Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa
File:                     3138362e302e3135322e302f32322d3234203d3e203139393035.roa (raw, json)
Hash identifier:          kvkorhOrX+jZT4TQUlDe1CcZf+5MbA/dWMc5P0WYIYM=
Subject key identifier:   AE:01:0E:A1:26:7E:DD:5A:05:03:79:51:D0:00:88:1E:41:C0:B9:E3
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       23C82F052B1CE25A748A2F41FFDE18475EB0959F
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:08:57 +0000
ROA not before:           Tue 04 Feb 2025 18:03:57 +0000
ROA not after:            Tue 03 Feb 2026 18:08:57 +0000
asID:                     19905
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:2f:05:2b:1c:e2:5a:74:8a:2f:41:ff:de:18:47:5e:b0:95:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Feb  4 18:03:57 2025 GMT
            Not After : Feb  3 18:08:57 2026 GMT
        Subject: CN=AE010EA1267EDD5A05037951D000881E41C0B9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:16:68:e7:bd:8b:9f:df:ad:c0:cf:b1:ae:
                    64:eb:99:fa:15:23:d6:c6:ea:88:52:ce:19:61:99:
                    b7:04:e3:03:a0:75:e1:1e:9c:aa:9e:09:48:8d:aa:
                    71:d1:d3:4f:44:23:65:22:89:a4:db:f4:df:8a:59:
                    7c:e9:20:1b:fd:f3:55:26:f4:93:89:8d:18:04:ee:
                    dc:d5:b1:87:94:85:7b:e3:63:49:21:8a:cf:d3:3f:
                    88:34:78:19:75:dd:23:8b:e5:20:c3:64:36:94:49:
                    2f:74:89:94:31:ba:24:ec:9a:fb:89:72:ba:57:d8:
                    4f:ac:34:92:7a:15:3c:34:02:cc:d2:fa:7d:67:ce:
                    b0:56:f4:82:62:29:ae:54:53:37:a2:5f:03:8b:38:
                    d1:92:58:33:9f:5b:52:bb:d0:47:e2:3d:39:61:63:
                    b9:7d:1e:d1:80:7c:2e:a6:69:ff:85:c0:af:c2:f7:
                    49:2c:79:c4:93:8a:00:63:72:c1:cb:5b:bf:ea:70:
                    ea:d8:f8:7b:b8:26:8b:28:21:09:08:38:69:ee:09:
                    59:61:c3:01:15:6b:77:98:29:f2:7b:34:d0:fa:c7:
                    be:48:bc:d2:46:bd:88:1a:e3:fc:3c:41:ae:af:2b:
                    f7:0c:d9:10:8a:da:c9:94:cf:06:2a:e7:ca:d5:a0:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:0E:A1:26:7E:DD:5A:05:03:79:51:D0:00:88:1E:41:C0:B9:E3
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:f9:56:79:54:8b:ac:d5:d6:a1:de:89:4e:0d:ca:05:f9:
         19:8d:19:a9:c4:4e:ca:61:17:8c:6b:fb:96:c4:cb:3e:b9:1d:
         8f:40:30:ce:e7:4b:1f:1c:93:ee:45:94:28:6a:35:b5:8c:15:
         6e:70:7b:c6:2f:73:0a:d5:65:b2:08:c2:da:33:55:34:e0:e5:
         31:22:e3:d2:e4:7d:b6:38:97:4c:44:3c:b1:54:68:ac:47:9a:
         a5:38:69:d0:04:0a:fe:76:c7:5c:0d:eb:3a:a0:9c:0e:29:f3:
         e0:e3:58:0e:cd:69:fc:53:81:23:ba:f1:78:4f:04:87:11:64:
         99:a2:8b:2f:77:99:83:3a:5c:54:df:70:a8:bb:bf:be:a3:53:
         35:83:d9:f7:15:48:2d:ef:40:5f:36:ae:58:4f:9a:31:60:1d:
         92:c6:0f:93:e3:78:bf:d9:90:f4:ac:da:16:32:81:86:b6:af:
         b6:11:71:26:30:96:c7:35:89:ba:6c:e5:38:ff:f4:15:25:22:
         92:74:2a:19:06:0a:f8:cf:0a:4e:1b:ab:68:0b:3b:95:3b:a2:
         30:3b:5d:3e:a2:33:ae:e8:ec:67:0c:02:e1:a1:25:a6:98:12:
         37:66:f4:fe:cf:2d:68:58:c1:d0:da:93:b6:96:b0:79:bd:84:
         62:d3:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:10 2025 by rpki-client