Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa
File:                     3138362e302e3135322e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          1wxGWZ0ctYk/wFZSCMD27MHsKMycX7OUGO18cY3jC+4=
Subject key identifier:   66:7E:51:9B:62:0A:75:3D:A4:3E:36:B1:14:94:DA:83:61:BD:18:36
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       62A21F251272ABF970788A6AC459BCC979F7BC69
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa
Signing time:             Wed 12 Feb 2025 14:40:00 +0000
ROA not before:           Wed 12 Feb 2025 14:35:00 +0000
ROA not after:            Wed 11 Feb 2026 14:40:00 +0000
asID:                     202
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:1f:25:12:72:ab:f9:70:78:8a:6a:c4:59:bc:c9:79:f7:bc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Feb 12 14:35:00 2025 GMT
            Not After : Feb 11 14:40:00 2026 GMT
        Subject: CN=667E519B620A753DA43E36B11494DA8361BD1836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:1b:d1:ff:96:3f:68:f6:6e:63:9e:97:79:
                    42:8f:f6:42:66:88:2c:fc:68:2c:bf:cd:94:18:2e:
                    0b:c6:d8:79:4f:45:d8:90:48:73:1d:dd:f8:72:db:
                    97:19:72:16:78:cf:c7:25:0c:b8:28:b5:55:c6:87:
                    63:d3:36:77:14:71:24:0b:77:3a:eb:a3:34:b4:c3:
                    15:8b:1d:63:59:4e:cb:b3:3d:11:b4:ca:a9:10:10:
                    ac:33:fe:43:47:d2:3e:92:1b:57:ac:c8:18:e3:a4:
                    55:07:37:5b:65:77:c9:36:ed:2e:9f:40:37:14:2b:
                    8e:de:fa:16:53:c7:73:9b:8e:32:69:95:02:bb:dc:
                    d7:48:1b:28:5e:8a:1b:b9:5d:e5:8d:7f:7f:86:83:
                    78:cc:cb:57:05:1e:9f:58:0b:76:70:d2:63:1f:57:
                    86:2b:4b:5b:69:c7:79:a3:74:b7:60:c1:db:4f:cc:
                    c1:43:24:1b:b8:d9:06:9f:dd:94:ec:12:f1:6b:d3:
                    32:08:7f:e9:66:ba:bf:db:a1:4b:ea:a9:b5:b2:42:
                    4a:23:9f:89:96:ff:47:a8:b0:82:ed:ce:00:8f:6e:
                    32:66:bb:86:bc:cc:80:86:b2:4a:b0:bb:d7:b9:d5:
                    d9:0e:db:8d:57:b9:5b:ec:71:4a:6b:94:fc:c0:91:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7E:51:9B:62:0A:75:3D:A4:3E:36:B1:14:94:DA:83:61:BD:18:36
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:fa:ee:01:75:79:87:22:34:c7:fa:11:85:28:ed:5f:1a:
         93:75:a5:c3:a3:66:1c:d3:5f:95:62:c2:fb:8d:9f:6d:f1:a1:
         04:9f:2d:be:59:f6:57:23:1e:c1:cb:b5:8f:a7:72:c0:3c:96:
         33:bc:15:c8:f8:1f:f1:6f:02:00:c9:6d:b6:57:be:7e:06:d2:
         c4:32:46:1f:58:8b:c5:7b:a4:12:92:da:c5:06:20:99:66:63:
         fe:f5:3f:81:50:cf:5f:5a:58:dc:16:d6:30:7e:24:64:39:c7:
         0b:ea:ce:69:8b:ae:36:1c:0b:c6:51:56:9d:9d:da:dc:95:c4:
         1a:3a:ce:cf:12:e1:3c:94:27:54:ed:57:26:89:f4:4c:70:65:
         64:1f:22:32:a0:ca:b3:ef:db:9f:ec:56:7d:07:b7:68:58:7f:
         6c:4c:63:49:63:ea:7d:c9:41:2e:0d:8b:71:cd:fc:b3:bd:c8:
         2c:29:ea:a8:ea:42:4e:28:30:3d:cb:3e:57:e5:01:36:dd:12:
         6b:2e:c4:2b:17:e7:77:d9:0c:71:d2:d7:cf:d6:a9:42:c6:8d:
         0b:66:ef:ed:35:e0:a9:a1:39:b4:c0:6c:da:ed:3a:c8:a4:0e:
         0e:80:37:af:07:95:09:c3:3f:67:b0:7a:15:57:8d:f6:d0:b7:
         fe:47:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:15 2025 by rpki-client