Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233312e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233312e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          SU45Des9//41tY1LsPy9uXjy4OcsL+noJGzqIe7Ak3M=
Subject key identifier:   06:16:72:15:F7:1A:A7:1E:98:6D:07:BB:8C:EE:86:9E:EA:10:F1:21
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       3F8E8D1377D5F39030D1CE68927B6BF727C4494A
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233312e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:42 +0000
ROA not before:           Tue 04 Feb 2025 18:44:42 +0000
ROA not after:            Tue 03 Feb 2026 18:49:42 +0000
asID:                     262253
IP address blocks:        181.224.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8e:8d:13:77:d5:f3:90:30:d1:ce:68:92:7b:6b:f7:27:c4:49:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:42 2025 GMT
            Not After : Feb  3 18:49:42 2026 GMT
        Subject: CN=06167215F71AA71E986D07BB8CEE869EEA10F121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:d4:f8:ab:b6:3e:72:cf:20:aa:f3:b6:c9:
                    2f:78:28:56:67:cb:c7:a0:c3:87:ce:55:49:7c:64:
                    94:c6:75:80:65:da:09:71:0b:8c:3f:84:1e:42:9b:
                    19:60:6d:8e:3d:1c:6b:ec:af:f2:c4:71:58:94:bb:
                    6a:89:34:6f:55:d0:86:ee:6c:e0:60:ea:1e:9f:c8:
                    e2:d6:41:15:10:b6:8f:1d:64:5f:f7:11:07:6f:7c:
                    e5:4a:3f:d2:6e:d5:6f:26:4e:fd:59:1b:5f:b9:92:
                    fe:3c:61:73:e6:77:fa:44:cf:27:ee:35:bf:92:c5:
                    c2:c5:30:a0:6a:9c:84:fe:65:e6:34:77:e0:3c:46:
                    4f:89:91:70:bb:47:4a:16:d3:9e:87:85:b5:e1:6e:
                    cc:aa:49:78:5a:1a:c1:f5:b7:55:da:db:e6:2f:97:
                    e7:3a:a7:40:a7:e0:ca:e8:33:12:44:38:b0:07:a7:
                    fe:2d:f6:03:f2:e4:01:9d:77:97:8b:14:61:c2:ae:
                    a9:a4:77:64:f6:cb:7c:fa:c2:e8:74:ff:b4:0d:08:
                    cf:fb:e1:78:c5:de:c0:df:cc:bc:5c:e8:aa:2e:c9:
                    78:35:84:5b:8d:28:b4:e4:7c:9a:c9:a4:de:9c:ae:
                    93:f4:08:48:5e:ce:79:fe:77:d2:e5:4e:df:59:16:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:72:15:F7:1A:A7:1E:98:6D:07:BB:8C:EE:86:9E:EA:10:F1:21
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233312e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:c7:a6:fe:e2:68:2f:27:28:cf:cd:90:7d:f6:a0:0a:9e:
         a7:82:57:17:7d:41:00:97:7e:61:b9:e7:6e:32:85:0f:d5:49:
         8a:3b:bd:2d:34:48:f4:ef:ed:89:8a:8f:cb:ff:f6:e3:c2:29:
         79:43:ed:9d:7c:3f:eb:64:00:4e:8a:b4:22:94:62:90:f9:2e:
         9d:b6:c4:e2:dc:5e:d0:c6:ae:47:96:f4:af:b9:8e:53:f9:e0:
         e5:2f:bd:62:d4:b2:39:91:63:96:82:4f:5b:17:d1:7d:86:f9:
         ae:54:18:68:42:10:ae:be:c4:4a:9c:72:0d:3b:92:bf:07:48:
         f8:43:62:cc:11:06:8d:e9:53:df:f5:7f:d3:3c:bf:8c:89:e3:
         89:28:1a:9d:61:00:78:14:32:e5:16:ae:7b:30:66:d0:26:48:
         9d:14:91:c7:6a:1d:d7:48:7c:92:36:99:5e:0b:6a:51:ad:6c:
         2f:a6:6e:e6:b5:85:84:3e:ca:42:32:8d:56:f8:a5:b6:2b:d4:
         53:2d:3d:84:92:f3:6f:69:d7:97:58:dc:c1:ba:3c:82:3c:8e:
         e6:ec:5d:24:46:e1:12:55:ef:5c:0a:fe:97:cd:4c:3d:bf:08:
         70:34:a3:6b:ac:8c:99:19:7a:01:a1:57:ce:4c:41:34:80:5a:
         fd:3d:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:07 2025 by rpki-client