Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa
File:                     3138312e3137382e302e302f31352d3234203d3e203134373534.roa (raw, json)
Hash identifier:          cDYdQ286v2Snn8p89ZsAluHRLsDEs13sVCpfc7mNWBU=
Subject key identifier:   6B:B9:78:83:37:0E:DB:E1:14:5A:05:45:85:A8:AA:FE:A6:5D:DE:99
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       472FB564C76B50DB61681DB7D539EE6C7E23303B
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa
Signing time:             Thu 13 Mar 2025 23:15:00 +0000
ROA not before:           Thu 13 Mar 2025 23:10:00 +0000
ROA not after:            Thu 12 Mar 2026 23:15:00 +0000
asID:                     14754
IP address blocks:        181.178.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2f:b5:64:c7:6b:50:db:61:68:1d:b7:d5:39:ee:6c:7e:23:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 13 23:10:00 2025 GMT
            Not After : Mar 12 23:15:00 2026 GMT
        Subject: CN=6BB97883370EDBE1145A054585A8AAFEA65DDE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:fb:56:6e:c6:ca:1c:19:ce:f9:6a:a7:c1:
                    8d:09:28:6e:6f:d2:5b:08:c8:10:b1:14:9d:82:0d:
                    34:4f:a4:63:79:08:4b:2a:84:57:f8:8f:dc:6c:fd:
                    6a:fc:db:94:dc:79:d2:4a:a0:2d:74:1c:08:3e:de:
                    b8:fa:35:ef:e7:54:39:d9:ab:83:dd:82:a3:a3:44:
                    af:59:cf:3b:16:93:f7:c2:e7:1a:e7:14:ae:d2:11:
                    49:64:b9:b0:18:b3:51:7b:05:1a:34:9a:7a:e9:13:
                    b2:a9:d3:4d:85:7a:9c:23:dc:26:9a:64:8e:8a:68:
                    5a:21:2c:da:ad:a4:fb:ad:05:fa:ea:26:bf:58:b9:
                    bb:7a:3e:9a:c2:36:b9:5c:ca:c6:5a:35:61:e1:01:
                    5f:08:94:16:b1:c6:55:a5:f6:7f:5a:d9:15:a0:8e:
                    a3:84:e0:c1:00:dc:02:63:da:9c:b7:1f:21:2f:dc:
                    a8:8c:25:4d:e7:50:5c:20:87:1e:4e:c6:ca:a0:c1:
                    ca:f0:7f:7a:ab:ed:84:ae:b6:0b:7e:e3:46:b5:b4:
                    ba:a2:93:b3:96:f6:e0:3d:cd:38:5b:64:71:6e:07:
                    e6:3b:97:30:b0:44:3a:ad:ee:fc:32:f2:86:24:1c:
                    cd:6c:cf:3d:31:6e:21:50:8a:b4:eb:ab:2d:de:37:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:78:83:37:0E:DB:E1:14:5A:05:45:85:A8:AA:FE:A6:5D:DE:99
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:18:30:2c:74:93:66:61:98:6c:5a:93:e7:3b:20:11:5c:
         01:59:7c:04:58:de:a0:ac:73:8f:aa:4f:1b:1d:e6:8a:b3:58:
         62:e6:2c:27:04:88:fe:e1:52:3b:9e:13:ab:88:3d:91:0f:7e:
         e4:7d:2a:94:4a:52:c0:e7:3e:c5:03:01:50:1c:5f:62:48:47:
         8e:b2:5a:65:4c:d2:b8:c0:6c:f5:fa:45:d1:a5:47:fa:b3:fc:
         fb:91:c4:50:1e:72:e4:e4:81:40:ff:33:0f:89:72:b9:3b:04:
         d9:0c:50:69:fd:54:13:00:12:72:97:d8:39:f0:6c:ea:76:ca:
         15:9a:5d:ef:8f:43:4a:19:05:34:0a:da:7e:aa:25:10:f2:62:
         a6:44:a6:be:9c:4b:1f:f6:fe:d5:91:b0:77:69:6b:f6:bd:7b:
         42:3a:c1:b1:6a:6c:ba:9b:b8:5c:46:73:02:b1:1e:e5:32:e2:
         c3:2a:a6:c7:4d:c5:87:9e:11:9f:4b:fa:de:08:9c:c9:8d:a9:
         5f:c2:da:97:90:27:4c:86:c8:0e:19:43:29:59:b4:40:7c:19:
         9b:55:67:a0:1c:e7:80:84:01:77:76:ff:09:95:64:6f:45:85:
         89:4d:25:ca:44:ea:1a:29:cc:99:ff:e5:0c:34:0d:83:77:45:
         06:58:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----