Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa
File:                     3138362e3134392e302e302f31362d3234203d3e203238313138.roa (raw, json)
Hash identifier:          QQrWAD0M4G0FCp9CgZ9L3Hp9gn7iZCR0/vz41oVazys=
Subject key identifier:   7B:C9:45:FF:7A:EB:42:20:EE:A8:3A:5B:06:78:0B:67:55:1D:38:39
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       0C00122329E525E6729069FFA0310440B5CB3592
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:46:58 +0000
ROA not before:           Tue 04 Feb 2025 18:41:58 +0000
ROA not after:            Tue 03 Feb 2026 18:46:58 +0000
asID:                     28118
IP address blocks:        186.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:12:23:29:e5:25:e6:72:90:69:ff:a0:31:04:40:b5:cb:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:58 2025 GMT
            Not After : Feb  3 18:46:58 2026 GMT
        Subject: CN=7BC945FF7AEB4220EEA83A5B06780B67551D3839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:1b:fb:d0:00:57:f9:16:63:3f:14:41:73:
                    5e:60:a5:63:61:e9:6f:4e:bc:09:62:f8:97:19:cd:
                    2c:d4:e9:46:55:9e:f6:1b:12:3c:83:4c:0a:48:53:
                    19:95:e1:af:33:92:25:9f:2f:b2:7e:cf:11:22:00:
                    50:fa:c3:93:d7:f2:00:ba:36:c2:ed:5f:95:4b:01:
                    d2:c4:94:b8:9b:92:48:3d:f3:d8:e2:12:17:90:35:
                    4f:6c:d2:53:d8:ff:3d:07:63:18:f3:a0:2a:0f:98:
                    e6:f3:4c:7d:10:65:5e:0f:92:24:e7:74:cb:35:b7:
                    20:f3:6f:67:4c:fd:a9:a1:54:dc:e9:74:3a:d8:8c:
                    03:03:6d:6e:e9:bf:f1:09:21:82:2c:eb:b9:32:61:
                    11:0b:cd:09:83:4b:03:c1:ac:75:cb:f0:f7:91:60:
                    3d:44:20:66:2b:57:85:d0:46:13:a2:e4:6d:c9:8c:
                    2a:35:ec:d0:be:79:00:37:53:9f:f5:54:45:38:d1:
                    e7:53:57:22:27:cb:dc:dc:c0:ad:e5:94:ff:af:c4:
                    bf:79:1b:a6:1d:88:43:20:43:1d:76:2c:e6:0c:a4:
                    d4:12:01:19:f3:60:aa:45:48:42:13:7d:b7:7a:d2:
                    98:db:db:22:fb:e8:69:c6:4a:84:c4:e1:d6:70:ec:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:45:FF:7A:EB:42:20:EE:A8:3A:5B:06:78:0B:67:55:1D:38:39
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:a6:f8:91:98:69:0c:c4:c1:23:99:5f:92:2b:2b:a0:51:
         71:db:46:65:cc:b0:a5:76:f9:32:ce:e8:37:31:f4:74:3b:74:
         fb:eb:c8:f1:ee:a4:03:41:22:dc:f8:1d:08:b3:57:f4:84:27:
         00:d7:61:59:9b:2c:b8:3e:84:3d:ec:3f:d3:ab:00:f1:6e:a9:
         59:36:26:8c:bf:33:e7:81:c0:e5:33:1e:24:2d:aa:77:7a:53:
         b0:1b:eb:01:6f:ed:6a:8d:11:8a:b6:2d:e1:19:b6:3f:75:3b:
         c5:c2:6b:6a:0a:67:0b:59:6f:18:a6:41:d3:6b:86:83:1d:99:
         ed:c5:0c:e8:11:90:54:25:ac:26:91:2a:2f:df:83:a4:b4:3a:
         a6:cb:c0:06:81:bd:dd:ea:9b:90:de:63:77:0a:9a:f1:ca:64:
         79:36:4c:a0:f8:8b:80:ec:4d:37:f3:11:6d:b9:9e:e4:56:ab:
         9a:a7:b0:05:c2:5e:54:e0:a8:29:a1:d7:24:1d:f3:1a:b0:e3:
         1f:9a:55:85:6b:46:3a:d0:4f:5f:f2:32:97:a4:a8:dc:f5:e0:
         2b:32:37:73:66:36:f6:19:32:cf:be:a1:9a:99:fc:7d:2b:16:
         5b:9e:8a:13:2e:33:ce:99:bd:a2:f6:88:21:55:7d:5f:09:1c:
         33:39:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client