Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa
File:                     3138362e3130312e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          6+twcPUD9oZYcTjJKVJk8jP4iXrAdhxbaUVXdCZKVr0=
Subject key identifier:   27:98:03:2A:A5:62:F5:31:F8:B8:C8:AC:96:7E:79:6C:3C:5B:2E:CD
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6EFDDBC1EE3DA51861FF49090EF04073861E041A
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:19 +0000
ROA not before:           Tue 04 Feb 2025 18:06:19 +0000
ROA not after:            Tue 03 Feb 2026 18:11:19 +0000
asID:                     19169
IP address blocks:        186.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fd:db:c1:ee:3d:a5:18:61:ff:49:09:0e:f0:40:73:86:1e:04:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:19 2025 GMT
            Not After : Feb  3 18:11:19 2026 GMT
        Subject: CN=2798032AA562F531F8B8C8AC967E796C3C5B2ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:f8:78:fc:c9:f4:79:6e:36:a2:ba:15:8a:
                    d0:8c:2d:6c:9a:43:bf:ff:fd:98:02:e0:1b:36:0f:
                    4b:84:fa:72:d5:fc:9f:31:db:ab:4b:70:22:73:30:
                    08:10:80:3e:c4:5e:3e:15:f3:32:1d:81:4b:de:d4:
                    5d:d6:ae:ec:96:ed:df:27:cd:bc:47:7d:15:38:d2:
                    9c:dc:49:be:49:20:3f:6b:14:e8:6d:86:2a:f7:26:
                    b7:36:d2:98:e9:15:de:56:31:98:ef:64:89:31:af:
                    c0:d3:62:41:4d:2c:cf:ab:58:50:38:92:86:34:5e:
                    04:01:99:aa:51:e5:eb:65:87:37:69:22:e2:63:f9:
                    2f:3a:a5:71:e6:ba:b2:ba:1a:5e:bc:07:fd:41:d9:
                    1c:62:42:b5:48:d4:ca:4c:89:f1:9e:69:db:e0:3b:
                    d1:dc:61:b2:36:99:6e:9f:30:7a:cb:15:e9:04:21:
                    0b:6b:81:41:22:c1:1e:73:a3:6e:90:19:c1:d5:16:
                    c8:d1:db:71:cc:cf:1f:d8:c0:08:db:02:03:d8:40:
                    ed:f9:b4:c0:64:5e:ff:00:b6:8b:c3:e7:b9:70:b6:
                    c5:c6:50:dd:3b:4a:90:79:f7:16:f0:5d:f7:90:f3:
                    38:04:54:7c:d3:b6:35:8f:b1:ca:db:73:e7:0d:b5:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:03:2A:A5:62:F5:31:F8:B8:C8:AC:96:7E:79:6C:3C:5B:2E:CD
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:cb:f7:d9:2d:4a:4a:a8:7f:89:ed:48:41:ba:fd:7a:7e:
         46:ad:fe:24:be:97:2e:9d:2c:65:f3:81:75:8f:c9:57:d9:93:
         24:f0:e5:c9:25:ca:4e:ec:eb:4e:29:7a:69:67:37:94:1b:bb:
         02:41:56:9c:30:af:4b:34:cb:7b:81:d1:1c:a8:7a:b6:50:ba:
         45:b1:1e:0d:be:b4:8b:0b:0d:18:99:c1:cb:48:b0:d2:6c:2f:
         bd:f3:54:6f:21:2f:9b:d6:21:e0:63:2a:64:d3:6b:1f:b8:53:
         72:35:2a:00:65:f4:4f:11:ed:5d:66:55:42:45:59:72:8d:15:
         9b:4d:fc:b7:db:f6:f3:ce:91:61:ba:28:37:2d:25:f1:5d:0d:
         c9:93:65:61:99:fa:b6:8d:f6:63:15:10:dd:e8:a1:e0:b8:9d:
         cd:a5:b6:24:70:11:bc:c5:96:a8:4b:e0:60:37:c8:3f:6e:07:
         86:5c:58:90:f3:86:49:e3:b4:d5:71:30:0d:2a:31:01:10:bf:
         68:c6:9b:ef:c0:bd:68:fe:a5:89:49:3b:ba:af:ea:86:7a:36:
         62:0a:27:9c:d3:b5:37:0f:76:3c:1d:3f:eb:28:21:f5:8a:b2:
         c8:ec:6f:34:6e:40:e3:71:6e:5d:fa:87:34:91:5c:45:44:3a:
         e5:c0:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:01 2025 by rpki-client