Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32342d3234203d3e20323634383237.roa
File:                     3138372e3130322e3139322e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          +C7EI/JUeAUEDvlCqKTPmVBN9mZFH4Wt9QrB/CKFF5U=
Subject key identifier:   23:8D:2C:D7:74:42:A1:0D:F5:11:53:BD:45:46:DD:A3:AB:50:DD:9D
Certificate issuer:       /CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
Certificate serial:       5068FEB881AF342286D711D185420A8871E9874E
Authority key identifier: 9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32342d3234203d3e20323634383237.roa
Signing time:             Tue 04 Feb 2025 19:58:22 +0000
ROA not before:           Tue 04 Feb 2025 19:53:22 +0000
ROA not after:            Tue 03 Feb 2026 19:58:22 +0000
asID:                     264827
IP address blocks:        187.102.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:68:fe:b8:81:af:34:22:86:d7:11:d1:85:42:0a:88:71:e9:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
        Validity
            Not Before: Feb  4 19:53:22 2025 GMT
            Not After : Feb  3 19:58:22 2026 GMT
        Subject: CN=238D2CD77442A10DF51153BD4546DDA3AB50DD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:a0:21:87:bf:49:3d:18:5b:c1:bd:d6:32:
                    cd:25:d8:22:06:05:e8:63:ca:63:cb:dc:f6:61:13:
                    bf:b3:6c:88:f2:0b:a9:5c:48:f9:d4:c9:f1:f3:d2:
                    5b:c5:3d:de:cf:5b:91:36:c6:88:b3:b3:6e:c1:42:
                    ea:b3:c2:42:e4:3c:a9:d4:28:77:2d:ca:3c:b3:32:
                    93:fc:21:e6:9c:ca:84:47:ad:51:35:d6:bb:39:79:
                    32:6b:71:9e:40:fb:b9:a4:95:05:cd:f4:59:18:41:
                    04:6e:93:c1:da:be:63:a3:6b:e2:46:65:98:d7:7f:
                    ba:b9:a8:77:10:fd:67:1a:9c:c6:e4:f1:18:c7:54:
                    90:b0:02:70:aa:9d:07:b5:69:6f:b3:7b:61:6d:0e:
                    5a:59:d2:b7:9a:eb:8f:6b:4e:80:96:a1:c9:88:06:
                    0b:93:72:d5:c6:18:bd:94:0d:46:06:f7:65:c1:3f:
                    d0:a2:2f:b9:6c:89:7b:66:f7:76:d0:04:32:bc:c0:
                    c2:e7:0c:72:5e:c9:4f:68:1c:52:ec:6d:5d:be:6a:
                    df:d1:bc:d8:9e:b4:28:fe:be:82:1e:c0:c6:9a:d5:
                    d0:04:8e:9c:f2:14:11:3e:a4:f4:8d:13:35:0c:cc:
                    14:55:75:f2:c3:47:e1:4d:99:51:a6:7d:e2:66:a5:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:2C:D7:74:42:A1:0D:F5:11:53:BD:45:46:DD:A3:AB:50:DD:9D
            X509v3 Authority Key Identifier:
                keyid:9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32342d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:9d:c4:15:f5:08:1f:0f:e8:5e:fb:2d:3c:40:09:99:3f:
         23:b8:0a:e0:ce:1f:e9:b5:a5:ad:a3:be:44:60:4d:65:4c:3b:
         3b:26:60:cb:16:ee:b6:8a:8b:2c:51:12:12:55:ae:de:6f:64:
         30:78:9e:08:e1:93:55:ad:59:f9:b7:bc:e9:ba:45:95:ec:3f:
         ae:a2:f8:56:f6:82:2f:51:fd:bc:55:42:3c:9d:ff:8c:45:51:
         5e:52:c2:2f:c9:be:91:b5:46:06:a8:4a:bd:ac:3e:9a:e7:18:
         44:46:d8:63:09:cb:19:dc:0a:de:09:e2:6b:01:fb:cf:c1:9b:
         39:1b:53:04:47:db:16:64:d5:2d:7f:08:bc:73:0d:35:1c:36:
         ef:da:f9:63:a8:3e:ee:ae:78:32:25:71:7c:fc:e9:96:ca:b2:
         8b:be:ba:ba:21:5d:d3:ef:43:95:41:e5:27:cf:85:34:1a:45:
         3a:18:3c:c3:db:20:13:e4:77:84:82:ce:48:b2:03:ab:69:c0:
         62:a5:e0:2f:7d:da:90:1a:48:f3:8d:e7:6e:cd:3e:45:55:62:
         83:a7:a4:cd:37:86:3a:6d:06:1e:99:7a:ff:18:64:1d:ea:2d:
         c5:69:66:87:ee:aa:73:16:50:12:9b:e3:f4:22:fb:8a:3e:55:
         f0:9f:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:06 2025 by rpki-client