Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa
File:                     3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier:          5OhXT43ZgTHfcyrkotjVhjna5vIMxbz1BUIldUv5hLE=
Subject key identifier:   F6:7C:EB:37:AD:49:E5:E4:2F:02:78:0B:B5:B5:E7:2C:7C:6F:00:83
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       4AFA1DCF2753632AC7620ED2E17820E8A7ED357F
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:19 +0000
ROA not before:           Tue 04 Feb 2025 18:17:19 +0000
ROA not after:            Tue 03 Feb 2026 18:22:19 +0000
asID:                     22368
IP address blocks:        186.183.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:1d:cf:27:53:63:2a:c7:62:0e:d2:e1:78:20:e8:a7:ed:35:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:19 2025 GMT
            Not After : Feb  3 18:22:19 2026 GMT
        Subject: CN=F67CEB37AD49E5E42F02780BB5B5E72C7C6F0083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:f6:83:55:17:70:96:03:f0:cb:75:82:9b:
                    00:f3:d1:00:2b:70:76:7f:1e:79:04:7c:4d:d3:92:
                    29:b7:04:e1:82:b0:5d:70:41:57:2a:21:13:4e:4e:
                    41:3f:30:17:c2:81:f7:9e:9e:eb:4d:a9:bc:05:fc:
                    a6:db:49:a3:25:98:32:a3:3e:16:f2:6c:87:0b:24:
                    bb:6a:e4:49:a8:a2:74:6f:57:c0:f0:eb:f9:34:dd:
                    ae:21:7b:a9:91:ef:b0:72:a9:60:43:f2:8e:e5:1b:
                    cd:fe:35:b9:fa:91:c6:16:e4:96:90:21:1b:40:a7:
                    11:ec:83:b9:35:09:54:6a:fd:c0:a5:9d:d7:66:7b:
                    bf:83:62:48:86:b0:c3:81:cb:ae:a0:47:e6:d0:40:
                    fb:14:68:21:a7:8d:86:d0:96:07:ce:9d:06:36:c2:
                    29:23:a4:d6:47:98:58:7b:7d:17:cc:2b:1c:73:7f:
                    85:7e:6f:83:10:3a:c4:32:36:05:e4:ee:e2:eb:ad:
                    b9:69:6b:e3:8e:f1:0b:73:00:7d:ce:14:7d:15:85:
                    24:6d:c6:7f:c2:ab:1f:29:5d:5e:7f:8f:ab:7c:28:
                    11:4a:73:58:ab:45:d3:5c:3a:16:51:3b:69:f2:2d:
                    3e:ca:e2:a8:93:53:fd:ca:51:1d:5c:15:a5:e8:9a:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7C:EB:37:AD:49:E5:E4:2F:02:78:0B:B5:B5:E7:2C:7C:6F:00:83
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:3d:a7:fa:ae:36:16:a9:e2:c1:d8:61:93:95:7f:b1:83:
         3a:a2:0d:13:1c:27:05:ba:9f:dd:ba:8e:dc:cd:a6:ac:c2:2f:
         da:29:d6:6c:4d:73:35:e5:32:f4:96:9e:d6:ed:5e:db:fb:bb:
         cd:27:a4:fc:30:3b:db:b6:29:6e:a1:e4:3e:b7:71:68:02:4c:
         1b:fd:42:29:6f:0b:a1:e5:c5:4b:9e:7a:5c:1f:3b:53:a9:3d:
         4a:0a:7c:c5:38:c4:25:2a:41:fe:75:e8:2d:f7:50:54:64:43:
         7b:09:d3:46:cd:b0:16:d3:10:a4:85:00:b6:4d:73:00:ae:4c:
         06:86:77:47:8b:40:33:34:be:19:49:31:ac:9a:ca:88:cb:58:
         7b:ef:0d:1f:5b:ac:ad:04:12:e7:9c:81:61:41:12:bf:97:cd:
         52:62:0b:4d:d3:31:3c:d4:44:b5:71:57:2b:59:05:05:be:72:
         63:da:b1:49:e4:bf:dd:cd:19:56:de:fb:5e:62:e6:68:7d:57:
         1f:38:f1:74:ad:8d:56:18:f6:e1:97:0d:31:5b:8e:66:73:96:
         4a:88:35:bb:f9:c5:9c:11:bd:f2:75:13:ad:31:15:63:54:f0:
         0d:19:3c:91:f6:5b:a4:17:57:4c:66:84:16:95:3f:ce:ca:c9:
         59:d3:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:04 2025 by rpki-client