Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa
File:                     3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa (raw, json)
Hash identifier:          OS/EwhXo3janaHLsYElgzUGXvfoHnlK0m2q2CqNMojc=
Subject key identifier:   C5:0D:85:4A:4B:FB:62:98:E1:5A:06:25:C2:8B:BD:25:C6:9C:A8:F7
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       70EBA306A9E140760B01F1F3441E5E5D363ADD3A
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 18:52:05 +0000
ROA not before:           Tue 04 Feb 2025 18:47:05 +0000
ROA not after:            Tue 03 Feb 2026 18:52:05 +0000
asID:                     10778
IP address blocks:        168.196.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:eb:a3:06:a9:e1:40:76:0b:01:f1:f3:44:1e:5e:5d:36:3a:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Feb  4 18:47:05 2025 GMT
            Not After : Feb  3 18:52:05 2026 GMT
        Subject: CN=C50D854A4BFB6298E15A0625C28BBD25C69CA8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:03:ca:36:8b:86:99:4b:b3:08:c1:e9:66:
                    02:93:65:3d:c1:18:35:eb:e1:7b:b5:ee:ee:79:1e:
                    d7:39:e3:17:16:bd:a5:4b:d4:5e:ee:08:c3:53:bf:
                    b9:93:7a:ec:61:1d:cd:51:38:1b:19:ce:31:10:b4:
                    a8:56:8f:cb:63:5f:37:62:40:f0:a5:73:be:d4:46:
                    61:87:f5:9b:56:f9:cb:35:ee:45:86:a7:92:cc:01:
                    41:fc:d2:16:a6:b6:8e:aa:28:fa:4e:b0:55:14:73:
                    90:80:05:31:d9:64:8e:89:ac:92:b1:5b:0b:8e:c0:
                    c5:7f:81:37:1f:2c:be:73:88:22:d5:86:76:c9:9e:
                    b4:32:c6:16:15:45:b6:ce:8f:30:9d:e0:9c:0b:f5:
                    3a:0a:3d:a2:64:3f:7e:43:f4:fa:30:7e:33:6f:5d:
                    34:95:09:32:cd:5a:b8:59:a2:6d:49:5a:fe:f9:4d:
                    17:ab:cd:80:e5:f0:73:73:25:a6:86:a2:ee:a0:76:
                    50:b8:f7:c8:2e:16:57:34:7f:41:ff:cd:1f:fe:c3:
                    8b:8a:66:20:83:f9:cc:bb:7a:09:53:ad:02:7b:8e:
                    2b:7f:fe:d6:fb:3f:b6:cb:4a:08:34:2b:fa:67:0c:
                    00:00:90:f4:5e:f3:e1:76:9c:2c:9d:b0:68:d2:73:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0D:85:4A:4B:FB:62:98:E1:5A:06:25:C2:8B:BD:25:C6:9C:A8:F7
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:7a:70:1b:f0:7e:43:ea:99:2b:5e:4d:93:93:2b:d2:08:
         a2:d0:07:5e:a1:53:08:57:93:a3:b0:84:05:c0:c2:28:ec:6f:
         ad:68:23:77:a6:11:9d:63:64:0d:26:d9:39:f7:e0:34:ed:f8:
         47:cc:7c:43:0a:36:16:df:1c:30:80:44:6f:4d:1b:3a:93:3c:
         50:e8:9b:62:26:ff:e5:59:ec:48:db:e2:04:2e:c8:3e:96:e0:
         03:70:0b:fa:b9:bf:f2:91:a7:9a:fe:6a:f4:2e:5f:77:ff:31:
         71:56:3a:6a:f1:5d:0c:75:89:3d:d8:6a:8c:07:31:75:bd:b6:
         60:b7:1d:5a:0a:99:36:61:85:51:2b:bc:bb:31:53:f2:4a:38:
         45:a6:a2:93:c8:ae:d1:3a:4b:47:9e:c0:a9:2a:19:14:98:5b:
         bf:0b:cc:21:bd:eb:7f:00:88:fe:c6:46:0e:67:f3:91:61:8f:
         43:27:ab:ce:2a:eb:c2:52:40:db:77:13:10:26:2d:26:93:f2:
         7e:11:b8:b0:43:43:82:c5:b0:73:8e:bf:b1:25:36:27:4b:7f:
         ce:5c:2b:f8:5b:ee:34:c3:b4:a9:65:7e:e6:56:33:6f:f2:85:
         50:21:93:d3:24:ec:33:97:ba:45:ca:ec:2d:5c:b1:a8:0c:b4:
         6b:48:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:40 2025 by rpki-client