Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
File:                     3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          kSlT6BZMbHoi1eJtb7if1mferl45qCoyVOx9+Q00T/o=
Subject key identifier:   B9:FC:53:86:A5:33:64:2E:AF:67:B5:75:69:E2:07:80:8C:AB:94:0F
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       15696F210FECC2069045A0562891F00EB280C2DC
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:22:15 +0000
ROA not before:           Tue 04 Feb 2025 18:17:15 +0000
ROA not after:            Tue 03 Feb 2026 18:22:15 +0000
asID:                     3816
IP address blocks:        186.183.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:69:6f:21:0f:ec:c2:06:90:45:a0:56:28:91:f0:0e:b2:80:c2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:15 2025 GMT
            Not After : Feb  3 18:22:15 2026 GMT
        Subject: CN=B9FC5386A533642EAF67B57569E207808CAB940F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:b1:7d:38:c0:38:9b:29:2d:f3:b7:27:00:
                    20:4e:98:1c:e9:21:a8:76:72:29:59:7d:ae:b1:e9:
                    1e:19:68:73:8d:e1:34:36:f6:50:68:93:d7:56:0c:
                    76:ca:91:3d:5f:15:0b:41:03:6b:43:25:b8:11:b4:
                    a1:2c:10:de:e0:1c:65:30:e2:38:4c:19:3f:8f:76:
                    49:56:60:4d:e0:55:1c:f6:77:cc:3f:71:de:b6:ed:
                    7d:07:16:83:f9:bf:ff:b0:2b:18:cc:05:e8:6f:ca:
                    28:92:eb:79:bd:84:3b:ab:e2:7c:cf:b2:7c:d3:f0:
                    65:75:67:38:e8:4b:f9:e9:99:41:85:91:1a:43:32:
                    f7:8a:5f:f7:01:a1:9a:e1:a8:58:44:8d:1c:c6:ba:
                    d0:48:a0:35:49:84:5e:7d:1b:b7:31:d7:f8:b3:d7:
                    bf:03:cd:75:9a:b2:0c:01:89:e9:3b:9c:81:83:95:
                    da:b7:50:0b:e2:45:7f:c2:a8:d6:17:b0:05:68:b1:
                    71:73:46:3e:ea:eb:ab:1f:09:9d:4c:0f:e3:0d:5f:
                    e2:fa:2d:77:72:ab:78:04:5f:13:01:b9:fb:80:94:
                    07:76:bc:f6:19:96:b5:32:7f:25:19:1f:c4:41:a1:
                    5e:87:a0:98:6f:c4:02:7f:45:bf:24:fa:25:d6:79:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:53:86:A5:33:64:2E:AF:67:B5:75:69:E2:07:80:8C:AB:94:0F
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:b9:7c:6b:82:77:b4:1d:22:b8:28:ed:94:fd:59:c1:fe:
         ad:0f:f0:f0:e8:96:f8:7c:47:d1:34:80:4b:9a:78:42:99:43:
         0b:67:7d:a7:35:cd:78:16:5f:e9:ad:24:05:4f:c1:14:be:b3:
         ee:ea:15:f0:89:83:e3:89:c1:6d:97:a2:8f:b7:85:ce:4f:f7:
         f6:35:c4:f1:df:2d:95:4c:26:71:fc:9d:68:a4:b1:d1:a2:61:
         4e:7c:16:53:01:7c:79:a2:03:77:3f:6f:25:d8:be:3b:4d:16:
         4d:c9:75:37:3c:09:17:b4:40:45:8b:4f:57:ac:e8:08:a0:72:
         21:21:52:14:d2:d6:e4:21:da:9b:83:0a:07:dd:c7:45:1a:b6:
         1b:f5:1a:50:2d:7b:d2:6e:6d:35:a3:be:80:f3:73:2f:12:40:
         dc:bf:94:13:ff:48:94:2e:54:72:77:77:75:ca:d3:44:bf:d6:
         f7:98:02:82:dc:5c:68:be:42:26:b9:a0:96:08:0a:da:78:18:
         2b:23:0a:99:c2:f6:57:29:f5:76:83:0b:c5:c3:5e:1a:b5:c6:
         ca:17:ae:51:5b:9b:22:67:cf:60:21:7f:e6:9b:ac:80:e2:eb:
         79:61:23:9c:9d:b8:c8:60:7f:20:40:27:bd:e5:57:1e:9e:d0:
         3e:f6:b5:48
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFWlvIQ/swgaQRaBWKJHwDrKAwtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTAyMDQxODE3MTVaFw0yNjAyMDMxODIyMTVaMDMxMTAvBgNV
BAMTKEI5RkM1Mzg2QTUzMzY0MkVBRjY3QjU3NTY5RTIwNzgwOENBQjk0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6rF9OMA4mykt87cnACBOmBzp
Iah2cilZfa6x6R4ZaHON4TQ29lBok9dWDHbKkT1fFQtBA2tDJbgRtKEsEN7gHGUw
4jhMGT+PdklWYE3gVRz2d8w/cd627X0HFoP5v/+wKxjMBehvyiiS63m9hDur4nzP
snzT8GV1ZzjoS/npmUGFkRpDMveKX/cBoZrhqFhEjRzGutBIoDVJhF59G7cx1/iz
178DzXWasgwBiek7nIGDldq3UAviRX/CqNYXsAVosXFzRj7q66sfCZ1MD+MNX+L6
LXdyq3gEXxMBufuAlAd2vPYZlrUyfyUZH8RBoV6HoJhvxAJ/Rb8k+iXWeUC1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUufxThqUzZC6vZ7V1aeIHgIyrlA8wHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzNjJlMzEzODMzMmUzMjM1MzQy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbq3/jAN
BgkqhkiG9w0BAQsFAAOCAQEAQqy5fGuCd7QdIrgo7ZT9WcH+rQ/w8OiW+HxH0TSA
S5p4QplDC2d9pzXNeBZf6a0kBU/BFL6z7uoV8ImD44nBbZeij7eFzk/39jXE8d8t
lUwmcfydaKSx0aJhTnwWUwF8eaIDdz9vJdi+O00WTcl1NzwJF7RARYtPV6zoCKBy
ISFSFNLW5CHam4MKB93HRRq2G/UaUC170m5tNaO+gPNzLxJA3L+UE/9IlC5Ucnd3
dcrTRL/W95gCgtxcaL5CJrmglggK2ngYKyMKmcL2Vyn1doMLxcNeGrXGyheuUVub
ImfPYCF/5pusgOLreWEjnJ24yGB/IEAnveVXHp7QPva1SA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:01 2025 by rpki-client