Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31362e302f32302d3230203d3e2036333036.roa
File:                     3138362e32342e31362e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          mFOd/s+AAG0Jlsj5AaapxxuyDC6JY1VdI5IpVklrM8E=
Subject key identifier:   17:1C:0E:9F:50:BA:3C:4F:AD:31:57:B3:31:23:07:EA:1F:82:3B:0F
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       3C00452619A5CE84FB7E38756245912C92A3C598
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31362e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:32:59 +0000
ROA not before:           Tue 04 Feb 2025 18:27:59 +0000
ROA not after:            Tue 03 Feb 2026 18:32:59 +0000
asID:                     6306
IP address blocks:        186.24.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:45:26:19:a5:ce:84:fb:7e:38:75:62:45:91:2c:92:a3:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:27:59 2025 GMT
            Not After : Feb  3 18:32:59 2026 GMT
        Subject: CN=171C0E9F50BA3C4FAD3157B3312307EA1F823B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:8a:11:34:8d:b2:80:7e:e9:d7:ca:1f:52:
                    cd:6f:e2:46:f6:a7:9b:13:12:8f:fc:f1:b5:db:87:
                    99:47:c3:a0:5f:30:5c:aa:29:e1:fd:35:18:02:df:
                    6c:3d:fc:fc:c3:2d:35:1b:8f:17:2e:bd:88:b6:79:
                    23:d8:ec:a9:c8:1a:40:45:ea:97:fc:7f:f1:60:8d:
                    9a:f5:77:98:88:60:a2:bc:ad:4d:35:e5:35:1a:7a:
                    40:3b:50:16:3b:13:85:e5:db:6f:bc:70:72:c6:5b:
                    9e:f6:3b:5e:fa:4d:f3:10:81:70:7a:b7:6c:e0:d2:
                    a6:2f:49:6c:17:51:dc:b2:7d:4b:7c:c5:68:7e:94:
                    50:4a:d9:2f:52:1a:34:cf:fc:f8:33:e2:f6:b3:a9:
                    50:4f:3b:ee:82:94:0f:f3:5d:53:0e:bc:12:53:43:
                    b6:08:6b:c4:cc:f6:dd:22:d1:d7:1f:ba:97:76:3c:
                    bc:46:97:2b:6c:6e:48:25:35:30:51:21:12:ab:9a:
                    75:5d:18:11:7c:70:f5:bf:25:34:05:fa:dc:2d:0b:
                    3c:d8:08:37:09:a2:b1:25:32:4f:a6:4a:74:58:c1:
                    48:49:6e:c7:e8:8a:64:de:77:41:1c:f4:2a:74:af:
                    16:57:51:4d:74:14:7d:8c:8e:06:8c:86:6a:39:54:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:0E:9F:50:BA:3C:4F:AD:31:57:B3:31:23:07:EA:1F:82:3B:0F
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31362e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:58:3b:07:91:bc:5b:dd:1c:41:1d:5f:88:f3:91:87:ee:
         2c:12:33:65:6b:95:6d:f4:54:c4:c8:59:c2:28:47:3f:a9:2b:
         de:de:84:13:31:9b:f7:59:4f:bc:c0:26:ee:5c:81:41:7f:87:
         c3:fa:d6:c7:2a:38:ab:6f:98:8f:f8:0a:6b:41:72:d0:e7:a0:
         cf:5b:40:37:df:e9:a0:3b:a2:54:15:3b:0c:0c:90:3e:bd:b1:
         b5:8c:a6:28:fa:1c:26:e7:99:9e:91:49:5b:2b:66:7b:db:27:
         e3:6e:2f:87:14:8c:57:04:cb:a4:85:17:f3:bf:0c:1f:82:83:
         1e:b9:62:3c:50:3d:0b:36:61:b4:13:e6:56:4f:78:27:3c:f4:
         71:aa:c8:ca:fa:90:ac:33:8f:c8:35:0d:40:cf:e7:b1:8a:67:
         c9:03:30:50:c6:d1:3e:4a:1a:98:0c:92:bf:2d:1e:37:87:77:
         b8:fe:65:7d:75:6b:88:e3:56:fd:ce:0f:d9:fc:f2:12:71:a3:
         71:62:fd:a4:1a:10:d1:66:d7:46:52:51:09:d8:30:06:06:b0:
         b6:a7:ac:cb:14:bf:ea:d9:24:1b:1f:cf:6c:b7:2d:38:79:65:
         55:9a:77:b5:c9:2f:a3:7d:a5:60:46:bb:92:77:5b:6b:e4:49:
         d0:c9:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:32 2025 by rpki-client