Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa
File:                     3138312e33382e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          fLJ4Lu4E/Zj2NmlQMfMAv9wdb8H2wIrklxwrW3vpJIk=
Subject key identifier:   C1:05:6C:AE:9D:68:1A:CF:05:2E:04:0B:C4:BA:26:B1:5A:5D:91:74
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       04F1A97805870FA38473A1D65C4F731C0DA6E2B9
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 19:59:23 +0000
ROA not before:           Tue 04 Feb 2025 19:54:23 +0000
ROA not after:            Tue 03 Feb 2026 19:59:23 +0000
asID:                     14754
IP address blocks:        181.38.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f1:a9:78:05:87:0f:a3:84:73:a1:d6:5c:4f:73:1c:0d:a6:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb  4 19:54:23 2025 GMT
            Not After : Feb  3 19:59:23 2026 GMT
        Subject: CN=C1056CAE9D681ACF052E040BC4BA26B15A5D9174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:c5:1c:7c:70:4d:3b:b5:41:39:52:bd:f5:
                    04:21:92:71:ba:ef:1f:ec:03:d3:02:d4:34:39:40:
                    31:d0:e8:bf:b6:34:20:76:3c:36:64:db:de:f6:f7:
                    44:ee:e4:46:29:f6:d4:25:9c:e6:67:bb:5e:ca:69:
                    40:ab:84:74:44:9f:2e:18:b0:44:05:0f:86:21:7f:
                    66:fc:9c:f2:f8:a9:1f:72:3c:90:69:3d:a0:9a:d4:
                    6e:1a:fa:1a:52:53:93:4f:09:d5:bf:88:bd:84:db:
                    8d:61:24:24:44:9b:9c:f7:f8:f5:97:4b:16:d8:94:
                    17:33:80:4b:01:71:44:4b:dd:de:3b:8d:4e:ad:61:
                    8a:8e:66:f4:ad:bf:8f:ff:7a:7b:7b:08:df:3d:c7:
                    5e:60:a9:55:e6:f7:69:f5:f8:ff:95:db:04:f1:cf:
                    df:27:0d:5c:99:a6:74:b2:7e:a5:6f:65:dc:d6:6d:
                    c3:10:b9:5c:72:e3:d7:5a:55:cd:a1:32:4d:6f:33:
                    2d:b5:9d:38:82:80:91:83:42:00:1f:61:11:68:11:
                    05:91:2e:41:c4:5c:a9:df:f0:9a:ee:16:71:e0:74:
                    7e:9a:ee:50:d5:50:b3:8d:77:b0:04:b7:97:0b:39:
                    62:bf:72:3a:54:25:96:e4:48:6b:36:42:11:b5:a2:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:05:6C:AE:9D:68:1A:CF:05:2E:04:0B:C4:BA:26:B1:5A:5D:91:74
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:b5:ad:f0:5c:42:56:05:95:e8:5f:27:b5:29:32:11:5d:
         db:d4:d6:39:cf:2d:69:f6:bf:b2:3f:42:fc:ab:1f:28:5c:09:
         7d:c8:1a:7c:7c:7a:e5:bb:e4:2f:ef:1a:49:e5:bd:e0:6d:26:
         4f:ac:88:85:f4:56:9c:fe:06:55:27:e9:4d:03:b9:a1:cb:a3:
         64:2f:ba:6b:02:0a:99:ec:fb:43:bb:1f:f0:26:af:ef:5b:4e:
         9d:cd:69:12:5f:43:2c:49:3d:17:cc:fb:43:be:3f:b0:4c:19:
         d5:58:03:2d:29:3d:17:3f:c7:1d:0e:c9:f0:76:17:2a:3c:d0:
         50:c4:e9:a1:a6:3e:4f:1c:84:3d:2c:af:94:67:de:bf:d4:23:
         3b:14:56:79:59:6f:b5:3a:98:71:53:1f:98:bb:c1:ea:a7:80:
         a8:ef:b4:d2:c0:00:e2:a1:3b:e0:c0:e3:f4:09:f3:ef:ba:98:
         14:77:20:08:97:c9:51:10:5b:ce:d1:50:53:90:5a:c5:28:c7:
         1a:1f:b9:91:11:1c:b3:c3:31:0b:f2:d0:fa:90:d3:4a:e7:e3:
         34:82:9c:69:6a:95:ff:5f:01:46:30:7f:a1:25:f0:0e:d5:34:
         35:62:8d:6c:f6:1a:22:e4:1d:8a:fe:0f:65:06:77:82:5d:60:
         c8:2b:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:14 2025 by rpki-client