Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234362e302f32332d3234203d3e203232333638.roa
File:                     3138362e3138332e3234362e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          s2p6YCk8cdhUVQuXROyXpYd7IinMamdjz6UaAzTq5lE=
Subject key identifier:   20:14:07:2D:53:6A:35:C2:2E:E5:20:37:2C:ED:2E:E1:4E:CA:C5:97
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       70CB7474A9DACE6140092D81BB4C2793D81F2E8A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234362e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:23 +0000
ROA not before:           Tue 04 Feb 2025 18:17:23 +0000
ROA not after:            Tue 03 Feb 2026 18:22:23 +0000
asID:                     22368
IP address blocks:        186.183.246.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cb:74:74:a9:da:ce:61:40:09:2d:81:bb:4c:27:93:d8:1f:2e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:23 2025 GMT
            Not After : Feb  3 18:22:23 2026 GMT
        Subject: CN=2014072D536A35C22EE520372CED2EE14ECAC597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:dd:04:19:ce:33:8f:f2:90:d5:8b:8b:5a:
                    f4:5e:99:b7:87:75:57:98:71:ff:69:b3:a9:0c:05:
                    1a:3a:46:9a:d0:a4:24:7f:11:54:57:8f:50:42:0e:
                    78:f1:07:81:46:9f:aa:34:ec:a0:34:62:ac:36:57:
                    03:80:14:63:cd:12:c7:d4:b9:74:a4:7d:83:d6:d2:
                    dd:98:07:71:4e:6b:73:9c:79:fa:b0:a6:2a:18:95:
                    03:6d:da:f6:0d:ae:1f:a0:78:f7:2e:d7:51:a5:dc:
                    53:b5:e9:d6:47:4d:9d:53:76:7b:91:4c:7f:67:1a:
                    a3:c6:8f:53:af:c0:c9:f5:70:1e:71:98:29:d4:91:
                    30:86:5c:04:c5:dc:71:16:c7:0c:d5:c6:d4:bd:5e:
                    b3:7c:87:b5:5e:0d:dd:d0:be:90:0e:40:4c:54:49:
                    77:31:79:d4:bb:4f:b0:90:cf:4b:51:42:79:03:af:
                    12:5b:04:cb:61:f5:e1:2e:e5:a9:40:8d:6f:b2:19:
                    68:38:3b:de:da:4d:af:81:29:0e:9e:59:df:a4:0e:
                    af:ed:93:a0:e2:ce:9c:83:52:dc:03:4e:fb:c1:78:
                    03:39:12:34:d3:1b:ff:de:45:3f:f6:a0:8d:cb:47:
                    09:a9:00:11:91:69:cb:5d:89:1f:49:e6:ed:2e:c1:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:07:2D:53:6A:35:C2:2E:E5:20:37:2C:ED:2E:E1:4E:CA:C5:97
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234362e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:45:5a:c2:b1:4f:a6:f8:7f:0f:d1:72:c8:b4:ff:9f:c3:
         5b:5f:c9:2f:c3:99:46:fd:63:e0:74:d5:b9:d6:03:d2:31:00:
         11:03:50:2e:3b:8d:b5:a7:75:22:e2:69:49:14:3a:75:b5:23:
         78:4b:13:55:e2:1d:34:8b:7a:14:08:2c:39:c8:b2:22:5d:89:
         bf:76:bf:83:24:a3:8d:94:e5:0e:42:22:52:af:2d:60:d9:a9:
         7f:49:7a:ea:8e:0c:8f:0f:8c:81:15:ed:39:75:15:f4:12:ff:
         cb:4a:5f:31:b8:f7:2d:ef:20:2a:d2:dd:a6:90:f8:1b:ad:55:
         40:01:71:70:b7:b5:77:1c:d6:86:4c:ee:ce:d3:a7:1d:80:74:
         bc:18:77:b4:19:99:c4:78:88:0b:d7:fc:4d:36:e9:ca:a3:82:
         af:09:9d:f3:8d:fd:57:ec:ce:01:17:47:1e:aa:f9:54:4c:e5:
         62:73:b2:14:fe:6c:27:78:41:3a:0c:c8:77:0f:04:2a:af:90:
         c8:17:89:54:70:f2:92:20:9f:1e:be:c8:64:1f:4d:52:f2:fe:
         8c:f5:58:24:5f:b3:eb:15:74:5d:12:3c:c5:3c:6d:4e:4f:21:
         b2:c1:9f:44:32:05:bb:e9:9e:84:ad:46:5a:4e:fe:f0:24:8e:
         60:c6:40:14
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcMt0dKnazmFACS2Bu0wnk9gfLoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTAyMDQxODE3MjNaFw0yNjAyMDMxODIyMjNaMDMxMTAvBgNV
BAMTKDIwMTQwNzJENTM2QTM1QzIyRUU1MjAzNzJDRUQyRUUxNEVDQUM1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYd90EGc4zj/KQ1YuLWvRembeH
dVeYcf9ps6kMBRo6RprQpCR/EVRXj1BCDnjxB4FGn6o07KA0Yqw2VwOAFGPNEsfU
uXSkfYPW0t2YB3FOa3OcefqwpioYlQNt2vYNrh+gePcu11Gl3FO16dZHTZ1TdnuR
TH9nGqPGj1OvwMn1cB5xmCnUkTCGXATF3HEWxwzVxtS9XrN8h7VeDd3QvpAOQExU
SXcxedS7T7CQz0tRQnkDrxJbBMth9eEu5alAjW+yGWg4O97aTa+BKQ6eWd+kDq/t
k6DizpyDUtwDTvvBeAM5EjTTG//eRT/2oI3LRwmpABGRactdiR9J5u0uwegZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIBQHLVNqNcIu5SA3LO0u4U7KxZcwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzNjJlMzEzODMzMmUzMjM0MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBurf2
MA0GCSqGSIb3DQEBCwUAA4IBAQBESkVawrFPpvh/D9FyyLT/n8NbX8kvw5lG/WPg
dNW51gPSMQARA1AuO421p3Ui4mlJFDp1tSN4SxNV4h00i3oUCCw5yLIiXYm/dr+D
JKONlOUOQiJSry1g2al/SXrqjgyPD4yBFe05dRX0Ev/LSl8xuPct7yAq0t2mkPgb
rVVAAXFwt7V3HNaGTO7O06cdgHS8GHe0GZnEeIgL1/xNNunKo4KvCZ3zjf1X7M4B
F0ceqvlUTOVic7IU/mwneEE6DMh3DwQqr5DIF4lUcPKSIJ8evshkH01S8v6M9Vgk
X7PrFXRdEjzFPG1OTyGywZ9EMgW76Z6ErUZaTv7wJI5gxkAU
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:10 2025 by rpki-client