Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa
File:                     3138362e382e3132382e302f31382d3234203d3e203139343232.roa (raw, json)
Hash identifier:          dOw9DS0xJ2fF9C59FrP7EPNNjYus+NpND8jK4aasxz8=
Subject key identifier:   FE:AB:69:7D:6A:86:DB:37:AB:5F:0E:E1:41:84:DC:57:F2:05:6F:0D
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       25BF5F996414B309C498C100E284DEC0A9679B84
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa
Signing time:             Wed 08 Jan 2025 07:45:01 +0000
ROA not before:           Wed 08 Jan 2025 07:40:01 +0000
ROA not after:            Wed 07 Jan 2026 07:45:01 +0000
asID:                     19422
IP address blocks:        186.8.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bf:5f:99:64:14:b3:09:c4:98:c1:00:e2:84:de:c0:a9:67:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Jan  8 07:40:01 2025 GMT
            Not After : Jan  7 07:45:01 2026 GMT
        Subject: CN=FEAB697D6A86DB37AB5F0EE14184DC57F2056F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:41:f1:d9:03:41:03:fc:0b:70:9e:b8:7b:
                    ad:3d:29:4f:42:7b:af:e3:8c:df:da:33:53:1d:2d:
                    6b:c3:5e:8d:6c:3d:ab:d3:a7:77:53:34:b0:9a:be:
                    27:6b:9b:7f:a7:50:20:0f:6a:a3:55:26:13:6b:6a:
                    48:30:de:ca:43:c1:94:47:68:32:fb:9c:c5:bc:f8:
                    63:1e:f2:a0:e2:be:b1:37:2e:46:82:47:ea:2b:3a:
                    53:9c:ce:5e:a8:5c:e4:73:76:3c:eb:ba:64:c3:01:
                    4f:00:f8:33:d1:bb:9e:94:6d:c7:91:ca:8e:82:0f:
                    3e:6a:b8:66:78:5f:a7:11:50:ec:2b:35:d3:83:47:
                    91:88:ed:05:26:ba:c6:63:15:ee:ec:f1:85:16:1e:
                    06:5b:55:70:9e:0e:12:b7:15:b4:f4:02:76:40:76:
                    c4:66:7c:6d:7b:02:d2:9d:44:fb:f5:9f:a3:32:c7:
                    d0:04:88:90:ae:d7:7d:f1:77:d6:39:b9:b8:a1:01:
                    98:87:94:ae:7e:c6:85:11:7d:aa:71:99:0c:0d:58:
                    01:cf:f6:fa:a6:08:f9:1f:64:e6:51:dc:82:0e:f9:
                    fc:b5:e8:70:84:28:78:6c:de:ea:66:05:a9:ba:7b:
                    da:69:44:89:f1:75:93:1a:c1:5b:ef:3c:38:4d:97:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:69:7D:6A:86:DB:37:AB:5F:0E:E1:41:84:DC:57:F2:05:6F:0D
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:a2:92:39:e3:24:4b:e7:a5:a8:1c:5d:70:0e:bf:fc:4f:
         48:13:91:d9:f7:d3:61:b5:c5:d1:c3:63:ff:73:47:83:03:7d:
         e6:35:18:61:e0:ad:96:25:b5:09:65:dd:bc:6b:a5:55:1a:cf:
         47:3c:18:f6:67:9a:08:05:50:78:bf:2d:c3:34:e8:32:62:49:
         6b:6d:e4:8e:58:77:34:aa:4b:80:73:e4:2a:bb:74:9c:79:59:
         c2:a9:61:5b:88:3c:2a:72:6e:cb:79:61:28:4f:01:a2:33:9e:
         fa:7b:02:a1:76:f2:75:bc:05:58:f9:66:1b:be:67:9f:a9:df:
         4f:b7:d8:67:ca:d2:48:12:82:4b:77:c3:6c:ab:07:47:73:ce:
         f7:25:42:4b:4f:33:bd:2e:86:48:03:b9:3b:66:9c:bc:60:77:
         5e:5e:4b:dd:f9:9f:70:47:da:6b:57:9e:8e:a8:9d:55:e9:d6:
         67:65:52:e6:2b:10:99:16:a9:78:4e:1c:2d:56:02:79:dd:63:
         2a:b2:64:21:98:df:2d:66:9c:6c:86:6d:00:c8:3d:e8:cc:08:
         ca:43:eb:be:a4:e2:16:89:9b:ba:22:21:d5:00:8f:6b:43:fb:
         58:78:70:29:1a:61:db:7d:69:a9:7f:ca:30:41:2f:83:62:fd:
         2f:f2:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:43 2025 by rpki-client