Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa
File:                     3138362e302e3138382e302f32322d3234203d3e203233323031.roa (raw, json)
Hash identifier:          jLfNZ8WaGVDzs7qhMangXasuIMLh+nTBXYs0/KdIU7g=
Subject key identifier:   53:69:79:8D:38:70:D7:EB:71:A5:9C:4E:E1:1C:C0:44:E8:F1:87:25
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       31B76520F8CFA174DF6DA858DEEE33DAFF050756
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa
Signing time:             Tue 04 Feb 2025 18:40:30 +0000
ROA not before:           Tue 04 Feb 2025 18:35:30 +0000
ROA not after:            Tue 03 Feb 2026 18:40:30 +0000
asID:                     23201
IP address blocks:        186.0.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b7:65:20:f8:cf:a1:74:df:6d:a8:58:de:ee:33:da:ff:05:07:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Feb  4 18:35:30 2025 GMT
            Not After : Feb  3 18:40:30 2026 GMT
        Subject: CN=5369798D3870D7EB71A59C4EE11CC044E8F18725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:dd:ad:69:7d:b3:87:d2:e5:ab:de:dc:7b:
                    b6:66:91:4c:a4:50:7f:53:72:5a:07:c9:e5:ab:14:
                    be:0a:d9:07:85:96:b5:f6:ed:1c:bd:e8:1f:a4:1b:
                    5c:72:a5:a8:c7:c2:0e:09:d9:00:53:9d:76:a6:60:
                    b3:57:75:26:2f:da:23:76:96:7a:4d:45:9c:3c:be:
                    61:c3:00:a9:74:47:8d:b1:fb:29:6b:7d:85:2c:6e:
                    97:97:62:d3:2e:ef:83:a1:e6:c5:f7:fb:8d:a7:e3:
                    79:18:5f:75:2e:32:2d:0f:3c:19:d1:6b:9e:c8:cc:
                    78:44:fb:d7:3c:aa:ca:12:06:58:d4:38:cb:da:14:
                    2f:9f:1e:7b:ec:d2:35:29:fd:9d:e8:7c:94:71:7d:
                    3c:e8:51:33:04:8c:95:14:83:f1:16:e7:6f:3b:b5:
                    96:d4:7e:a7:22:48:81:8f:30:96:55:c2:d8:75:e8:
                    cb:44:2e:05:d6:be:0c:4b:4e:1f:92:a5:83:06:e0:
                    70:01:cf:76:a7:72:3f:6c:fe:55:33:e7:e4:6c:7f:
                    d6:02:a6:1a:46:10:2b:57:0d:c4:cf:35:6f:83:21:
                    9c:af:ab:27:4a:05:df:26:c8:b2:80:04:8d:72:f5:
                    e3:24:9d:8d:26:3f:be:57:85:c9:6f:31:5a:8f:52:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:69:79:8D:38:70:D7:EB:71:A5:9C:4E:E1:1C:C0:44:E8:F1:87:25
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:a1:53:69:81:78:43:1c:24:ad:d4:33:15:66:40:db:5e:
         2a:3a:73:7f:51:a2:70:ea:5f:30:14:06:15:5a:be:1a:85:a5:
         74:0f:a3:8d:fe:09:46:c6:4a:be:87:32:8f:39:37:45:22:76:
