Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e3132352e302f32342d3234203d3e20323732303937.roa
File:                     3138362e352e3132352e302f32342d3234203d3e20323732303937.roa (raw, json)
Hash identifier:          PDsY46qV3WADeBcj8YKJ0dYau9YQwdGiaOj7t51dZaw=
Subject key identifier:   9C:0C:5C:2A:87:1C:AE:5F:54:42:B2:07:4D:90:13:BF:9E:87:5A:7C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5B540E0BDCA7DA4ECF7F777436D980D2C66EE3B6
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e3132352e302f32342d3234203d3e20323732303937.roa
Signing time:             Tue 04 Feb 2025 18:11:23 +0000
ROA not before:           Tue 04 Feb 2025 18:06:23 +0000
ROA not after:            Tue 03 Feb 2026 18:11:23 +0000
asID:                     272097
IP address blocks:        186.5.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:54:0e:0b:dc:a7:da:4e:cf:7f:77:74:36:d9:80:d2:c6:6e:e3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:23 2025 GMT
            Not After : Feb  3 18:11:23 2026 GMT
        Subject: CN=9C0C5C2A871CAE5F5442B2074D9013BF9E875A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:78:2d:f8:db:5b:8c:00:3c:fa:cd:60:90:
                    22:b2:4c:2f:23:71:50:56:b2:4e:04:a0:5f:02:86:
                    4a:7c:92:10:1e:be:8f:0b:73:99:8a:23:b1:58:dc:
                    b0:3d:a7:66:b9:61:89:e4:49:1c:80:e7:cb:16:07:
                    32:4f:be:5d:22:4f:60:5f:15:81:70:bb:a7:31:e7:
                    4f:4e:64:b4:fb:49:b5:6c:0d:a2:12:fa:87:7e:af:
                    28:3a:3d:3b:f2:53:83:f0:4e:38:32:ad:a5:ba:1c:
                    66:9d:47:4a:ce:29:ec:f5:e5:73:17:1c:c3:12:c8:
                    49:62:a1:f7:87:e6:71:e5:03:a7:c6:65:08:75:cc:
                    5f:6a:23:a2:b3:11:3c:50:cf:9b:98:0e:fe:15:c2:
                    a5:cf:68:72:ad:c8:a0:bb:63:ff:a6:43:df:70:d4:
                    89:ea:7e:03:a0:76:d9:f3:d8:6b:b0:bc:d8:fd:8e:
                    58:c0:d8:30:af:82:42:45:48:0d:4b:a0:da:99:d2:
                    db:7c:de:90:9c:73:51:5a:44:ed:8e:34:b5:84:c2:
                    fe:1b:fb:12:7f:be:18:5e:14:7c:54:95:83:a0:0d:
                    3a:51:c7:36:2f:40:b5:fb:86:4a:4c:b5:47:22:2e:
                    a5:7b:90:d0:07:1e:ec:c6:17:05:e7:dc:6d:90:b1:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:5C:2A:87:1C:AE:5F:54:42:B2:07:4D:90:13:BF:9E:87:5A:7C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e3132352e302f32342d3234203d3e20323732303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:71:01:67:52:67:84:bf:d9:2e:0a:0d:df:73:2b:4b:6d:
         4d:bd:db:84:12:43:d7:90:00:55:92:84:a2:ab:5d:08:d3:69:
         d7:59:b5:3f:04:43:27:17:85:a5:41:0e:fc:89:87:24:d7:dc:
         f8:15:0d:2b:ec:97:4b:9f:88:8f:6d:da:f8:e7:24:81:48:ee:
         6d:7e:48:98:19:75:b3:40:4b:44:b7:de:ef:84:6c:e2:55:04:
         8f:dc:79:21:2c:fa:59:dd:a8:68:09:1c:bc:03:82:39:6b:98:
         75:e5:6b:3d:f9:e6:5b:6a:ff:64:d0:dc:30:fb:23:d1:81:9a:
         3f:e4:aa:42:94:a1:9c:db:13:0d:6b:67:36:23:5e:07:c4:d7:
         f1:fc:6e:23:5b:7d:37:db:cf:3b:ea:74:33:f4:45:b8:89:44:
         c0:02:89:4d:1f:f6:f1:db:3a:10:bf:b5:9b:15:93:55:e8:97:
         b0:94:70:fc:1c:6e:ce:e0:e4:fb:3a:20:d0:00:15:9d:fa:80:
         e2:ad:d0:e8:02:ed:3c:46:24:81:9a:ea:80:b1:02:d1:3b:0b:
         a0:13:03:9c:30:62:e1:66:d1:bf:37:d7:29:9d:7f:33:81:ef:
         ef:7b:48:b8:be:c8:8a:01:6e:71:80:c0:a2:79:be:21:0b:d9:
         67:a4:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:13 2025 by rpki-client