Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203139313639.roa
File:                     3138362e342e3132382e302f31372d3234203d3e203139313639.roa (raw, json)
Hash identifier:          vQHDPWv218smXQUId2Oe6TwiroA45xGbzF+om+sBrJE=
Subject key identifier:   EC:26:27:1C:16:26:22:6D:3C:F3:1D:3E:F6:00:16:55:80:92:F6:72
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       620005FF6D8CC02C2416AD5153EE67A0C08F790A
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:21 +0000
ROA not before:           Tue 04 Feb 2025 18:06:21 +0000
ROA not after:            Tue 03 Feb 2026 18:11:21 +0000
asID:                     19169
IP address blocks:        186.4.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:05:ff:6d:8c:c0:2c:24:16:ad:51:53:ee:67:a0:c0:8f:79:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:21 2025 GMT
            Not After : Feb  3 18:11:21 2026 GMT
        Subject: CN=EC26271C1626226D3CF31D3EF60016558092F672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:b3:6b:29:7f:34:4d:9a:03:73:5c:3d:c8:
                    34:b1:7d:48:6e:f0:14:9b:1d:b4:16:1b:76:a2:11:
                    39:54:d4:be:c6:b3:1c:c4:bc:ca:eb:f3:dc:e3:f1:
                    c6:15:32:48:69:af:95:ac:d9:2c:a8:73:01:6c:27:
                    3c:27:f3:c0:88:87:73:81:97:10:9e:61:10:46:0c:
                    48:7e:13:d2:e6:c8:8a:b6:c8:88:93:48:68:2b:9c:
                    7a:78:89:17:c3:91:15:10:e5:5d:ce:fe:6a:7b:c2:
                    2f:28:fb:86:55:88:70:ef:d6:ed:0a:7f:31:f3:69:
                    d7:d4:94:fe:4d:81:f4:41:05:58:07:c2:2a:52:97:
                    7d:15:79:85:69:7c:a8:2c:1e:d3:38:8b:0c:bc:87:
                    1d:d4:b9:86:fa:97:fb:10:a8:41:ba:3d:52:1b:4a:
                    74:e6:47:77:d7:46:c8:92:c5:fe:64:ff:db:95:15:
                    b2:a5:a3:1e:23:21:36:87:74:eb:91:56:ff:e5:75:
                    db:3c:d5:de:e1:08:55:a7:9b:25:37:ca:05:39:00:
                    dc:20:1b:c4:cd:70:e7:9b:79:8b:10:6e:43:c1:1b:
                    62:f3:f3:7d:5e:eb:14:32:e9:0c:a8:8f:c3:8d:88:
                    9b:87:0e:89:1d:31:da:2d:2e:51:44:cf:a3:67:ea:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:27:1C:16:26:22:6D:3C:F3:1D:3E:F6:00:16:55:80:92:F6:72
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         44:73:98:de:7e:e4:ef:0d:d2:a8:9e:fb:86:ef:50:6a:8e:e3:
         41:05:c6:4d:b0:b1:95:b2:d6:b5:98:cd:dd:ab:48:37:6c:2b:
         a2:e4:19:a4:44:d2:4a:5f:e6:04:34:dd:3d:ab:1a:00:1a:61:
         42:04:af:9a:1f:aa:a1:f2:00:b7:04:78:62:ff:87:c6:75:dd:
         d3:ed:36:32:cc:f0:00:e0:b0:24:3b:af:b1:30:6f:08:de:e4:
         f6:0d:2b:c4:e3:ed:87:29:8d:6a:31:c6:56:e6:b5:28:25:54:
         bb:92:f5:54:bd:c8:94:0a:56:3e:3d:87:6a:56:a4:1d:cc:d6:
         66:f7:66:b9:bf:17:5b:99:36:99:d6:d2:76:85:af:8f:a6:c3:
         30:1e:21:75:55:0b:1e:1a:09:28:53:cf:9b:99:22:01:3b:17:
         69:43:30:24:b3:85:13:83:de:e2:15:5b:ae:b2:7d:3e:4f:e3:
         27:54:31:8a:e5:ef:28:c6:81:0d:94:4b:3f:e5:b0:59:f9:d5:
         1f:37:38:a6:40:38:cd:51:a3:9f:75:b7:04:74:68:7d:5c:0f:
         8a:d2:94:6b:19:d0:43:b4:43:5a:e7:83:e2:f3:97:ee:15:52:
         c7:bc:b3:a8:3f:a1:69:38:8c:02:dc:a5:b7:e7:f8:cd:07:73:
         02:d2:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:02 2025 by rpki-client