Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233362e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233362e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          jpCAsWIz4kQUinGrSZ9dCso0PNUuOTj6/uMJ0xNFj2c=
Subject key identifier:   1C:C4:9C:59:B0:D5:C1:D1:83:9B:F1:9F:79:EF:8E:68:BC:46:F9:A1
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       525FA74C8905815B3CDA775CA36F005AC213B331
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233362e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:40 +0000
ROA not before:           Tue 04 Feb 2025 18:44:40 +0000
ROA not after:            Tue 03 Feb 2026 18:49:40 +0000
asID:                     262253
IP address blocks:        181.224.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5f:a7:4c:89:05:81:5b:3c:da:77:5c:a3:6f:00:5a:c2:13:b3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:40 2025 GMT
            Not After : Feb  3 18:49:40 2026 GMT
        Subject: CN=1CC49C59B0D5C1D1839BF19F79EF8E68BC46F9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:28:e0:29:3f:a9:b0:10:ac:0f:f4:c2:58:
                    ad:a9:41:ea:c6:33:c9:aa:76:ec:80:c5:b3:d1:75:
                    f8:a3:27:c9:ec:1a:5c:9a:6a:96:36:b7:b8:c9:97:
                    7d:c9:3e:a6:71:08:ef:bf:18:b9:00:d3:59:99:95:
                    a3:3e:4e:05:4d:6e:55:e7:1f:48:40:da:be:8f:fd:
                    ad:7a:b5:9a:2f:c4:33:2f:73:13:35:f4:81:ca:24:
                    b1:9c:3b:c5:0c:b3:8f:f6:48:57:57:e0:b7:f0:d3:
                    85:70:99:9a:92:fd:ba:2b:6e:07:c8:24:f8:5a:c5:
                    df:4d:dd:a0:90:b5:29:1f:79:4e:49:c2:c8:79:14:
                    f5:d8:aa:67:65:41:d3:e0:2b:5f:b2:f9:d0:c9:84:
                    ef:23:c6:af:98:c3:de:41:01:2a:07:00:aa:cf:45:
                    84:68:d5:86:08:f8:ca:51:03:db:5c:87:b6:41:ea:
                    1c:df:c7:0f:10:fa:b6:3a:63:6e:8e:2f:22:2a:40:
                    81:68:5a:d3:68:ce:dc:7a:a2:6b:28:14:65:58:7f:
                    e8:47:0d:76:1f:4b:b8:67:49:df:40:51:65:49:bd:
                    02:87:27:e4:2c:64:6d:cf:36:d6:26:67:f5:e1:6f:
                    da:e5:2e:17:de:ce:68:ca:4b:2d:6f:fa:ab:ea:5f:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:9C:59:B0:D5:C1:D1:83:9B:F1:9F:79:EF:8E:68:BC:46:F9:A1
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233362e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:12:ad:27:e2:56:52:df:df:87:62:30:dc:e0:d6:28:89:
         1c:e3:6a:07:a6:2d:12:e6:71:88:ab:0c:e6:ba:cb:29:61:91:
         b2:7b:e3:cb:6d:56:01:65:3e:6e:9b:da:cd:85:9a:04:d4:0d:
         69:d3:b1:06:9a:68:45:ec:6c:df:69:aa:3e:45:dc:56:ad:80:
         90:27:cb:74:29:4b:1d:59:7d:8b:1f:44:46:6f:e5:3b:64:d2:
         c3:d4:d4:aa:49:52:6a:7e:89:12:d6:58:e4:5e:fc:3b:49:d0:
         3d:40:fa:f2:c7:ad:be:bd:13:1a:ac:c6:9d:3c:d2:6b:15:b0:
         f0:b6:74:b9:83:09:be:b9:8a:1f:2d:d5:77:94:e6:72:b7:de:
         92:2e:e5:e9:41:3f:9b:9d:05:87:fa:0c:73:32:ea:40:7b:81:
         a3:32:a4:7c:d8:f2:59:2b:0c:db:d3:64:f5:35:80:c4:b1:2c:
         d6:27:4a:62:97:72:5e:7e:ba:6f:3e:ec:c1:f9:1a:3c:e8:13:
         82:94:f9:4e:b4:6c:d2:62:2d:0a:63:4b:6d:95:d0:cd:42:e3:
         aa:ad:a9:fd:81:92:8e:0e:89:53:12:f8:31:da:6c:03:8d:7c:
         1b:74:cc:bd:42:ae:ac:c9:43:1b:40:4a:df:96:89:0a:01:08:
         b0:6f:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client