         78:44:06:22:7a:d6:6f:a4:0e:f4:6f:92:83:e4:6d:2e:10:05:
         4d:ac:28:71:85:38:93:ef:c8:b1:b0:d8:aa:6d:d8:92:38:5a:
         6a:58:49:80:29:69:63:d6:94:a3:4f:2e:87:89:63:1b:02:20:
         02:50:ba:20:6d:d3:e5:35:11:76:1a:2c:e0:fe:97:6a:47:9d:
         2c:82:3a:c0:1c:14:9d:fb:c9:c3:90:b3:55:e1:09:59:f1:dc:
         ab:8f:76:8b:0f:7c:c3:7a:fa:13:2b:26:62:43:c2:b9:f5:29:
         da:c6:9a:f9:16:22:1a:77:72:f2:00:92:34:b8:8e:42:97:55:
         98:5f:67:7e:ff:d5:74:fc:a1:99:f4:94:2b:7b:04:72:d9:72:
         7f:33:85:76:e2:0a:43:81:69:bd:2e:f4:05:9b:8b:f6:db:aa:
         fb:88:9c:6b:76:62:7d:31:13:1a:ed:5e:6e:8f:67:ac:90:28:
         35:e2:c4:6d:42:0e:73:92:90:d7:cd:e5:0f:02:22:c7:b8:2a:
         80:6a:ff:67
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMbdlIPjPoXTfbahY3u4z2v8FB1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1NzQwMEFFNDJBMEEyMkEzRTYxODMwNEExNTAyRTBF
MEMwMURDQTAeFw0yNTAyMDQxODM1MzBaFw0yNjAyMDMxODQwMzBaMDMxMTAvBgNV
BAMTKDUzNjk3OThEMzg3MEQ3RUI3MUE1OUM0RUUxMUNDMDQ0RThGMTg3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gN2taX2zh9Llq97ce7ZmkUyk
UH9TcloHyeWrFL4K2QeFlrX27Ry96B+kG1xypajHwg4J2QBTnXamYLNXdSYv2iN2
lnpNRZw8vmHDAKl0R42x+ylrfYUsbpeXYtMu74Oh5sX3+42n43kYX3UuMi0PPBnR
a57IzHhE+9c8qsoSBljUOMvaFC+fHnvs0jUp/Z3ofJRxfTzoUTMEjJUUg/EW5287
tZbUfqciSIGPMJZVwth16MtELgXWvgxLTh+SpYMG4HABz3ancj9s/lUz5+Rsf9YC
phpGECtXDcTPNW+DIZyvqydKBd8myLKABI1y9eMknY0mP75XhclvMVqPUp8jAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUU2l5jThw1+txpZxO4RzAROjxhyUwHwYDVR0j
BBgwFoAUmFdACuQqCiKj5hgwShUC4ODAHcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0IyQTYzRDY2RjQyQ0I2RTUwMzU0QTYyOUJGQjVBNjhB
M0ZDNkY5NkRDMkEyMDQzQTc1MUQzQTlDOUQ0MzIxLzAvOTg1NzQwMEFFNDJBMEEy
MkEzRTYxODMwNEExNTAyRTBFMEMwMURDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODU3NDAwQUU0MkEwQTIyQTNF
NjE4MzA0QTE1MDJFMEUwQzAxRENBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdCMkE2M0Q2NkY0MkNCNkU1MDM1NEE2MjlCRkI1QTY4QTNGQzZGOTZE
QzJBMjA0M0E3NTFEM0E5QzlENDMyMS8wLzMxMzgzNjJlMzAyZTMxMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzMzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6ALwwDQYJ
KoZIhvcNAQELBQADggEBAE05oVNpgXhDHCSt1DMVZkDbXio6c39RonDqXzAUBhVa
vhqFpXQPo43+CUbGSr6HMo85N0UidnhEBiJ61m+kDvRvkoPkbS4QBU2sKHGFOJPv
yLGw2Kpt2JI4WmpYSYApaWPWlKNPLoeJYxsCIAJQuiBt0+U1EXYaLOD+l2pHnSyC
OsAcFJ37ycOQs1XhCVnx3KuPdosPfMN6+hMrJmJDwrn1KdrGmvkWIhp3cvIAkjS4
jkKXVZhfZ37/1XT8oZn0lCt7BHLZcn8zhXbiCkOBab0u9AWbi/bbqvuInGt2Yn0x
ExrtXm6PZ6yQKDXixG1CDnOSkNfN5Q8CIse4KoBq/2c=
-----END CERTIFICATE-----