:11:93:28:
         a0:ba:35:29:4e:2b:99:02:18:72:4b:d7:e8:23:df:5c:41:d3:
         14:fb:d2:d7:5a:cf:2e:32:bf:cc:67:52:7d:56:f3:e8:e2:cd:
         b7:13:2f:c4:24:05:c0:ca:ed:5b:5d:92:9a:2e:34:84:48:18:
         91:53:5c:9e
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUN53dNmf5MPy4RsEMLBFjxBF4Z2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyODNGMEIyMEEyNkE3N0RDRkJGMTEzRDRENEZFODQ4
RTkxRDk4NzAeFw0yNTAyMDQxODE3NTRaFw0yNjAyMDMxODIyNTRaMDMxMTAvBgNV
BAMTKDA3Mjk2MDNFNjY5QzMyQjJFQTZGNUMyOTk1OTdCNDNFMzlDQUE2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEeNRPV9JvHw9nCvERzzxfqZz
t6zWbNpfbHq71JHt0eiY0D0wqTjD8IGsrn5uGbMcPIBW6My1C1Xoffu/V2lysuLJ
RSUH59/JeHpDNekw8aO8w64fwy7b1mXlhrgn+e2149jjXCtZP/nNSusn9V3kjWY7
Qx69GVZ65jMIpyzUPvvzWXdt0bakoBTCQ8d3h91axAKf+6VLlsvgJ4C6jXa9mJw4
a8nAlZBZXTU8dKDlEbyBH2SQNWKp1Fwlx1hztz68lU/xr+evsO4RMEryNY5PZbnA
be1zxnwwQ82Kn+uFvsIrkQmkmIQMMKqTSO6WxEWisFdbLGs4cLnDRfw1ZbSPAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUBylgPmacMrLqb1wplZe0PjnKppkwHwYDVR0j
BBgwFoAUgCg/CyCianfc+/ET1NT+hI6R2YcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEMxN0E2OTJBRjE3QUZFMDUyRUM4RkEyNzg2RkEwQUVG
NjczNzEyQTlBOEI3OEJCNDgyNDRGNzk2N0MwNDVDLzAvODAyODNGMEIyMEEyNkE3
N0RDRkJGMTEzRDRENEZFODQ4RTkxRDk4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MDI4M0YwQjIwQTI2QTc3RENG
QkYxMTNENEQ0RkU4NDhFOTFEOTg3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRDMTdBNjkyQUYxN0FGRTA1MkVDOEZBMjc4NkZBMEFFRjY3MzcxMkE5
QThCNzhCQjQ4MjQ0Rjc5NjdDMDQ1Qy8wLzMxMzgzNjJlMzQyZTM2MzQyZTMwMmYz
MTM4MmQzMjM0MjAzZDNlMjAzMjM3MzkzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGugRAMA0GCSqG
SIb3DQEBCwUAA4IBAQCE2et/6QicBLfmCC76P9yeeGeQB4qXkQMzNs8Bv7Gg/OlC
DUH/wyEn5CGPPDrffpIJYr9gQCRAC3jDN0inexbRG7ju7UdLmmfePYlh7ACtUXs1
hk0b4cx1gnRKwQevb24AlfJ2uEHTnqd59nH72Bdmz185/OCxNnLLo7OQBUT9m1Fq
WCfyHcScw+PoECvzJUftRVaQm+mguQxlImqpJK6/qBbzzIpke9mHERpdjoiIHlmj
fuAdb6FwJnrvOR+idX5LnaMRkyigujUpTiuZAhhyS9foI99cQdMU+9LXWs8uMr/M
Z1J9VvPo4s23Ey/EJAXAyu1bXZKaLjSESBiRU1ye
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:46 2025 by rpki-client