Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
File:                     3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          ShsjkA3eT/wEoMlnpCD6GpDZiGTx8ODvl2pbeJEJJqo=
Subject key identifier:   69:58:82:7D:CF:E2:81:A3:B5:2D:F4:AD:48:5D:8F:A8:EA:9D:7E:48
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       1CBF6222D0D4F01DB67519C67FAAC8E82AAF582A
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 04 Feb 2025 18:52:36 +0000
ROA not before:           Tue 04 Feb 2025 18:47:36 +0000
ROA not after:            Tue 03 Feb 2026 18:52:36 +0000
asID:                     395161
IP address blocks:        138.186.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bf:62:22:d0:d4:f0:1d:b6:75:19:c6:7f:aa:c8:e8:2a:af:58:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Feb  4 18:47:36 2025 GMT
            Not After : Feb  3 18:52:36 2026 GMT
        Subject: CN=6958827DCFE281A3B52DF4AD485D8FA8EA9D7E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:5e:4a:be:ab:3e:71:1f:45:28:08:7f:0d:
                    34:fb:81:01:90:48:fa:7d:96:68:e1:00:03:63:22:
                    16:ac:2d:21:59:6e:6e:1e:73:e4:40:45:50:e3:32:
                    57:97:1b:81:41:e6:b9:c5:b8:2a:90:50:45:f6:f2:
                    8b:6d:91:9b:18:e5:57:1d:70:25:8f:c4:85:aa:4c:
                    ae:92:98:a5:56:20:4d:d4:46:aa:59:34:b2:ad:15:
                    9b:dd:55:b1:f0:32:99:08:74:20:c1:bd:ca:81:eb:
                    af:4c:98:c5:e4:3e:89:3f:d0:28:3f:9a:e8:02:f2:
                    8f:30:ab:7a:d4:96:51:47:40:bb:22:69:f3:3f:4b:
                    8b:3f:39:dd:b2:57:9e:de:dd:e2:ef:59:36:95:2f:
                    b4:ac:33:38:0d:cb:ab:b6:50:57:44:f6:ab:d1:81:
                    1c:4b:a2:f6:f3:67:cb:0a:26:55:85:26:a3:82:39:
                    f5:8c:24:3b:8f:69:7c:62:30:b2:a3:3e:98:a1:5b:
                    9c:6d:2d:a9:f0:4b:3d:c4:d5:5c:9d:e0:61:d6:f8:
                    8e:42:52:34:12:29:33:df:ff:cd:fa:45:14:bc:1c:
                    9a:49:f6:3a:7b:d3:ff:68:42:5f:da:ec:02:1c:6e:
                    4d:f9:ea:13:b4:f8:f7:94:12:ee:95:6b:a2:49:5c:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:82:7D:CF:E2:81:A3:B5:2D:F4:AD:48:5D:8F:A8:EA:9D:7E:48
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:54:d6:e3:b0:53:4b:55:19:bc:31:e0:fe:89:b3:6a:9f:
         b0:49:e5:7e:d5:72:ae:d4:e4:f9:70:3d:27:70:13:9c:a5:66:
         2f:7f:a2:0e:63:fc:e8:5a:45:6d:2d:eb:90:06:09:e9:bb:58:
         4f:78:0a:6a:02:cf:c1:64:72:69:a9:3f:df:2e:13:1d:71:2b:
         60:de:37:8c:6e:01:34:ed:36:80:b2:18:1f:09:b8:f7:47:3e:
         07:95:84:53:d8:9c:49:01:b8:9e:3b:1f:66:a1:86:2b:7f:69:
         be:9a:22:93:f9:9a:c6:e8:f9:09:0f:65:2f:18:b0:8a:f8:37:
         72:58:6e:9d:70:9d:2f:f9:d8:47:72:58:16:b7:7f:39:df:b1:
         ae:3b:ba:27:49:4f:41:c8:f5:3f:69:73:d0:f3:27:23:55:d4:
         69:30:c3:75:a6:b3:5a:47:e1:be:e7:b4:b8:63:0e:48:63:58:
         6c:af:04:b9:e3:8c:b8:30:05:15:07:1c:89:3a:d2:cb:1c:49:
         0e:e3:31:4d:87:2a:0f:98:2d:20:63:40:c5:ba:e8:de:ff:67:
         a1:cf:f5:b2:79:73:13:a5:19:6c:ce:5b:df:fa:f6:c6:48:97:
         c5:54:f8:18:20:aa:d7:95:4b:ba:fb:80:05:d3:6c:c2:c7:56:
         4f:18:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:07:34 2025 by rpki-client