Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138362e342e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          26lsp58JkHic5/IZy5u+Ua0ETU/L73+8l1mJj9g5PVk=
Subject key identifier:   7C:72:8B:FF:0A:F1:42:18:91:B3:9A:E2:5D:C7:64:13:35:46:C5:BD
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       38FBBB14A369370906B9F2FC07CF91AE89BFEFE1
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:15 +0000
ROA not before:           Tue 04 Feb 2025 18:06:15 +0000
ROA not after:            Tue 03 Feb 2026 18:11:15 +0000
asID:                     52257
IP address blocks:        186.4.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:bb:14:a3:69:37:09:06:b9:f2:fc:07:cf:91:ae:89:bf:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:15 2025 GMT
            Not After : Feb  3 18:11:15 2026 GMT
        Subject: CN=7C728BFF0AF1421891B39AE25DC764133546C5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:ab:2c:1f:a3:48:fa:53:69:08:5a:94:f7:
                    34:12:ec:a0:d5:d5:2a:68:bb:9b:40:03:b5:4b:dc:
                    46:8c:72:07:20:73:71:da:65:f5:a7:84:15:f5:10:
                    51:18:59:6c:d6:db:aa:aa:ca:62:71:82:c3:c4:09:
                    c1:e3:5b:c3:a0:d4:94:87:3d:6e:7c:64:8c:22:3f:
                    53:fa:25:dd:30:c6:fe:ad:3e:79:30:44:8b:a3:ea:
                    54:a0:67:2e:96:d2:8c:fa:1d:f9:29:90:79:b4:ba:
                    c0:df:ed:cd:c1:2c:0b:8e:5a:6c:75:1e:3c:f2:89:
                    a5:3e:eb:30:b8:d3:09:d5:32:02:3a:e4:47:ae:a7:
                    f9:1f:1b:b4:2d:f8:e1:0c:09:c5:d2:f8:ff:57:0a:
                    1d:59:2b:5b:d0:d8:31:0b:e5:99:68:b2:bc:c8:55:
                    ea:0f:76:4f:3d:47:47:44:31:2b:ef:0b:52:12:51:
                    55:5d:7d:81:ad:21:d5:11:41:9e:37:e3:6c:c0:0d:
                    27:48:4e:d4:92:03:60:12:b9:01:59:7d:51:12:e2:
                    16:91:95:ff:81:a5:f6:d4:8a:2e:84:79:f0:0b:b0:
                    82:3d:18:f4:1c:ae:45:5b:d2:37:3d:20:2f:6e:c1:
                    65:37:54:2c:f8:84:63:1a:22:0c:1b:26:48:54:57:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:8B:FF:0A:F1:42:18:91:B3:9A:E2:5D:C7:64:13:35:46:C5:BD
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:29:51:98:ef:8d:e6:53:66:5e:be:00:fd:19:ef:a3:75:
         8e:99:93:84:5d:b9:a3:66:12:21:2f:bd:9d:e4:b7:fe:7f:97:
         a1:f4:9f:8a:9b:d4:c1:3a:f6:17:6e:41:9b:31:7c:e2:f2:43:
         6a:4e:5f:e7:cf:a9:39:06:06:ec:50:4d:27:7d:48:25:c3:21:
         21:f3:6e:04:40:e4:0d:51:50:7f:c2:af:12:fe:c8:f9:0a:4a:
         5e:9c:4c:0d:bd:46:5b:b1:7c:26:f6:88:b3:a5:85:47:b0:87:
         aa:82:45:fd:43:aa:e1:62:74:dd:c3:d9:24:e1:6b:38:10:8a:
         36:9b:60:99:82:c4:bc:72:b1:b2:0b:4c:ee:f7:27:09:6a:8b:
         30:b6:d9:ea:e0:1d:ba:91:0a:eb:e3:14:bf:52:96:68:2e:b5:
         6b:b3:dc:fa:a6:59:0d:13:2b:78:5d:53:15:1d:74:f8:db:1b:
         6e:79:55:83:0f:67:e0:c2:1d:1e:ab:10:de:f4:c8:6e:00:9a:
         f4:5a:b8:62:32:5e:94:98:5a:6a:35:61:5e:58:40:2a:24:c1:
         4d:81:2c:4c:fc:d6:f1:a6:42:1a:e3:83:5f:68:38:97:34:a6:
         e6:70:8f:c9:6c:2d:e1:00:17:18:ba:f4:17:c7:76:27:d5:74:
         9c:11:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:42 2025 by rpki-client