Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138312e3231322e36302e302f32342d3234203d3e203139313936.roa
File:                     3138312e3231322e36302e302f32342d3234203d3e203139313936.roa (raw, json)
Hash identifier:          BX4Q7gqMRMxs5ArQeSuXhsXghTOCJnJ3HbHN0mTi00I=
Subject key identifier:   38:3E:BF:56:53:0D:FA:66:D4:94:9A:6E:35:C6:30:A3:9F:CC:D9:4F
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5CFD34AA35F32855F8DA12F180F062E7CE516C80
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138312e3231322e36302e302f32342d3234203d3e203139313936.roa
Signing time:             Tue 04 Feb 2025 20:00:57 +0000
ROA not before:           Tue 04 Feb 2025 19:55:57 +0000
ROA not after:            Tue 03 Feb 2026 20:00:57 +0000
asID:                     19196
IP address blocks:        181.212.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fd:34:aa:35:f3:28:55:f8:da:12:f1:80:f0:62:e7:ce:51:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:57 2025 GMT
            Not After : Feb  3 20:00:57 2026 GMT
        Subject: CN=383EBF56530DFA66D4949A6E35C630A39FCCD94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:da:fe:db:27:05:fa:34:be:37:2d:5f:73:
                    8c:7c:46:5e:2b:2e:36:5c:fb:95:b9:81:05:eb:c8:
                    cc:c8:18:75:16:9a:72:22:08:da:55:ad:6e:3f:5a:
                    37:9f:74:12:9e:73:df:06:0d:68:1c:dd:f7:32:e0:
                    45:37:26:56:8a:a5:5c:6d:71:78:4a:6c:d5:e6:f0:
                    6f:78:14:51:ff:43:d3:bc:10:34:45:79:71:c1:f2:
                    01:5a:9a:00:4c:39:4a:bd:bc:69:3f:93:a8:1c:ea:
                    da:ca:32:53:98:9a:c4:23:c7:a3:de:a3:4b:3e:fd:
                    fc:23:70:f6:39:89:c5:31:29:3e:cf:48:60:a2:c3:
                    89:ad:e9:91:8e:df:86:db:3a:41:58:a2:ad:5a:d3:
                    88:60:d8:84:06:d1:f7:ec:ca:45:8b:00:3d:4b:62:
                    9e:d9:13:8a:76:7d:f6:37:aa:95:d7:8b:3b:c9:c8:
                    79:a8:d7:11:1d:a4:c4:85:d8:ef:ee:ba:e2:c5:76:
                    49:5f:dc:7f:55:4d:40:9c:c7:6c:cb:bc:9e:fb:05:
                    a7:5c:33:78:1d:3d:39:12:15:21:99:cf:be:24:ed:
                    e7:ce:df:77:c3:7d:1c:83:d7:8b:f2:dd:9d:8c:7f:
                    a8:46:77:a6:f7:ac:8d:81:d2:fb:1b:89:97:0a:57:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3E:BF:56:53:0D:FA:66:D4:94:9A:6E:35:C6:30:A3:9F:CC:D9:4F
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138312e3231322e36302e302f32342d3234203d3e203139313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.212.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:55:7d:bb:ee:65:4f:e2:e4:de:cd:d2:7b:99:77:75:bd:
         6a:d3:da:69:90:91:bc:cb:51:c1:47:8b:1d:1f:5f:5e:ad:63:
         bf:ee:01:3a:2b:cf:e0:ed:3d:3f:05:45:cb:3b:55:ab:c2:6d:
         1f:22:97:22:ea:c9:49:4c:6c:8d:70:67:ee:ce:1a:df:07:b4:
         c3:b1:91:64:39:e5:1f:ba:7b:66:e8:88:00:cc:3f:28:84:58:
         ac:4d:6b:90:54:f6:84:e7:ea:91:ce:2a:64:a9:7d:fb:7f:a4:
         81:47:90:0d:80:8c:41:22:a5:2a:b2:9e:55:f9:a5:a3:14:e4:
         c4:6b:52:cf:29:c0:93:ec:5e:24:3b:e8:1f:ed:7b:aa:28:a5:
         a3:0f:79:c3:79:1b:58:2c:4d:6c:a5:ab:df:0b:73:cf:22:2d:
         1e:33:0d:de:7d:6c:2a:d8:0a:92:21:60:ec:a9:6a:16:f3:45:
         a6:07:9c:86:c2:89:30:4e:5d:7b:02:16:6f:6c:d0:44:fd:57:
         74:bc:93:31:da:17:fc:6e:42:85:e6:e0:4a:ae:c9:6b:84:b0:
         98:a6:b9:f2:a7:a6:66:a8:ce:18:92:15:a9:2a:44:05:77:b4:
         08:a8:97:50:6a:eb:76:e0:eb:97:8b:e0:8d:38:3a:7b:fb:a9:
         5a:f7:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:47 2025 by rpki-client