Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa
File:                     3138362e3130342e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Ozsga1auivsfwxc8DuA7Xq2DHgdmksGjmx324pGHXFs=
Subject key identifier:   A4:6A:12:36:48:B6:1C:86:D5:15:D2:A3:8B:F4:39:2C:2F:7B:4D:95
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       39BDE5C7DEDA42174490D68C8CF51FCBD61EB02D
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:19 +0000
ROA not before:           Tue 05 Mar 2024 17:47:19 +0000
ROA not after:            Tue 04 Mar 2025 17:52:19 +0000
asID:                     7418
IP address blocks:        186.104.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bd:e5:c7:de:da:42:17:44:90:d6:8c:8c:f5:1f:cb:d6:1e:b0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:19 2024 GMT
            Not After : Mar  4 17:52:19 2025 GMT
        Subject: CN=A46A123648B61C86D515D2A38BF4392C2F7B4D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:63:48:03:67:1b:57:d1:9f:23:7c:06:22:
                    f6:0b:ce:0d:47:9d:21:3c:36:71:92:a5:de:45:ff:
                    ef:a3:58:b3:8a:37:fb:99:da:91:a4:80:c4:3b:58:
                    aa:2e:bd:b3:e6:98:1d:ae:b6:1d:89:dc:6e:4d:29:
                    7b:bb:0b:76:94:31:f6:a4:5f:d4:be:37:c0:fc:21:
                    ed:ea:2b:f7:88:07:dd:37:2f:84:24:83:28:f6:40:
                    f9:63:3c:c0:0f:ac:53:4d:d9:0a:00:cc:23:6f:d4:
                    dd:66:77:ac:19:de:c7:ad:8d:74:10:68:75:7b:74:
                    89:90:90:0c:18:1b:64:16:eb:1d:d9:7b:1d:04:49:
                    5b:23:8c:04:60:2c:e4:fc:f1:f6:f2:4f:cf:f2:02:
                    92:d8:9c:a2:8f:51:69:e0:ac:79:de:29:95:a5:2a:
                    27:b3:85:de:3c:72:f1:44:94:af:46:17:31:87:04:
                    d6:77:71:b4:2c:d2:10:6e:c7:63:5c:ae:ab:05:32:
                    d1:d8:bf:4e:29:ab:de:be:b9:d9:62:92:6a:11:3a:
                    0d:47:12:93:8b:f5:2d:c8:f3:c8:9d:c8:27:cf:da:
                    cf:ce:94:ed:66:f8:06:22:2f:65:c5:6d:ff:00:3b:
                    b5:d3:d9:25:0e:1b:61:88:88:16:5e:2f:f3:80:51:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:12:36:48:B6:1C:86:D5:15:D2:A3:8B:F4:39:2C:2F:7B:4D:95
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:8a:20:4d:05:b3:e6:e8:6c:6e:0c:d6:a1:13:71:85:d8:
         e7:43:4f:26:eb:59:91:16:94:ce:c0:eb:02:fd:87:00:c7:e6:
         22:90:2d:3f:bc:d3:25:bf:91:7a:cd:49:7f:43:d2:ba:f8:5e:
         41:55:e9:e0:c5:3c:a3:d0:cf:08:42:df:3c:45:ea:f1:a2:34:
         43:3e:50:42:43:dc:c9:a6:b8:37:f8:d6:ee:9e:66:33:ad:7a:
         51:65:4f:c6:99:bf:1f:7a:a8:92:fe:8a:02:17:09:b2:f7:f0:
         b6:96:78:b7:18:eb:f8:10:91:33:c9:91:cf:9b:38:a0:01:7f:
         b0:db:00:44:b0:10:a9:9a:13:61:d2:af:10:08:6a:bc:dc:5c:
         6f:5c:a5:12:49:6a:09:9f:13:40:85:6d:b3:a7:4a:a3:90:3b:
         d5:47:ef:25:96:a2:38:c8:bb:f4:7d:16:65:5a:43:47:2a:fa:
         f0:0c:50:77:b7:53:9d:74:da:18:0e:ac:b5:0e:01:fe:14:f2:
         2e:99:b1:03:35:dc:f3:7e:c6:dd:b1:51:c1:92:03:0a:00:a8:
         61:98:80:a3:02:43:52:65:9e:28:94:34:3a:14:81:24:6d:4c:
         a8:2c:70:cd:47:7f:da:d7:73:d9:97:e4:6d:e7:76:67:b1:74:
         55:33:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----