Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
File:                     3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa (raw, json)
Hash identifier:          zTW5SqhNU2oi16sVB9N1fVwK/y0Nzt/7uyBUA39M6d8=
Subject key identifier:   A8:E6:A4:2E:B4:63:3D:FB:30:11:E2:20:BF:4F:4B:E7:6C:0C:FA:C9
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       27741F2E0CA2936135D5EE085269ABC630F96175
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
Signing time:             Tue 04 Feb 2025 18:11:24 +0000
ROA not before:           Tue 04 Feb 2025 18:06:24 +0000
ROA not after:            Tue 03 Feb 2026 18:11:24 +0000
asID:                     266688
IP address blocks:        168.197.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:1f:2e:0c:a2:93:61:35:d5:ee:08:52:69:ab:c6:30:f9:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:24 2025 GMT
            Not After : Feb  3 18:11:24 2026 GMT
        Subject: CN=A8E6A42EB4633DFB3011E220BF4F4BE76C0CFAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:1f:bc:e9:62:00:a7:39:96:5f:4f:6e:59:
                    e6:b3:c1:66:1d:ac:37:2a:0b:eb:a9:35:8e:be:1d:
                    75:7b:28:27:fc:8b:28:5e:e0:37:e7:6b:2c:fe:f9:
                    fa:5c:9b:2d:ac:10:23:b6:f1:6d:48:b5:09:bb:ca:
                    19:ed:da:27:e0:43:25:c8:c5:1c:a7:c4:da:ca:6f:
                    9c:0f:a9:e9:fc:2f:e5:72:7e:8d:93:dc:55:d3:0b:
                    08:a6:8f:70:60:bb:ec:8c:17:94:47:e5:d9:9b:c9:
                    7e:37:ab:d2:e4:f9:c4:32:c2:3a:6e:9b:57:40:7a:
                    7b:56:98:af:25:7c:3f:4d:bf:d7:e8:5a:4c:3e:3c:
                    01:7c:d1:ba:8f:56:ba:19:67:4d:7c:63:5e:59:52:
                    45:74:0e:d9:b2:ed:dd:21:3f:48:b7:8b:11:a6:0c:
                    ca:41:15:ef:c1:0f:f6:4b:22:fd:6a:d7:52:ba:7f:
                    5a:7d:85:6b:66:c9:31:fa:5b:26:f7:7b:2c:9d:c2:
                    c9:42:52:bf:bf:7e:e8:d7:df:cd:34:4d:17:7c:aa:
                    bf:4e:98:9a:d3:41:7b:3c:7e:b2:38:33:94:ae:46:
                    99:f7:94:f1:a7:eb:5e:e8:94:44:d6:a1:db:39:3e:
                    2b:43:15:ab:5a:19:b5:25:55:cb:5f:5f:19:7b:84:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:A4:2E:B4:63:3D:FB:30:11:E2:20:BF:4F:4B:E7:6C:0C:FA:C9
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:8e:f2:9d:cb:e4:2d:f8:b5:2d:90:de:ba:10:7f:ce:2b:
         c2:12:14:c2:a5:3d:47:68:43:a1:0d:16:3d:17:35:f5:ab:ed:
         83:fd:51:2c:8b:d5:91:6b:3d:e8:35:6d:43:ba:5a:fc:25:81:
         3a:e9:e8:41:bf:45:8a:09:6b:bb:ce:4e:1e:a4:72:04:e4:5f:
         ba:ba:51:4f:d7:8e:78:38:e2:7c:9b:3b:49:6c:f0:51:9e:15:
         df:3e:a3:e8:40:fb:6e:7b:0a:a8:69:ce:f1:f1:7c:b4:6c:bf:
         1b:7b:a6:57:70:63:05:9b:96:08:19:1b:13:64:26:1c:b4:db:
         b5:c5:ca:ee:cb:a2:a1:71:56:2d:aa:be:81:ad:45:34:f9:34:
         a0:4a:f2:e2:99:44:b6:7c:f6:01:2f:9e:4c:c2:84:c9:55:28:
         e3:b5:29:61:f8:ce:40:c6:01:d6:95:0b:cb:55:77:a1:e3:fd:
         c9:90:47:5c:fe:e7:9a:5e:0d:bb:01:13:f9:1c:96:c4:81:85:
         ce:fe:c0:9f:df:3a:a9:2c:3c:8f:ef:33:fd:a1:45:fb:8c:b6:
         31:70:64:a9:69:62:05:53:89:a3:38:f0:88:d6:7b:86:1e:ee:
         36:37:21:d1:ff:a0:83:0d:3b:c5:e1:04:3d:fa:17:7e:2b:f7:
         54:bc:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:44 2025 by rpki-client