Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e20323632323237.roa
File:                     3138312e3137382e302e302f31352d3234203d3e20323632323237.roa (raw, json)
Hash identifier:          5ixz0YNmEE6LKEA5fBspJG/QOgxaJModk0O1ZiTJFKA=
Subject key identifier:   84:16:56:1D:D4:68:21:45:D5:76:89:DF:13:1B:4A:59:17:4E:FD:B2
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       73C030612F9162096C53CEE85174FD01A789FECC
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e20323632323237.roa
Signing time:             Fri 14 Mar 2025 14:15:00 +0000
ROA not before:           Fri 14 Mar 2025 14:10:00 +0000
ROA not after:            Fri 13 Mar 2026 14:15:00 +0000
asID:                     262227
IP address blocks:        181.178.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c0:30:61:2f:91:62:09:6c:53:ce:e8:51:74:fd:01:a7:89:fe:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:10:00 2025 GMT
            Not After : Mar 13 14:15:00 2026 GMT
        Subject: CN=8416561DD4682145D57689DF131B4A59174EFDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:16:1e:8f:af:3d:4d:41:d6:54:59:d6:39:ff:
                    f9:8f:db:1b:29:e3:61:f6:8d:61:93:4b:d8:9f:8e:
                    02:01:35:f9:c5:f2:50:e5:31:7c:c8:e2:28:9b:84:
                    3a:f3:90:d5:ae:4d:1d:c2:60:24:0f:3d:74:de:35:
                    d2:c2:1c:dc:98:fc:71:f9:d9:55:5b:f0:c9:b7:96:
                    35:97:a4:eb:ad:97:ee:08:c9:25:62:0c:6c:6a:e9:
                    e7:9d:ef:bc:b4:b7:9c:48:43:ec:40:3c:2a:66:b5:
                    81:69:bc:6a:92:03:b8:ff:a1:be:66:37:df:54:12:
                    3b:26:e8:c9:92:f1:c8:fd:f1:b0:d0:6e:80:4a:1f:
                    96:a4:e3:d2:ec:bc:d6:cb:95:9e:c7:18:c0:b2:e8:
                    ef:86:68:b2:e4:57:83:57:8e:6b:e7:43:62:a6:99:
                    e1:68:25:9d:4e:1b:12:72:42:c1:b5:46:3b:4c:dd:
                    2f:3f:81:87:bb:80:b6:76:d4:e8:f5:27:9f:0f:d1:
                    45:62:e3:12:13:33:b9:6d:51:aa:48:bf:2c:9d:c9:
                    8d:e2:7b:34:c2:86:44:42:91:85:d4:55:91:da:ff:
                    a1:e5:2f:49:49:ea:0f:21:e0:d0:87:65:6e:c5:a0:
                    6f:f2:ed:37:06:df:7f:93:6f:76:fb:89:8b:2f:49:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:56:1D:D4:68:21:45:D5:76:89:DF:13:1B:4A:59:17:4E:FD:B2
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:9f:b7:bc:07:ca:00:2d:91:bb:3d:8b:10:eb:f2:95:47:
         4b:d6:6d:36:72:8c:6d:fd:34:cd:4e:e8:7f:e5:35:a9:7f:4b:
         a4:7c:6f:2c:7e:86:a4:93:11:06:89:a7:16:11:e7:e3:46:e9:
         63:73:c1:72:93:bd:f3:07:9f:09:56:f4:7a:9a:88:e6:52:bc:
         30:0e:07:c3:ee:da:d4:6b:48:39:77:ce:8f:a8:07:0f:39:55:
         40:6a:bc:1e:7e:bb:bc:98:11:87:2a:b5:fe:f2:d3:f5:3d:60:
         10:37:2f:ff:39:9f:f0:56:e6:ed:54:38:81:82:18:5b:2d:e0:
         fc:a5:2c:e7:d9:30:36:72:2f:72:4b:a4:86:26:e5:6e:0d:b2:
         32:b1:cf:54:a5:ba:de:8d:15:99:aa:36:0f:8a:9b:c8:af:aa:
         ac:c6:13:9c:75:9f:e7:af:ce:c4:4c:ee:a7:cd:3e:53:5c:bd:
         1d:8b:09:83:17:be:65:09:e9:32:2d:95:c0:a7:69:a4:e0:c1:
         50:fb:1b:fc:34:48:37:8e:56:6c:61:49:15:a4:d0:6d:c4:0d:
         4c:95:a2:d0:e7:10:f2:28:ba:1e:4a:97:09:f6:7f:fc:75:b9:
         b6:02:6b:af:5e:df:06:25:d9:15:4b:cb:9c:07:a6:c0:0d:d7:
         db:9e:b9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----