Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          9yxlvqpOGKocoV59/WIkP7nhGDcWiKwLsfMk4wyKndU=
Subject key identifier:   56:DA:B8:B5:63:8B:A9:34:3C:C5:B0:D3:F2:E0:D7:D1:AF:38:72:EC
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       463D1ADEF77183BAC70C607CA01BD97A6B0AE136
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa
Signing time:             Tue 04 Feb 2025 18:20:20 +0000
ROA not before:           Tue 04 Feb 2025 18:15:20 +0000
ROA not after:            Tue 03 Feb 2026 18:20:20 +0000
asID:                     264731
IP address blocks:        186.167.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3d:1a:de:f7:71:83:ba:c7:0c:60:7c:a0:1b:d9:7a:6b:0a:e1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Feb  4 18:15:20 2025 GMT
            Not After : Feb  3 18:20:20 2026 GMT
        Subject: CN=56DAB8B5638BA9343CC5B0D3F2E0D7D1AF3872EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:df:c1:76:59:fe:e4:29:41:e6:14:cb:43:
                    9b:d9:b3:cc:81:df:1c:c3:e0:73:7b:a4:8d:df:ce:
                    fc:5c:2d:77:25:0d:c8:cc:29:15:f1:5d:b9:ed:61:
                    7f:d4:df:d7:51:e8:d8:a5:b1:dd:38:f1:04:8f:cb:
                    82:1c:59:fb:15:32:3e:72:a8:ad:20:49:51:be:6f:
                    7f:98:7a:40:51:12:c3:b0:a5:98:70:cc:ef:06:db:
                    ce:18:2f:94:ad:4a:b2:ce:15:e9:fe:73:c4:68:f9:
                    e5:6e:e7:64:17:75:06:cd:87:6c:04:5c:3e:81:5c:
                    05:0a:71:b1:ec:ff:b8:af:3e:89:ea:48:15:67:0d:
                    8a:f9:9b:dc:3f:f5:bf:96:27:cd:ce:d1:80:b3:6e:
                    c9:87:d1:73:75:a5:83:41:fc:d0:df:d3:38:e2:b5:
                    28:28:cf:df:89:d1:1e:25:95:bb:41:34:44:aa:35:
                    40:3c:f3:4d:a2:1b:df:a6:7b:04:14:3d:6d:84:57:
                    6f:ab:c5:ed:9d:6c:05:e9:95:43:07:14:43:2d:b4:
                    91:46:1f:62:81:d0:2d:bf:13:f8:a2:dd:24:3f:d4:
                    fb:03:82:2f:ae:4f:2b:b2:86:7c:b2:a5:14:7d:e7:
                    26:85:c0:b0:5f:ba:82:8b:1e:69:75:e9:73:0a:a1:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:B8:B5:63:8B:A9:34:3C:C5:B0:D3:F2:E0:D7:D1:AF:38:72:EC
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:e3:bf:b9:61:67:fd:d4:ba:24:b2:5a:60:54:88:b1:85:
         b5:26:1c:03:46:3d:2c:91:17:75:0a:66:5c:a9:8a:0c:9a:58:
         fe:e1:d7:ec:91:ad:d9:69:ee:2a:2a:7a:cc:4c:7d:b6:18:c2:
         b9:e6:f3:d2:f0:26:f8:31:c5:a8:97:f9:15:3b:e7:43:de:61:
         2c:15:c9:93:a6:ba:4e:e9:57:5b:7e:b9:00:2b:b1:70:d5:8b:
         f2:0a:c5:49:b4:5d:ab:35:02:a2:a9:c3:54:76:50:36:4a:8d:
         e0:ab:eb:27:63:67:0b:4c:c9:7e:91:f2:d9:4a:a4:58:92:5e:
         da:0d:ee:7c:5b:18:89:7b:fc:57:ac:a8:9c:13:fb:77:0d:27:
         45:71:3d:70:e5:63:5a:bd:ac:23:cf:d1:45:c7:b5:cd:36:3e:
         b3:22:39:11:0d:fa:e1:16:54:ed:f5:2d:88:3c:67:f3:e2:31:
         5c:d7:a8:1d:c4:e0:67:c1:a8:11:c1:59:6a:c4:6f:1f:a2:1b:
         db:11:c2:b4:50:c8:7f:8b:d2:25:d0:86:7b:41:1f:7f:4e:d6:
         6a:d7:9f:48:3e:99:87:f6:77:e4:92:ad:b6:e6:18:ac:ff:bc:
         a8:25:ab:e8:85:fa:ba:c9:36:f5:c5:0e:e1:c5:98:88:81:e9:
         ca:7f:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:32 2025 by rpki-client