Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa
File:                     3138362e3134392e302e302f31362d3234203d3e203132303636.roa (raw, json)
Hash identifier:          gjdXiOvSJZZnG6U3TF1wDvBfHTIDGE2EVqBFiBM8+oE=
Subject key identifier:   0B:C1:4A:46:43:95:C1:28:D6:9F:C6:FB:93:F8:01:48:8A:BB:6C:9D
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       2E801DA37309E14795E1CE2C534775050F97DFC9
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:47:04 +0000
ROA not before:           Tue 04 Feb 2025 18:42:04 +0000
ROA not after:            Tue 03 Feb 2026 18:47:04 +0000
asID:                     12066
IP address blocks:        186.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:1d:a3:73:09:e1:47:95:e1:ce:2c:53:47:75:05:0f:97:df:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:04 2025 GMT
            Not After : Feb  3 18:47:04 2026 GMT
        Subject: CN=0BC14A464395C128D69FC6FB93F801488ABB6C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:b1:74:28:51:64:81:46:96:46:4a:d0:7e:
                    32:3c:9d:80:d0:51:c5:e9:23:5b:00:17:76:10:53:
                    30:df:86:40:23:7e:87:b4:86:ab:b9:aa:00:0b:d3:
                    59:a4:aa:c6:ab:cf:b9:11:dc:8f:6c:41:ac:08:00:
                    36:4f:39:17:4d:cc:90:12:9b:5a:81:41:dc:b1:9e:
                    3d:e7:ab:f6:b7:3d:c6:a3:9e:8d:52:e9:e0:38:27:
                    8a:30:57:3c:b9:76:09:c8:20:e8:29:56:91:7e:fe:
                    7c:22:80:11:1d:ef:23:47:f1:00:58:69:f9:f3:e6:
                    7a:34:6f:fe:4e:66:9c:f8:d4:3e:ff:17:a1:b2:af:
                    ce:cc:bf:57:02:f9:ab:66:7b:59:9c:b8:80:51:a0:
                    43:7a:1c:5e:67:97:a8:e0:f5:ac:1a:11:e2:9b:37:
                    7d:d2:ae:b5:7d:7a:b4:19:5b:27:75:f5:05:e6:17:
                    6e:32:65:e1:8f:e4:bf:0d:c9:dc:9d:30:d9:f8:22:
                    0d:19:a1:c7:ef:b3:fe:e1:a0:8b:9e:2c:9c:4e:7a:
                    1e:46:4a:38:3c:5d:e2:23:4e:5d:fa:f6:10:14:2b:
                    5d:e6:7d:39:26:bd:3b:38:2a:51:f5:96:23:0e:98:
                    60:1b:39:71:f7:83:20:24:d9:94:2a:95:9e:5f:a1:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C1:4A:46:43:95:C1:28:D6:9F:C6:FB:93:F8:01:48:8A:BB:6C:9D
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:07:c7:df:50:b6:f0:b7:a4:6d:55:cd:dd:69:9a:70:f4:d1:
         0f:72:b9:eb:ac:fa:2b:3b:f2:68:66:f5:e9:9b:ca:9a:5a:af:
         3a:84:35:6b:f3:aa:ca:24:2a:86:70:fb:b2:29:c9:7a:40:6e:
         f5:c9:bb:7d:cb:b7:1b:c6:ab:ea:96:64:1b:23:e3:d5:68:b2:
         22:30:61:9f:d0:7a:db:d2:eb:91:08:db:93:e7:81:5a:55:64:
         16:7e:d0:28:87:95:bc:99:32:41:3a:c7:8e:1d:53:9c:8f:f2:
         03:3e:69:d4:8e:4a:77:b3:34:5e:f0:ac:6f:26:05:23:0b:13:
         9c:c3:e4:24:f8:2a:d1:61:97:3f:bb:0a:64:ee:e8:a7:ea:cb:
         d7:28:0f:b8:ca:ec:c1:d6:40:36:bb:42:48:c3:e3:ba:91:59:
         24:bc:4a:5e:4f:27:6a:ad:1e:59:95:22:dc:89:54:e1:e2:97:
         cf:7e:f1:b7:d4:07:ac:ae:35:83:b3:2b:f8:3b:4b:5d:50:89:
         dc:58:33:da:b1:86:63:7d:2c:53:e9:12:25:cf:43:6b:71:4c:
         56:73:94:19:21:09:b0:14:5a:f3:4f:a3:67:f1:96:71:91:35:
         a8:ef:52:3e:0d:5b:0d:b7:fe:e5:78:99:f1:09:6f:22:f9:d2:
         9f:9d:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client