Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa
File:                     3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa (raw, json)
Hash identifier:          UwoD4eemDgS/ys84lEpXK/0316LwaAbesSn2Th/OoqM=
Subject key identifier:   E8:E5:58:3B:1B:16:D3:4B:13:4F:00:41:F5:D0:C2:B7:B3:F3:A4:F5
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       453FDDDCAD7D99D5A8E24D628FD81E40963BF9C4
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa
Signing time:             Tue 04 Feb 2025 18:49:40 +0000
ROA not before:           Tue 04 Feb 2025 18:44:40 +0000
ROA not after:            Tue 03 Feb 2026 18:49:40 +0000
asID:                     267749
IP address blocks:        181.224.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3f:dd:dc:ad:7d:99:d5:a8:e2:4d:62:8f:d8:1e:40:96:3b:f9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:40 2025 GMT
            Not After : Feb  3 18:49:40 2026 GMT
        Subject: CN=E8E5583B1B16D34B134F0041F5D0C2B7B3F3A4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:d0:e1:af:cf:9a:d4:32:5d:d0:27:fa:75:
                    f1:3e:9e:f5:d6:72:86:63:8b:5a:5b:2f:68:1b:04:
                    fd:22:c7:80:20:71:61:4f:cd:bf:fa:a6:ff:dc:83:
                    04:01:01:c2:90:8f:49:8e:15:99:b7:9e:23:d6:63:
                    d5:fa:67:61:20:25:68:bd:d0:f9:84:47:45:24:b1:
                    a4:97:f2:2e:52:17:05:21:db:58:60:28:03:b0:28:
                    53:e2:8c:97:fd:9d:84:18:74:78:39:8e:b2:4d:e8:
                    63:45:b4:72:05:d7:d4:2b:25:cd:94:6b:fc:37:1b:
                    8d:73:84:9c:85:36:db:8c:75:f0:ab:ea:66:d4:67:
                    0f:09:47:ce:3c:cb:3b:0f:2f:af:24:57:41:77:53:
                    9e:14:28:51:24:20:b2:ef:44:d0:84:40:f6:1c:57:
                    6f:b0:50:ce:c2:2d:3e:62:33:70:89:c6:b4:41:85:
                    90:3c:36:04:bc:c0:d4:78:f9:fc:7d:ad:9c:24:c7:
                    64:7f:ec:0a:e6:c1:e3:31:a7:63:cb:2b:05:af:ae:
                    14:bc:9c:c9:76:61:d0:31:1f:3c:be:13:5b:93:5e:
                    2f:82:21:2a:67:29:5c:f6:9c:46:64:b9:1a:ee:43:
                    cd:cf:b6:dc:66:ba:5b:88:d2:eb:a8:d6:53:a5:b4:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:58:3B:1B:16:D3:4B:13:4F:00:41:F5:D0:C2:B7:B3:F3:A4:F5
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:82:79:f3:03:85:19:e5:ec:2f:c7:42:62:10:a4:81:f9:cb:
         ca:ed:16:e4:34:ea:18:99:e6:60:ec:9a:78:cc:ec:62:02:55:
         48:68:84:12:fa:56:0d:15:b7:ad:bb:03:f7:4c:1f:c9:86:df:
         df:41:2c:46:0d:a6:f6:63:4b:9e:97:a8:34:7e:66:eb:6f:0d:
         31:47:83:c4:13:b9:2c:c1:13:96:c0:b3:dc:e3:ca:05:d8:99:
         cf:37:bc:d6:79:c0:fb:4b:5b:40:ed:8c:70:2e:42:79:df:78:
         2d:5a:eb:59:c2:a1:1b:e1:80:ac:4e:28:b7:20:99:39:2b:3a:
         dc:45:31:4f:b5:53:06:cc:2b:43:84:3a:7c:36:da:f3:ab:77:
         46:fa:ae:3f:fc:ef:b3:12:5f:bf:26:f6:71:78:6a:85:2a:0d:
         a3:4b:e0:67:a4:3e:46:06:3d:a6:d8:e9:52:31:be:e7:c2:56:
         93:98:d9:22:06:ad:ac:52:07:9e:75:b7:76:71:4a:c0:df:75:
         2d:69:f6:35:19:e4:43:ea:06:6e:ee:7c:47:ac:6e:97:bb:01:
         e9:67:ac:ed:4d:34:32:12:b0:d6:35:b7:b4:b3:38:40:49:07:
         11:c1:d6:a5:88:6a:b9:19:84:1d:1c:32:93:ba:76:2f:84:6f:
         52:3f:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:32 2025 by rpki-client