Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa
File:                     3138312e34322e302e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          xbRznNrxmqacH8h3HJuA6FIAw6L9JMVisfRppSvF9Mo=
Subject key identifier:   2C:BB:D9:3E:13:1A:83:C5:4E:A0:CC:B5:61:A4:ED:A3:F6:D3:74:80
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       7ABF8033D21A4187B3A87CFC90E54A66D5C42D57
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 18:44:25 +0000
ROA not before:           Tue 04 Feb 2025 18:39:25 +0000
ROA not after:            Tue 03 Feb 2026 18:44:25 +0000
asID:                     27651
IP address blocks:        181.42.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bf:80:33:d2:1a:41:87:b3:a8:7c:fc:90:e5:4a:66:d5:c4:2d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:25 2025 GMT
            Not After : Feb  3 18:44:25 2026 GMT
        Subject: CN=2CBBD93E131A83C54EA0CCB561A4EDA3F6D37480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:3d:64:dd:26:7b:66:c4:a8:6a:e4:d6:0c:
                    12:8a:ff:e4:3d:60:2b:76:c2:62:92:bc:6c:29:bc:
                    31:6c:ae:d2:c4:aa:71:71:65:59:c4:2e:5f:3e:e9:
                    ad:60:66:7a:43:f2:d5:a6:f6:eb:99:cb:d1:1c:fb:
                    7d:fb:67:18:9b:0a:c9:b9:ab:93:f6:b2:88:4d:a7:
                    07:cc:9a:5b:32:23:e2:08:94:ac:68:b7:14:65:7e:
                    80:f0:0c:cd:a3:ca:4b:13:71:be:29:1f:0c:0b:35:
                    51:17:6d:be:46:5e:cc:9e:3f:ab:74:44:2c:74:e5:
                    b4:58:71:ee:b8:95:6e:ee:a1:64:3f:01:dc:59:ae:
                    7d:29:b6:f8:b3:d3:fe:0b:f1:bf:62:96:ab:e3:2e:
                    3d:da:c0:f5:1a:c1:81:9d:dd:0d:9f:e4:39:0c:54:
                    5c:6b:53:25:81:d6:a1:e8:dc:a4:54:14:4b:9e:53:
                    b6:5b:db:5d:75:53:17:4c:d2:b2:2d:80:99:3d:08:
                    4b:96:0c:61:d4:ee:96:89:7f:0c:55:a8:88:a9:d1:
                    71:e5:0e:e7:3c:b8:f5:cd:a3:ea:96:d4:1e:b1:12:
                    1b:55:4e:07:43:d8:bc:4b:d1:47:93:d6:1a:ec:aa:
                    4e:c3:95:81:bc:2a:5d:28:2f:f2:e3:15:43:ed:b1:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BB:D9:3E:13:1A:83:C5:4E:A0:CC:B5:61:A4:ED:A3:F6:D3:74:80
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         01:38:5b:80:3e:66:fd:f5:bc:36:cc:a9:a4:89:bf:00:23:10:
         61:1b:a3:5c:86:b7:c7:92:f7:55:7d:55:14:81:82:e8:82:10:
         6d:13:43:b6:1d:74:6d:ad:45:7d:cb:19:bf:72:32:c8:77:e9:
         b3:ab:e7:80:00:56:ad:55:8a:df:76:c8:92:97:b9:a3:44:da:
         e8:35:18:84:db:29:50:6c:19:d4:e4:72:f2:34:93:8b:f9:45:
         db:78:9b:bb:18:2e:f8:16:fa:b3:f8:94:fa:e4:ec:45:91:ac:
         91:93:67:15:9c:42:5b:23:04:9a:2b:5c:2f:55:b1:41:f9:89:
         b5:a0:c8:61:52:e0:88:d7:6d:ba:a5:67:a0:82:c8:b3:15:25:
         36:79:12:bd:57:0f:0a:42:a5:ea:34:b9:16:e0:ab:d8:32:1b:
         e0:53:36:8f:07:74:43:98:5a:60:9d:55:83:0b:ef:3c:de:a9:
         49:7f:d6:c6:19:b4:bd:ca:41:8b:d1:8b:1c:2a:f7:41:7b:e4:
         f9:d1:96:1a:c1:19:14:11:e0:08:cf:9e:3a:39:19:91:88:7a:
         37:a3:59:92:8d:d8:78:f6:f1:6c:ce:62:b9:55:7f:12:5a:23:
         24:27:c2:4d:fb:d0:cd:b9:cf:a6:e9:fd:ad:b5:ff:f9:81:6c:
         bc:b9:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----