Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234362e302f32342d3234203d3e20323730303833.roa
File:                     3138362e302e3234362e302f32342d3234203d3e20323730303833.roa (raw, json)
Hash identifier:          zuJT3wih0hkNQYNUCd1h650B4D4gQ1vnHZpDJQxBrTw=
Subject key identifier:   95:11:8C:78:53:75:9E:18:D2:60:17:25:F3:61:4D:AB:D5:AB:53:B8
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       56B35BE8B702E7C6BCCCDBD273D409C8B57706D9
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234362e302f32342d3234203d3e20323730303833.roa
Signing time:             Tue 04 Feb 2025 20:00:09 +0000
ROA not before:           Tue 04 Feb 2025 19:55:09 +0000
ROA not after:            Tue 03 Feb 2026 20:00:09 +0000
asID:                     270083
IP address blocks:        186.0.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:5b:e8:b7:02:e7:c6:bc:cc:db:d2:73:d4:09:c8:b5:77:06:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Feb  4 19:55:09 2025 GMT
            Not After : Feb  3 20:00:09 2026 GMT
        Subject: CN=95118C7853759E18D2601725F3614DABD5AB53B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:bc:9c:37:e6:cf:08:c8:ac:4a:1a:f9:2c:
                    88:91:b5:70:16:96:1b:6a:a4:a5:ff:4a:ea:83:9f:
                    69:89:98:b2:79:e3:ce:55:23:13:98:48:c4:f7:d1:
                    ed:ed:b5:3d:01:c0:f6:6f:14:b7:0e:41:e4:23:a8:
                    bf:ea:af:11:ed:75:cc:1b:5b:d2:77:21:8a:16:d4:
                    32:28:71:19:fe:ee:0c:f0:b1:a9:1c:96:48:b6:96:
                    02:30:fd:13:34:2e:18:5d:b8:d1:ca:2e:2e:51:5d:
                    12:89:1e:0f:51:ae:98:9d:df:f9:b9:e0:fe:85:47:
                    a7:02:30:43:9d:e8:33:81:5d:0a:77:8b:7d:ba:64:
                    25:59:80:ae:4a:26:4d:eb:5c:51:48:c1:64:b5:0a:
                    ea:a2:cf:ad:66:d4:45:5a:8a:55:b3:1c:5e:e8:ff:
                    2f:96:61:10:0b:b2:e0:d1:0d:02:23:4c:c6:81:28:
                    b6:17:b3:aa:46:4a:b2:e2:9a:df:ce:d2:58:42:e9:
                    67:5e:b6:3d:fc:a5:9e:57:1e:be:25:a1:0b:fd:5f:
                    f5:2e:12:d3:2a:51:46:e2:85:10:58:65:aa:79:39:
                    b1:34:b8:1d:2e:77:b6:bb:b9:1d:93:63:8b:74:c9:
                    14:2f:ab:87:18:f0:09:54:e0:8a:ba:31:49:f9:51:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:11:8C:78:53:75:9E:18:D2:60:17:25:F3:61:4D:AB:D5:AB:53:B8
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234362e302f32342d3234203d3e20323730303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:62:cd:b7:d5:62:0f:39:4b:74:15:5e:34:20:0f:0d:49:
         a5:0f:f6:f5:61:b9:29:58:b9:4b:e7:ee:e1:35:a6:37:23:da:
         76:87:69:36:fe:88:6d:ef:51:91:f6:be:5f:57:22:03:c5:ce:
         18:0c:d3:a3:01:f2:8d:c8:e5:6e:b8:bc:da:e2:64:87:5b:15:
         f0:fa:e2:59:28:23:86:f6:7d:73:9a:e8:01:95:c2:fa:6b:ab:
         83:7a:26:66:d7:7f:ee:f7:50:83:67:da:12:7a:07:dc:61:8c:
         b3:a5:58:ab:e1:8d:c8:73:41:c0:fc:88:9e:bb:0d:16:2f:08:
         31:38:89:37:30:b7:6a:3a:bb:96:9e:31:c6:a7:a4:83:67:78:
         0a:8c:18:4b:da:19:07:e9:6b:44:10:e5:c1:a4:c9:c7:80:9f:
         11:ff:69:e6:c7:82:a2:e6:82:f8:46:93:1d:38:a7:a6:7b:92:
         b4:40:a3:33:37:2f:01:41:be:70:48:07:af:a4:fa:32:05:f8:
         f6:fe:e3:ad:ae:aa:62:95:00:a3:e0:bc:4c:8d:6c:23:0f:87:
         54:a8:3c:5a:fb:70:02:25:93:25:c2:98:a1:1d:43:c2:e4:21:
         7c:e8:87:b2:2b:f2:27:62:c9:9d:ba:03:1e:9e:b5:70:46:90:
         25:bf:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:37 2025 by rpki-client