Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa
File:                     3138362e36352e3132382e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          L4/QislVuDoq4E4lM87rRQ2xeoBFjrust3jkHq3Kj+E=
Subject key identifier:   E8:2D:FB:C8:48:1F:7D:0C:6F:01:6A:0F:F3:19:89:D8:E2:1C:BE:3E
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       2CF01BA4610A95A90F64A668A9148713C5BBF72A
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:12:56 +0000
ROA not before:           Tue 04 Feb 2025 18:07:56 +0000
ROA not after:            Tue 03 Feb 2026 18:12:56 +0000
asID:                     7418
IP address blocks:        186.65.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f0:1b:a4:61:0a:95:a9:0f:64:a6:68:a9:14:87:13:c5:bb:f7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:56 2025 GMT
            Not After : Feb  3 18:12:56 2026 GMT
        Subject: CN=E82DFBC8481F7D0C6F016A0FF31989D8E21CBE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:f6:1c:4d:61:46:00:46:e2:70:c5:99:f9:
                    e3:af:2f:56:f0:11:2d:c5:89:bd:7e:18:9c:50:df:
                    ea:05:25:52:b0:62:bc:32:67:53:38:16:c0:03:b6:
                    94:0c:9d:2f:ae:b8:3a:83:9b:1d:20:17:78:66:32:
                    d7:a0:22:29:a7:29:3e:29:09:00:04:1a:42:15:70:
                    43:51:34:3e:37:60:63:6a:e9:ff:7f:40:1c:21:8e:
                    ef:46:4c:ef:ca:3a:15:bf:91:fa:5f:34:8c:59:99:
                    82:88:52:fd:64:ae:85:06:12:a3:b4:f0:c5:52:2c:
                    0e:8a:53:9d:31:71:94:77:3c:e3:f6:3d:24:7c:c4:
                    c5:9d:2a:cd:55:67:ac:36:ab:37:f3:92:63:b7:bd:
                    be:0a:a5:cf:86:ff:a4:3b:3f:ae:2d:c2:77:02:25:
                    05:ce:e5:2a:10:e3:29:95:3e:50:41:9c:9f:fb:04:
                    aa:6c:d7:19:0e:e8:89:4f:43:6e:d4:41:49:e7:c0:
                    0b:28:b4:f2:4b:c0:aa:be:c3:72:15:78:c4:61:bb:
                    24:b3:2d:e7:e3:11:70:88:0f:bb:86:f2:4c:48:15:
                    e7:4c:ce:b5:34:1e:2e:0d:8c:d9:a0:a6:80:e3:91:
                    36:4f:08:59:e5:7e:fd:2d:5f:1c:61:32:6b:a6:37:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:FB:C8:48:1F:7D:0C:6F:01:6A:0F:F3:19:89:D8:E2:1C:BE:3E
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:75:62:ee:07:08:f7:99:5b:a8:6e:07:bf:fc:62:21:6a:bd:
         b7:45:12:37:b5:00:c9:19:10:b0:70:ce:b8:07:0a:fa:58:ae:
         98:dd:72:8d:af:a4:24:39:0f:49:5f:60:7c:85:48:bc:4a:a9:
         3f:80:e6:08:04:1c:d7:6f:e8:1c:8f:1f:25:f4:00:63:ea:29:
         59:b7:3e:16:48:ff:f2:a9:a8:a0:b4:04:50:79:20:7f:d9:6b:
         af:5f:5c:52:e6:4a:72:47:f5:6e:11:47:f4:1f:cf:71:ca:38:
         f6:a8:3a:cd:a9:67:00:d6:c0:92:df:76:01:21:ed:2e:77:87:
         9b:c6:2c:02:8f:3d:fc:70:4e:c0:46:de:6e:76:88:4a:01:87:
         fb:bb:95:bd:c1:39:1d:0d:9a:11:6a:f8:53:f4:93:16:55:18:
         8e:0e:97:5b:a7:c3:a6:69:b9:b7:6d:76:0e:a1:65:27:7c:70:
         d0:0b:9f:00:f8:03:c8:5f:b1:c6:de:61:f3:4f:2b:70:03:95:
         8d:e7:3c:f8:50:25:15:80:71:7c:15:e9:d2:53:f7:1d:ae:76:
         ae:d4:e5:3b:5e:3d:e0:e1:08:d2:d7:be:96:8d:d0:ee:da:5d:
         70:c9:80:b9:ca:f7:9b:91:16:5a:28:a5:ce:89:1b:ee:2c:24:
         77:ce:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:56 2025 by rpki-client