Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
File:                     3138312e34342e302e302f31342d3234203d3e203237373437.roa (raw, json)
Hash identifier:          UMHTqArhexQrs/837jD60FESX0EkI0Iu2Y6APJMk3Z4=
Subject key identifier:   79:4F:F5:6E:50:69:C0:58:A9:49:4A:19:04:8C:EA:08:D5:E9:19:76
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       48EBFB1E5E9F21B50F8F309615ED591E47609B22
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
Signing time:             Tue 04 Feb 2025 18:34:51 +0000
ROA not before:           Tue 04 Feb 2025 18:29:51 +0000
ROA not after:            Tue 03 Feb 2026 18:34:51 +0000
asID:                     27747
IP address blocks:        181.44.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:eb:fb:1e:5e:9f:21:b5:0f:8f:30:96:15:ed:59:1e:47:60:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Feb  4 18:29:51 2025 GMT
            Not After : Feb  3 18:34:51 2026 GMT
        Subject: CN=794FF56E5069C058A9494A19048CEA08D5E91976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:f9:ad:97:0c:14:20:48:f6:2b:ef:b1:d9:
                    b1:5d:a6:73:f3:a4:05:89:fb:c9:f3:8e:0e:e9:17:
                    a5:1c:95:4b:5e:fd:61:b6:83:31:dc:33:cb:ec:d4:
                    ab:a7:48:36:e4:34:bc:1c:66:cd:28:eb:82:0e:1c:
                    d8:cf:23:91:b3:f1:d4:fd:a9:c4:c8:ee:f2:b4:91:
                    f8:7b:59:0f:82:8c:32:c0:28:09:a3:7c:4a:5a:c8:
                    c2:ce:38:ad:8f:97:75:88:ce:cc:1c:b9:87:8f:e2:
                    27:cf:8e:e9:f9:28:f9:23:f9:c1:b4:d4:dc:50:a6:
                    1c:9c:4e:55:2a:e0:43:96:67:28:8a:7d:b3:89:e0:
                    99:89:45:44:1c:71:6f:fe:c1:05:8f:c3:3d:12:11:
                    c3:a9:34:f7:b3:61:d9:33:39:a2:d4:7b:ee:49:22:
                    7b:e9:5d:3d:3e:28:15:e0:b9:05:ad:87:5a:4f:fe:
                    33:6c:82:86:95:12:3b:cc:09:0f:ac:e0:2c:19:d3:
                    3e:cd:6d:ce:06:9f:be:9b:ed:85:85:53:54:41:66:
                    95:77:4d:48:10:ac:66:7d:e7:06:4d:a0:5b:aa:23:
                    8f:54:f8:dc:33:38:d7:e2:f8:3c:fa:e6:c1:91:16:
                    68:8a:82:f0:22:7d:bf:5a:ed:56:a7:e6:53:bc:8f:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4F:F5:6E:50:69:C0:58:A9:49:4A:19:04:8C:EA:08:D5:E9:19:76
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c9:6a:e8:81:80:c9:6e:b9:42:0b:46:bb:df:0d:29:f5:15:1f:
         04:64:71:d4:e1:31:d9:1d:4b:99:ce:5e:01:b1:a0:c0:41:fd:
         a5:99:51:da:cf:c5:5d:48:fe:64:59:04:23:75:23:7a:b1:7c:
         a6:67:a5:19:49:61:1e:f0:68:c3:f2:09:76:f9:c7:35:49:05:
         49:93:dc:34:76:bc:4c:1a:ef:80:62:8d:ab:40:ae:9f:37:d2:
         88:0a:88:53:f8:c8:a5:eb:c6:5f:80:15:6f:6a:97:a6:06:66:
         6e:ca:b9:cb:5a:79:f6:0f:c6:72:36:ab:4b:dd:7f:e9:c4:fd:
         b5:af:f3:db:6d:14:dc:18:ca:53:a9:75:97:14:e8:2e:9f:fa:
         9d:85:6c:94:8d:97:e0:f3:5b:59:ed:9d:0e:e6:e5:b6:a5:13:
         8b:62:72:e5:a2:d1:46:f0:1a:75:ed:9f:af:34:95:16:41:68:
         6d:b8:b5:4d:31:f0:68:c2:ef:c6:1a:d2:4b:8b:ac:63:c5:dc:
         e0:35:b5:0c:44:27:0f:84:58:fe:74:08:dc:43:32:63:f9:a2:
         c7:f6:f1:f0:c1:a0:5f:6a:c9:7c:c5:bb:66:fd:57:03:18:0d:
         80:9b:a7:96:2c:56:55:3b:de:f0:b3:d9:c2:3e:39:33:67:a6:
         32:ab:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:48 2025 by rpki-client