Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234332e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234332e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          3smVLmOsN+Y77yFu3OFWAeJJk1qSjf/lf+fGAXrvFpo=
Subject key identifier:   CC:F3:4F:6A:0B:32:97:A2:5B:41:06:20:41:A6:46:97:24:B7:DA:1C
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       54921C6CD11A2BDD5B5028275FC76BAE5380C289
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234332e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:34 +0000
ROA not before:           Tue 04 Feb 2025 18:44:34 +0000
ROA not after:            Tue 03 Feb 2026 18:49:34 +0000
asID:                     262253
IP address blocks:        181.224.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:1c:6c:d1:1a:2b:dd:5b:50:28:27:5f:c7:6b:ae:53:80:c2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:34 2025 GMT
            Not After : Feb  3 18:49:34 2026 GMT
        Subject: CN=CCF34F6A0B3297A25B41062041A6469724B7DA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:ef:ac:35:a2:c4:8c:88:d3:49:e3:5f:2f:
                    f7:96:e2:f7:30:24:16:ba:56:05:82:fb:29:6d:f4:
                    b4:69:64:77:02:9a:d3:d3:d6:ef:1f:2f:70:d4:95:
                    89:ad:2e:01:48:fc:a0:8f:95:18:9b:b4:4e:8d:c9:
                    21:4e:bb:67:5f:d3:91:52:82:7a:06:da:c8:98:33:
                    43:c7:44:09:d3:a9:bd:19:95:d3:d3:82:51:fe:c4:
                    96:c8:a1:59:42:0a:77:4f:ed:04:5f:3f:a8:67:60:
                    6c:ab:10:0b:57:ea:51:cc:0d:bc:c8:87:01:a3:e3:
                    b4:64:8f:6d:5a:56:bb:c6:1b:4d:6a:fa:d9:83:d6:
                    4d:ba:fa:a2:09:b1:13:9e:f8:24:d4:a6:2b:12:bc:
                    87:70:94:f6:71:e4:2b:ed:0b:24:df:39:17:cb:24:
                    1b:4b:9c:ab:eb:a3:3c:a8:f6:34:48:bc:76:3e:5e:
                    61:5b:31:4e:63:22:21:c6:53:1a:62:b7:b5:3a:3f:
                    c9:ee:43:44:4e:cf:de:2c:5d:3c:39:e0:5c:40:92:
                    ed:8d:9e:09:fe:a7:6e:b3:a3:f6:31:fd:50:e4:ae:
                    46:f0:3a:92:d8:eb:59:29:c1:4d:c2:c4:a7:a7:91:
                    c5:16:b4:cd:f1:ab:10:cb:4c:7f:ed:38:b1:19:c0:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:4F:6A:0B:32:97:A2:5B:41:06:20:41:A6:46:97:24:B7:DA:1C
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234332e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:a1:eb:ec:10:ae:a6:db:3d:6b:37:34:22:3d:62:ba:13:
         6c:a0:a6:ab:9b:5a:cd:be:b9:5c:75:f4:4f:52:28:bb:f0:9b:
         12:46:02:75:08:8c:07:b7:a1:1e:d9:10:9f:8f:b3:b9:34:47:
         04:13:11:3d:38:aa:7e:24:c7:ce:2d:08:9c:fb:aa:4a:a7:bf:
         a2:8a:9e:63:48:c3:a2:40:e2:aa:00:03:d9:1f:02:10:ba:67:
         b5:3d:88:7d:52:0d:c5:8e:1c:a2:b1:8a:1a:0b:e7:ea:e9:44:
         8e:37:13:fb:f7:94:78:5e:92:cd:e6:96:58:c5:84:5c:30:f9:
         76:92:d7:62:02:d7:00:e1:00:44:f1:1f:97:ab:9d:ef:11:ea:
         7e:c0:ed:fa:da:43:23:da:c3:45:b4:be:d6:57:2e:69:fb:ce:
         62:eb:f2:fb:2a:1e:69:53:8d:99:d9:00:8b:0a:91:8c:8c:dd:
         06:64:85:e6:01:c7:fa:ac:0a:6c:3a:32:2c:4b:5f:d8:ae:e5:
         00:ec:8e:40:d8:8c:6d:7a:80:ae:70:69:c0:ab:85:6f:c6:76:
         9b:de:cf:35:39:f1:6a:a4:4d:fd:58:3d:35:33:6a:4b:25:6e:
         54:9b:46:b4:b4:cd:75:79:08:18:cd:2e:cf:28:a8:0a:f3:2f:
         e7:38:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:00 2025 by rpki-client